Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /nM0XjYXqsLrV5hpHH3u+aJjDdnwiMVyCVnRgpOGzEI=
Subject key identifier: 5D:79:5F:9D:27:F5:69:87:EB:B6:83:05:A8:BE:17:1A:E2:02:3F:B5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4BB1F208A17BAF2488A553139ABBE1CC554FCD21
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:19 +0000
ROA not before: Mon 10 Mar 2025 11:50:19 +0000
ROA not after: Mon 09 Mar 2026 11:55:19 +0000
asID: 16909
IP address blocks: 2a14:7584:608c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:b1:f2:08:a1:7b:af:24:88:a5:53:13:9a:bb:e1:cc:55:4f:cd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:19 2025 GMT
Not After : Mar 9 11:55:19 2026 GMT
Subject: CN=5D795F9D27F56987EBB68305A8BE171AE2023FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:1c:c8:12:14:ea:b3:61:c1:f5:cb:f8:39:
c9:c4:72:1d:c3:02:b9:c1:3e:0e:40:26:07:80:0d:
6e:c2:28:f0:7a:49:a8:20:7f:b7:90:5f:8f:c3:9e:
73:bf:67:e5:a7:06:6d:d8:d3:32:fa:59:96:a5:89:
ae:06:d8:b2:c7:8b:d8:d4:53:e0:10:c7:5e:0b:56:
fb:61:aa:3c:26:e4:8f:64:bc:01:7e:37:35:f2:27:
56:26:ae:2e:b5:36:cc:30:f0:8f:ee:d1:9c:17:cb:
14:c6:af:9e:11:bd:2e:b4:28:94:09:7a:c5:46:58:
bb:f2:09:8d:e4:bf:d8:51:97:68:76:97:a2:56:17:
69:39:ea:8f:8f:2f:75:fc:79:80:70:fe:2d:8a:75:
eb:a6:e3:bc:47:a3:f5:26:ba:72:a6:a6:ca:3e:a4:
d8:84:a6:78:72:e4:80:5b:b0:0c:af:57:7e:95:7e:
48:1b:c3:57:fb:6b:3f:e6:b0:32:42:c7:5d:80:79:
37:0f:47:51:00:ae:ef:22:4c:39:fa:22:2f:4b:49:
4a:9b:db:2d:ca:66:a8:6e:a9:ca:bc:58:83:10:b4:
b1:00:e5:93:16:cc:07:98:37:27:a1:1c:25:d3:d5:
0b:5e:ce:db:4c:53:83:21:72:05:43:02:5f:cc:57:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:79:5F:9D:27:F5:69:87:EB:B6:83:05:A8:BE:17:1A:E2:02:3F:B5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:608c::/48
Signature Algorithm: sha256WithRSAEncryption
6e:ee:59:26:1c:73:05:66:fa:9e:19:71:ca:48:dc:9d:13:be:
15:6c:d4:2f:ba:67:c9:68:9a:c2:bf:4a:97:85:6f:d3:ae:c4:
2d:9e:d6:12:42:b2:04:3a:a4:e7:91:1b:12:2e:ea:21:61:1f:
4d:dc:21:2b:bf:6e:cf:a4:35:27:6d:b8:97:3a:d4:11:06:11:
2e:f8:4a:ee:0b:d3:73:f2:7a:e4:07:d8:7d:b2:92:68:37:9b:
b9:f7:8e:e3:eb:5b:bf:19:18:57:86:be:9f:f1:65:4b:80:af:
82:7c:8f:f5:5b:a8:84:f8:06:44:44:01:30:3d:90:42:a9:08:
94:12:a3:da:81:77:6a:85:08:14:17:43:36:2a:20:d1:b1:74:
7b:08:6c:e9:b3:aa:af:0b:68:ab:4d:90:03:cf:11:e6:27:d3:
9b:73:f5:fe:f2:f7:9c:30:ac:ad:20:8a:c5:46:01:a8:ef:4a:
32:d2:92:36:5b:5e:36:d7:81:84:12:e3:33:dd:65:71:ea:a9:
7f:81:5a:94:e8:be:d1:2f:b9:0e:07:00:61:bf:d8:00:a6:46:
32:46:5b:ad:58:35:69:d7:b2:29:5c:c4:78:ea:60:ff:06:bb:
85:b3:7d:5f:3c:08:32:0e:a7:d0:58:25:2b:82:87:d4:6b:a3:
7f:f5:80:13
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUS7HyCKF7rySIpVMTmrvhzFVPzSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTUwMTlaFw0yNjAzMDkxMTU1MTlaMDMxMTAvBgNV
BAMTKDVENzk1RjlEMjdGNTY5ODdFQkI2ODMwNUE4QkUxNzFBRTIwMjNGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LBzIEhTqs2HB9cv4OcnEch3D
ArnBPg5AJgeADW7CKPB6Saggf7eQX4/DnnO/Z+WnBm3Y0zL6WZalia4G2LLHi9jU
U+AQx14LVvthqjwm5I9kvAF+NzXyJ1Ymri61Nsww8I/u0ZwXyxTGr54RvS60KJQJ
esVGWLvyCY3kv9hRl2h2l6JWF2k56o+PL3X8eYBw/i2Kdeum47xHo/UmunKmpso+
pNiEpnhy5IBbsAyvV36Vfkgbw1f7az/msDJCx12AeTcPR1EAru8iTDn6Ii9LSUqb
2y3KZqhuqcq8WIMQtLEA5ZMWzAeYNyehHCXT1QtezttMU4MhcgVDAl/MV8jLAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUXXlfnSf1aYfrtoMFqL4XGuICP7UwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzODYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgjDAN
BgkqhkiG9w0BAQsFAAOCAQEAbu5ZJhxzBWb6nhlxykjcnRO+FWzUL7pnyWiawr9K
l4Vv067ELZ7WEkKyBDqk55EbEi7qIWEfTdwhK79uz6Q1J224lzrUEQYRLvhK7gvT
c/J65AfYfbKSaDebufeO4+tbvxkYV4a+n/FlS4CvgnyP9VuohPgGREQBMD2QQqkI
lBKj2oF3aoUIFBdDNiog0bF0ewhs6bOqrwtoq02QA88R5ifTm3P1/vL3nDCsrSCK
xUYBqO9KMtKSNlteNteBhBLjM91lceqpf4FalOi+0S+5DgcAYb/YAKZGMkZbrVg1
adeyKVzEeOpg/wa7hbN9XzwIMg6n0FglK4KH1Gujf/WAEw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:17 2025 by rpki-client