Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363166303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363166303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AACc4CwDeuRoL95CrznoqOVpp/GqBO/ammhf1UipSis=
Subject key identifier: 14:CE:2A:B1:F1:58:DE:FF:3C:07:22:2A:E4:58:9F:D3:9E:54:1D:20
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 65946DF9DAD9CD9504956AF067CCFD200E63F9D9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363166303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 01 Jan 2025 21:56:26 +0000
ROA not before: Wed 01 Jan 2025 21:51:26 +0000
ROA not after: Wed 31 Dec 2025 21:56:26 +0000
asID: 16909
IP address blocks: 2a14:7584:61f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Jan 2025 18:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:94:6d:f9:da:d9:cd:95:04:95:6a:f0:67:cc:fd:20:0e:63:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 1 21:51:26 2025 GMT
Not After : Dec 31 21:56:26 2025 GMT
Subject: CN=14CE2AB1F158DEFF3C07222AE4589FD39E541D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f6:62:d0:0b:63:20:cb:c1:b0:99:67:95:4d:
e5:1d:de:9e:ad:24:a9:9a:62:a3:e9:11:4d:3a:a5:
94:9b:91:42:db:26:8a:6b:2d:18:ae:c3:49:f8:b5:
7b:2d:f2:8b:b1:f6:f7:d2:5f:a8:b3:78:19:ba:4c:
07:a8:32:c5:60:be:26:cc:df:45:61:c6:e6:54:1e:
97:53:ee:33:9e:97:4a:67:76:a9:17:59:06:10:b0:
4a:d3:24:00:81:39:0a:be:9a:18:4b:7d:5f:b8:84:
2f:4b:94:cf:50:7f:06:45:c6:01:a4:82:83:1d:cb:
2c:a2:23:eb:10:51:ae:50:9b:08:2f:f4:5f:fb:5e:
fd:3f:40:69:09:0e:90:cc:87:c7:91:db:e4:db:db:
e2:e8:3d:2c:99:97:59:53:7d:92:08:61:ff:d0:bc:
90:8a:6e:a4:b7:98:6e:42:f0:e8:1a:a8:50:dd:a9:
f0:37:58:53:93:be:a3:81:75:25:4e:a6:fc:a9:c9:
13:8d:af:56:3d:34:7f:e2:07:ee:78:63:1e:12:2a:
f6:f9:e5:f1:c8:e9:5c:2c:1f:fd:20:db:d8:5c:6c:
e2:69:b9:7d:fa:b2:8b:de:ad:b2:81:af:eb:92:c4:
d9:82:b4:5e:b4:bd:6c:43:03:ee:fb:b5:55:28:7e:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CE:2A:B1:F1:58:DE:FF:3C:07:22:2A:E4:58:9F:D3:9E:54:1D:20
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363166303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61f0::/48
Signature Algorithm: sha256WithRSAEncryption
19:de:b6:01:10:d1:12:33:f5:b9:08:3b:d8:7e:82:3e:86:43:
a4:3c:e2:33:aa:09:93:6d:e8:84:07:28:d5:fc:2b:f0:6d:3b:
64:7a:98:d2:a5:c4:6a:9a:9b:5a:00:5c:e1:fd:3d:40:33:49:
57:aa:77:02:f1:05:83:7c:35:18:6e:d4:1b:b2:52:af:19:94:
88:bc:1c:70:97:6c:43:20:27:6c:d5:8b:86:81:4f:af:b6:59:
92:7c:c8:8f:7e:0f:39:ca:47:5b:de:df:3f:8d:11:81:f1:37:
6d:04:77:9c:9e:69:a5:a9:28:9c:65:5d:6d:50:cd:a3:6e:51:
a3:ee:ec:1e:c0:01:85:cc:bb:3b:35:e4:c2:0a:e2:38:82:16:
cc:5a:ee:54:02:57:8f:77:95:19:5f:63:1e:51:34:0a:76:c5:
1d:18:9f:be:34:0b:9c:54:be:22:97:e4:04:e6:db:cb:6e:c5:
71:17:e9:70:69:d0:75:1b:15:0c:b4:72:7b:63:fa:dc:90:a9:
22:0b:f6:18:fd:97:2c:ce:2d:97:fa:c1:b3:7d:16:b5:4c:b2:
a8:62:b0:1c:eb:fb:bf:1e:6f:47:3b:d3:e1:16:e7:80:71:0b:
dc:fa:d5:00:08:96:d7:40:b2:e1:a5:c9:4e:16:e4:5c:a0:e1:
68:2e:e5:c5
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUZZRt+drZzZUElWrwZ8z9IA5j+dkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMDEyMTUxMjZaFw0yNTEyMzEyMTU2MjZaMDMxMTAvBgNV
BAMTKDE0Q0UyQUIxRjE1OERFRkYzQzA3MjIyQUU0NTg5RkQzOUU1NDFEMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT9mLQC2Mgy8GwmWeVTeUd3p6t
JKmaYqPpEU06pZSbkULbJoprLRiuw0n4tXst8oux9vfSX6izeBm6TAeoMsVgvibM
30VhxuZUHpdT7jOel0pndqkXWQYQsErTJACBOQq+mhhLfV+4hC9LlM9QfwZFxgGk
goMdyyyiI+sQUa5Qmwgv9F/7Xv0/QGkJDpDMh8eR2+Tb2+LoPSyZl1lTfZIIYf/Q
vJCKbqS3mG5C8OgaqFDdqfA3WFOTvqOBdSVOpvypyRONr1Y9NH/iB+54Yx4SKvb5
5fHI6VwsH/0g29hcbOJpuX36soverbKBr+uSxNmCtF60vWxDA+77tVUofu3hAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUFM4qsfFY3v88ByIq5Fif055UHSAwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzE2NjMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRh8DAN
BgkqhkiG9w0BAQsFAAOCAQEAGd62ARDREjP1uQg72H6CPoZDpDziM6oJk23ohAco
1fwr8G07ZHqY0qXEapqbWgBc4f09QDNJV6p3AvEFg3w1GG7UG7JSrxmUiLwccJds
QyAnbNWLhoFPr7ZZknzIj34POcpHW97fP40RgfE3bQR3nJ5ppakonGVdbVDNo25R
o+7sHsABhcy7OzXkwgriOIIWzFruVAJXj3eVGV9jHlE0CnbFHRifvjQLnFS+Ipfk
BObby27FcRfpcGnQdRsVDLRye2P63JCpIgv2GP2XLM4tl/rBs30WtUyyqGKwHOv7
vx5vRzvT4RbngHEL3PrVAAiW10Cy4aXJThbkXKDhaC7lxQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:55 2025 by rpki-client