Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363231363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: PgsqoejV/S50ozjxKekVMCj2WL5QgWm+J5YPrJzpxpc=
Subject key identifier: C4:8C:DC:9A:D5:74:82:55:13:EE:D6:50:C1:75:2A:A4:2B:F8:6A:AA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 164AD7B1200CA86110A6244FE6783F1AB657F899
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231363a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:06 +0000
ROA not before: Mon 12 May 2025 16:13:06 +0000
ROA not after: Mon 11 May 2026 16:18:06 +0000
asID: 16909
IP address blocks: 2a14:7584:6216::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:4a:d7:b1:20:0c:a8:61:10:a6:24:4f:e6:78:3f:1a:b6:57:f8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:06 2025 GMT
Not After : May 11 16:18:06 2026 GMT
Subject: CN=C48CDC9AD574825513EED650C1752AA42BF86AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:38:1e:d2:bd:9d:cd:d4:da:cd:a5:d2:3f:
17:9f:0c:16:ec:4f:aa:f2:32:8b:22:8e:35:b5:8d:
66:71:5e:a9:14:db:a0:3a:44:11:79:1e:50:72:29:
08:77:05:75:f4:a7:9e:05:06:fc:f0:7f:fe:07:d4:
85:af:f6:cc:b3:5f:21:ea:16:8b:6b:3a:86:8d:38:
8e:8b:e1:f3:18:32:3a:c8:47:2a:5a:4e:c3:55:e7:
c0:c5:23:b6:c2:9c:a1:3c:02:65:2f:7e:76:36:64:
3c:b2:8f:fd:9c:6d:39:5b:3f:18:6f:45:04:19:a4:
22:e2:12:7e:53:3f:53:65:3f:37:78:79:16:3c:29:
60:5f:f8:12:c8:41:e8:12:97:39:aa:09:af:53:09:
66:a0:aa:db:7b:61:b9:63:f8:af:b8:5d:11:a8:b1:
5f:a1:48:d7:d5:70:cd:28:5c:0e:b7:80:0b:2e:8b:
5e:01:a8:95:2d:b7:ed:d2:df:a8:92:59:1e:06:20:
c3:af:c5:8e:5c:30:d6:7b:55:65:a9:3f:9c:72:f5:
8e:22:b7:ce:4f:b2:d7:ea:cd:33:7e:de:c3:c2:5f:
a3:e1:5b:82:12:15:d5:d8:4d:91:28:55:cb:5d:d0:
c5:97:57:86:8b:79:1a:0a:ae:9c:7d:7a:5c:e7:8c:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:DC:9A:D5:74:82:55:13:EE:D6:50:C1:75:2A:A4:2B:F8:6A:AA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6216::/48
Signature Algorithm: sha256WithRSAEncryption
1a:00:b4:62:23:de:c3:5a:a1:cd:36:0c:c2:27:ee:98:c4:e8:
4f:6d:26:4d:ed:06:9c:86:5f:1b:7d:aa:58:cb:ef:8d:e2:11:
bd:25:be:dd:5f:d0:90:01:95:68:40:ca:23:01:e7:79:0f:e0:
6b:4d:68:98:9d:c1:c1:39:cc:9b:b7:dd:a6:98:50:52:0e:3f:
96:d7:0a:01:8e:15:25:e1:4b:32:23:13:27:56:dc:21:55:81:
99:cd:f8:1e:ca:0a:88:7c:15:7d:1f:9d:15:e7:3f:2f:a4:57:
0a:a5:64:c1:39:c3:e9:25:02:f0:58:b6:4b:3d:c4:ba:a3:ca:
af:38:13:e3:9d:43:30:32:d6:68:5e:8a:3a:f0:c1:fd:61:74:
2b:f4:88:4e:88:3b:53:1e:8c:32:77:e1:da:be:9d:e6:3b:86:
17:26:6a:2a:ba:80:59:a5:23:ff:d8:1e:e5:62:be:3e:3e:78:
de:62:f5:d3:a8:b8:ec:98:bf:5f:e7:6b:bc:3b:19:e3:a4:11:
c6:a5:59:4b:a8:8e:22:27:74:08:7c:c5:55:b0:18:1b:78:1e:
ee:21:e7:c2:6f:87:cd:0b:31:be:3a:d3:92:86:dc:b2:cc:a4:
12:ca:2c:10:be:b8:50:50:48:5e:1f:a0:81:1d:17:75:b4:26:
70:65:74:32
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUFkrXsSAMqGEQpiRP5ng/GrZX+JkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDZaFw0yNjA1MTExNjE4MDZaMDMxMTAvBgNV
BAMTKEM0OENEQzlBRDU3NDgyNTUxM0VFRDY1MEMxNzUyQUE0MkJGODZBQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3jge0r2dzdTazaXSPxefDBbs
T6ryMosijjW1jWZxXqkU26A6RBF5HlByKQh3BXX0p54FBvzwf/4H1IWv9syzXyHq
FotrOoaNOI6L4fMYMjrIRypaTsNV58DFI7bCnKE8AmUvfnY2ZDyyj/2cbTlbPxhv
RQQZpCLiEn5TP1NlPzd4eRY8KWBf+BLIQegSlzmqCa9TCWagqtt7Yblj+K+4XRGo
sV+hSNfVcM0oXA63gAsui14BqJUtt+3S36iSWR4GIMOvxY5cMNZ7VWWpP5xy9Y4i
t85PstfqzTN+3sPCX6PhW4ISFdXYTZEoVctd0MWXV4aLeRoKrpx9elznjLAtAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUxIzcmtV0glUT7tZQwXUqpCv4aqowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzMTM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiFjAN
BgkqhkiG9w0BAQsFAAOCAQEAGgC0YiPew1qhzTYMwifumMToT20mTe0GnIZfG32q
WMvvjeIRvSW+3V/QkAGVaEDKIwHneQ/ga01omJ3BwTnMm7fdpphQUg4/ltcKAY4V
JeFLMiMTJ1bcIVWBmc34HsoKiHwVfR+dFec/L6RXCqVkwTnD6SUC8Fi2Sz3EuqPK
rzgT451DMDLWaF6KOvDB/WF0K/SITog7Ux6MMnfh2r6d5juGFyZqKrqAWaUj/9ge
5WK+Pj543mL106i47Ji/X+drvDsZ46QRxqVZS6iOIid0CHzFVbAYG3ge7iHnwm+H
zQsxvjrTkobcssykEsosEL64UFBIXh+ggR0XdbQmcGV0Mg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:12:15 2025 by rpki-client