Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363065643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: DQDzLevkxv+mXh/nho0QckBjeiGgnpmEfe6Zz851DnM=
Subject key identifier: 4C:98:31:AC:5E:22:5F:35:0C:26:4D:1C:CC:46:B6:0E:2B:4D:74:EC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 012628087A679B5327676FC6F8322DD57233148D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065643a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 26 Mar 2025 14:22:11 +0000
ROA not before: Wed 26 Mar 2025 14:17:11 +0000
ROA not after: Wed 25 Mar 2026 14:22:11 +0000
asID: 16909
IP address blocks: 2a14:7584:60ed::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:26:28:08:7a:67:9b:53:27:67:6f:c6:f8:32:2d:d5:72:33:14:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 26 14:17:11 2025 GMT
Not After : Mar 25 14:22:11 2026 GMT
Subject: CN=4C9831AC5E225F350C264D1CCC46B60E2B4D74EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:17:a4:12:31:45:b7:9b:11:c7:36:ff:d5:
8b:9a:90:f0:62:d3:be:29:16:60:46:8f:d6:fc:4d:
22:2d:5c:03:7e:b0:dd:1f:27:ba:df:44:e4:21:0b:
91:1f:31:f7:e9:34:c2:7c:37:71:19:72:9b:b9:2f:
58:f2:30:03:ee:b2:47:94:e0:6f:6f:37:e4:55:88:
44:ba:07:7b:78:30:60:af:e0:13:e0:db:5d:8c:4f:
17:34:a4:e5:50:aa:db:da:e1:3e:36:62:32:77:81:
82:3b:ef:d3:5d:5a:09:54:da:4d:d7:a5:0e:19:84:
8c:33:85:97:2c:53:e1:12:4f:7b:77:02:64:61:e2:
68:d1:71:6a:69:d2:8d:e0:dc:cc:7a:33:36:20:0e:
41:4d:7e:90:43:5a:25:4c:e9:1d:3f:9f:8b:e0:68:
06:7a:28:40:93:9a:00:91:a7:50:0a:79:84:3f:2c:
10:aa:1c:bc:58:72:0e:33:17:e3:b3:ad:7e:dd:ee:
27:20:fe:37:3b:b1:71:81:91:e1:4c:46:da:c9:1a:
1f:53:96:5d:f3:77:c7:0c:f9:98:fb:cf:03:d4:53:
c1:ee:df:37:b9:d4:54:39:b5:b5:4e:d1:01:bd:c3:
96:56:47:c6:18:c1:8e:bf:86:59:34:34:e3:8d:9f:
b2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:98:31:AC:5E:22:5F:35:0C:26:4D:1C:CC:46:B6:0E:2B:4D:74:EC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60ed::/48
Signature Algorithm: sha256WithRSAEncryption
00:7a:9a:e8:1d:aa:79:49:6d:9f:2f:03:c8:72:83:1d:6e:4c:
84:33:df:36:eb:f6:60:87:9b:7a:01:e2:f4:65:2b:10:d4:c5:
59:31:40:19:30:72:e5:4c:86:ff:3f:a1:12:3a:86:46:74:a8:
64:54:e9:7a:f6:52:70:98:41:2c:97:1a:6a:80:69:11:a0:af:
e5:85:05:51:ba:21:6d:b8:47:e5:89:8f:ce:af:c5:f8:12:6c:
d5:69:fe:6b:2c:8d:13:22:9d:db:2b:5f:4b:5f:29:cc:34:86:
3d:46:68:59:52:06:4c:09:2e:2f:b0:62:b9:cf:24:61:12:a5:
59:26:38:fd:91:08:c2:e5:62:2f:4d:ca:6a:fe:4d:ca:db:79:
28:55:3b:fd:57:63:d1:7e:c5:58:7e:1e:09:d3:70:1d:6b:27:
9f:ce:ea:3e:86:13:ff:22:ff:d9:95:74:6d:78:c0:5a:b3:f5:
ce:c3:08:97:06:f0:cd:3b:eb:25:21:88:cf:52:0d:a6:94:d6:
31:ca:5c:8c:74:55:ec:5e:2c:76:35:b9:8d:8f:7c:af:c3:da:
16:54:b6:d3:ce:f1:84:a1:ab:51:c5:2a:cc:46:23:b3:e3:80:
ea:e1:b2:e7:32:d0:8c:fc:db:4f:15:95:c2:62:d0:5b:e9:dd:
21:8b:b6:ab
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUASYoCHpnm1MnZ2/G+DIt1XIzFI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMjYxNDE3MTFaFw0yNjAzMjUxNDIyMTFaMDMxMTAvBgNV
BAMTKDRDOTgzMUFDNUUyMjVGMzUwQzI2NEQxQ0NDNDZCNjBFMkI0RDc0RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/hekEjFFt5sRxzb/1YuakPBi
074pFmBGj9b8TSItXAN+sN0fJ7rfROQhC5EfMffpNMJ8N3EZcpu5L1jyMAPuskeU
4G9vN+RViES6B3t4MGCv4BPg212MTxc0pOVQqtva4T42YjJ3gYI779NdWglU2k3X
pQ4ZhIwzhZcsU+EST3t3AmRh4mjRcWpp0o3g3Mx6MzYgDkFNfpBDWiVM6R0/n4vg
aAZ6KECTmgCRp1AKeYQ/LBCqHLxYcg4zF+OzrX7d7icg/jc7sXGBkeFMRtrJGh9T
ll3zd8cM+Zj7zwPUU8Hu3ze51FQ5tbVO0QG9w5ZWR8YYwY6/hlk0NOONn7JZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUTJgxrF4iXzUMJk0czEa2DitNdOwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2NTY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRg7TAN
BgkqhkiG9w0BAQsFAAOCAQEAAHqa6B2qeUltny8DyHKDHW5MhDPfNuv2YIebegHi
9GUrENTFWTFAGTBy5UyG/z+hEjqGRnSoZFTpevZScJhBLJcaaoBpEaCv5YUFUboh
bbhH5YmPzq/F+BJs1Wn+ayyNEyKd2ytfS18pzDSGPUZoWVIGTAkuL7Biuc8kYRKl
WSY4/ZEIwuViL03Kav5Nytt5KFU7/Vdj0X7FWH4eCdNwHWsnn87qPoYT/yL/2ZV0
bXjAWrP1zsMIlwbwzTvrJSGIz1INppTWMcpcjHRV7F4sdjW5jY98r8PaFlS2087x
hKGrUcUqzEYjs+OA6uGy5zLQjPzbTxWVwmLQW+ndIYu2qw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:05 2025 by rpki-client