Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363230313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: WQQzUIIHoMBSACC04hrXZF8ziA9qOGQYHna5fpv5QCc=
Subject key identifier: A1:E6:7C:63:CA:DC:2A:F5:CC:29:08:B4:FE:3D:69:69:89:EC:6D:63
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 40811638BE28D688FBE2D3222E65F6FC4BB79CE6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230313a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:09 +0000
ROA not before: Mon 12 May 2025 16:13:09 +0000
ROA not after: Mon 11 May 2026 16:18:09 +0000
asID: 16909
IP address blocks: 2a14:7584:6201::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 May 2025 19:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:81:16:38:be:28:d6:88:fb:e2:d3:22:2e:65:f6:fc:4b:b7:9c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:09 2025 GMT
Not After : May 11 16:18:09 2026 GMT
Subject: CN=A1E67C63CADC2AF5CC2908B4FE3D696989EC6D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:af:1c:d3:81:37:1d:81:75:73:fe:68:fe:
d8:d6:a4:e5:26:19:34:09:b0:16:f5:f4:cf:e5:a1:
42:b9:9c:74:db:40:4a:69:30:b2:98:7f:b5:ff:46:
c2:8e:69:76:62:8c:c2:7a:b8:3d:6e:a0:3d:c1:77:
77:bf:44:5b:8b:47:a8:90:b8:2a:49:05:67:1b:35:
fe:f4:16:2f:f1:4a:29:5d:89:96:44:83:02:4f:24:
39:8f:96:8f:b1:4b:22:97:c2:d2:74:fc:df:5b:b7:
4b:5b:c4:fa:0a:bf:ac:98:7e:7c:c4:3d:ad:79:18:
76:cc:0d:fd:6f:3a:71:73:58:a0:52:85:a4:d3:6b:
c5:67:60:19:40:0f:f3:ab:d5:06:f5:5b:09:7c:d6:
6c:9f:dc:56:d0:0a:d4:d2:5b:e8:a1:20:2e:cd:2f:
d6:7d:84:e3:c6:f7:4c:ee:4b:ad:2c:2f:4d:52:66:
5a:45:1c:1f:ea:0e:1a:90:92:c4:0c:93:8f:ea:69:
8f:be:4b:b8:03:4d:49:45:63:9c:75:a6:17:50:d1:
97:ce:50:2a:89:c6:89:8c:4c:a6:df:ae:6d:b3:8e:
75:f3:3d:2c:2b:ce:67:f0:59:9f:e6:ab:1a:6d:e1:
5f:6a:13:58:ed:a7:26:75:d3:9d:48:12:28:00:81:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:7C:63:CA:DC:2A:F5:CC:29:08:B4:FE:3D:69:69:89:EC:6D:63
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6201::/48
Signature Algorithm: sha256WithRSAEncryption
9d:30:e6:8d:4c:5a:f5:e1:08:83:57:4d:2c:8b:fa:bd:b2:43:
2b:3d:b7:da:64:22:de:de:66:99:cc:48:fa:85:7a:6c:d4:31:
b9:0b:6c:0c:cc:a0:d1:f9:4b:cf:e1:05:14:63:a4:64:73:1e:
ce:c3:3b:6f:c6:d6:4b:d2:e4:ae:67:40:52:23:21:c3:89:e4:
68:94:5a:67:d4:ec:42:74:67:cf:b9:97:73:ca:a4:c6:c9:43:
80:7f:00:ac:5c:b7:f8:40:3d:2e:6c:fe:1b:66:ec:5a:db:5f:
fb:ac:b6:c8:50:80:35:57:70:20:3f:65:16:c2:79:43:fd:29:
46:0f:ae:e9:c0:ed:61:9f:65:da:c3:74:ee:cb:ab:0d:f5:01:
c8:85:1d:08:1f:45:2c:13:a9:4e:c1:c5:82:53:83:ba:63:2a:
81:37:0d:d7:94:2d:c4:fd:97:c0:1a:7d:bf:ae:b3:d1:bc:c9:
37:e4:3e:f1:45:9f:b1:d5:14:53:39:57:73:ad:20:a5:82:60:
6c:9a:62:ca:ff:a4:24:69:ef:11:ca:07:97:83:69:b6:94:5c:
5b:9b:63:77:86:a8:09:ce:6f:94:ce:6f:11:90:a2:44:09:9e:
ae:d7:ff:7f:8a:fc:3d:bb:2f:3b:5a:7b:9f:97:ca:cb:aa:b5:
d8:f6:91:06
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUQIEWOL4o1oj74tMiLmX2/Eu3nOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDlaFw0yNjA1MTExNjE4MDlaMDMxMTAvBgNV
BAMTKEExRTY3QzYzQ0FEQzJBRjVDQzI5MDhCNEZFM0Q2OTY5ODlFQzZENjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bK8c04E3HYF1c/5o/tjWpOUm
GTQJsBb19M/loUK5nHTbQEppMLKYf7X/RsKOaXZijMJ6uD1uoD3Bd3e/RFuLR6iQ
uCpJBWcbNf70Fi/xSildiZZEgwJPJDmPlo+xSyKXwtJ0/N9bt0tbxPoKv6yYfnzE
Pa15GHbMDf1vOnFzWKBShaTTa8VnYBlAD/Or1Qb1Wwl81myf3FbQCtTSW+ihIC7N
L9Z9hOPG90zuS60sL01SZlpFHB/qDhqQksQMk4/qaY++S7gDTUlFY5x1phdQ0ZfO
UCqJxomMTKbfrm2zjnXzPSwrzmfwWZ/mqxpt4V9qE1jtpyZ1051IEigAgdf1AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUoeZ8Y8rcKvXMKQi0/j1paYnsbWMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzMDMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiATAN
BgkqhkiG9w0BAQsFAAOCAQEAnTDmjUxa9eEIg1dNLIv6vbJDKz232mQi3t5mmcxI
+oV6bNQxuQtsDMyg0flLz+EFFGOkZHMezsM7b8bWS9LkrmdAUiMhw4nkaJRaZ9Ts
QnRnz7mXc8qkxslDgH8ArFy3+EA9Lmz+G2bsWttf+6y2yFCANVdwID9lFsJ5Q/0p
Rg+u6cDtYZ9l2sN07surDfUByIUdCB9FLBOpTsHFglODumMqgTcN15QtxP2XwBp9
v66z0bzJN+Q+8UWfsdUUUzlXc60gpYJgbJpiyv+kJGnvEcoHl4NptpRcW5tjd4ao
Cc5vlM5vEZCiRAmertf/f4r8PbsvO1p7n5fKy6q12PaRBg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:39 2025 by rpki-client