Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363066363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Ybb/6bgMB4+pURb7ZQYUswpVhN8ghOcIzpm4jypzqSw=
Subject key identifier: C8:48:1D:00:19:3C:CB:A8:E3:2F:C0:7E:7E:45:11:C5:6C:4E:E9:34
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 18B83166EE2319EFCBD9A3D468E48887B83565AD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066363a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:45:27 +0000
ROA not before: Wed 02 Apr 2025 18:40:27 +0000
ROA not after: Wed 01 Apr 2026 18:45:27 +0000
asID: 16909
IP address blocks: 2a14:7584:60f6::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b8:31:66:ee:23:19:ef:cb:d9:a3:d4:68:e4:88:87:b8:35:65:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:40:27 2025 GMT
Not After : Apr 1 18:45:27 2026 GMT
Subject: CN=C8481D00193CCBA8E32FC07E7E4511C56C4EE934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:28:ca:20:c4:74:13:4c:d9:ec:a8:2a:5e:
f7:1f:cf:54:b3:9c:d3:28:73:af:f1:4b:10:88:df:
d7:a4:78:41:45:39:02:33:ca:4b:04:9e:90:f8:ed:
8b:69:6d:1d:a2:50:10:dc:64:4e:45:c2:d4:56:71:
61:45:c3:85:8b:4e:e1:27:2f:f0:84:bc:ea:5b:55:
86:32:22:21:00:8e:a2:54:f8:b5:c5:b9:ce:b4:0f:
2d:53:dd:d7:03:85:f2:6f:4d:29:c7:4a:9a:a3:82:
94:b9:31:93:71:ae:ee:c4:84:d4:11:3e:f4:f7:ca:
d0:4f:88:70:ea:01:67:09:bd:1a:f1:f3:a5:f1:28:
2b:9c:44:2e:60:f4:f9:41:bc:e8:80:6f:20:df:7f:
1e:ee:bf:37:9c:8d:44:ca:7c:57:69:9a:fb:db:9e:
a9:23:ec:17:8b:a4:6b:f5:89:67:6e:12:7b:db:ad:
ab:db:d9:54:16:0c:2c:df:93:3f:5f:92:78:3b:64:
92:d6:b9:d8:8e:ab:01:bf:90:71:bb:0a:0e:9d:8d:
5a:dc:f7:a1:5c:e5:74:4b:14:11:4b:d1:32:f1:91:
38:a2:33:2d:17:f1:c1:aa:a2:c6:3a:40:ae:f8:0d:
de:ef:aa:43:19:a7:ea:21:77:97:3b:b2:0a:70:a4:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:1D:00:19:3C:CB:A8:E3:2F:C0:7E:7E:45:11:C5:6C:4E:E9:34
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60f6::/48
Signature Algorithm: sha256WithRSAEncryption
9c:7c:53:e6:a3:f8:5b:78:48:8a:2a:7d:f3:27:49:0f:ef:48:
f6:1e:aa:e8:9f:b4:ec:7e:5e:80:f5:4a:0a:90:cc:73:26:eb:
fd:42:d3:d9:bf:03:68:95:e1:2c:29:21:30:e2:72:75:8b:60:
0b:e5:6a:f1:1e:d3:93:74:0a:fe:16:9f:f5:6b:93:c8:4c:76:
a0:fd:2e:59:58:61:4a:c3:5b:f6:39:d3:2d:23:90:a2:51:3c:
8b:f7:74:86:d3:4c:a6:9a:6c:9f:c2:af:25:65:a5:53:74:8a:
23:f7:3a:f3:c7:bc:8c:1f:67:0f:d4:6c:e0:13:23:62:64:e8:
8a:2b:a9:73:45:67:eb:62:41:44:4a:42:40:6d:49:e1:e6:bb:
e2:05:36:6f:a0:57:8c:5b:6c:8f:5c:1e:61:95:6c:41:c3:a5:
8e:75:71:ff:e4:d7:c4:52:12:42:05:65:55:9a:8d:cb:73:10:
2f:84:c7:69:a5:57:5d:20:d4:f1:40:86:07:4c:8e:8d:e3:b5:
43:88:44:16:e1:a0:72:ce:01:73:40:a6:70:2a:06:3c:32:29:
15:f4:eb:ba:96:18:89:20:c7:ba:bd:75:6b:e6:2f:d1:07:d9:
b5:2e:92:a9:e7:92:97:ac:77:14:dd:e7:6e:e6:2a:46:de:ad:
5a:62:b6:5c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUGLgxZu4jGe/L2aPUaOSIh7g1Za0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA0MDIxODQwMjdaFw0yNjA0MDExODQ1MjdaMDMxMTAvBgNV
BAMTKEM4NDgxRDAwMTkzQ0NCQThFMzJGQzA3RTdFNDUxMUM1NkM0RUU5MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBijKIMR0E0zZ7KgqXvcfz1Sz
nNMoc6/xSxCI39ekeEFFOQIzyksEnpD47YtpbR2iUBDcZE5FwtRWcWFFw4WLTuEn
L/CEvOpbVYYyIiEAjqJU+LXFuc60Dy1T3dcDhfJvTSnHSpqjgpS5MZNxru7EhNQR
PvT3ytBPiHDqAWcJvRrx86XxKCucRC5g9PlBvOiAbyDffx7uvzecjUTKfFdpmvvb
nqkj7BeLpGv1iWduEnvbravb2VQWDCzfkz9fkng7ZJLWudiOqwG/kHG7Cg6djVrc
96Fc5XRLFBFL0TLxkTiiMy0X8cGqosY6QK74Dd7vqkMZp+ohd5c7sgpwpPXjAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUyEgdABk8y6jjL8B+fkURxWxO6TQwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2NjM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRg9jAN
BgkqhkiG9w0BAQsFAAOCAQEAnHxT5qP4W3hIiip98ydJD+9I9h6q6J+07H5egPVK
CpDMcybr/ULT2b8DaJXhLCkhMOJydYtgC+Vq8R7Tk3QK/haf9WuTyEx2oP0uWVhh
SsNb9jnTLSOQolE8i/d0htNMpppsn8KvJWWlU3SKI/c688e8jB9nD9Rs4BMjYmTo
iiupc0Vn62JBREpCQG1J4ea74gU2b6BXjFtsj1weYZVsQcOljnVx/+TXxFISQgVl
VZqNy3MQL4THaaVXXSDU8UCGB0yOjeO1Q4hEFuGgcs4Bc0CmcCoGPDIpFfTrupYY
iSDHur11a+Yv0QfZtS6SqeeSl6x3FN3nbuYqRt6tWmK2XA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:57 2025 by rpki-client