Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234333a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363234333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: Sp1wuhRCRIyu6HApNmo4bFPjvDf2WbSuoxZQl8LdmEY=
Subject key identifier: 0E:DF:D1:0E:83:95:FA:F1:8A:43:CE:25:80:93:AC:16:2D:EC:51:AF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 553C83BCFF05598B225BFB402D31A997D66CE856
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234333a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:06 +0000
ROA not before: Mon 12 May 2025 16:13:06 +0000
ROA not after: Mon 11 May 2026 16:18:06 +0000
asID: 401507
IP address blocks: 2a14:7584:6243::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 15:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3c:83:bc:ff:05:59:8b:22:5b:fb:40:2d:31:a9:97:d6:6c:e8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:06 2025 GMT
Not After : May 11 16:18:06 2026 GMT
Subject: CN=0EDFD10E8395FAF18A43CE258093AC162DEC51AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:cc:be:25:4d:e7:e1:98:f2:4d:81:9b:e2:
27:15:23:81:09:87:a3:47:63:15:ad:7b:7f:72:29:
15:ad:5c:20:f3:21:60:ab:03:a4:5f:b1:43:04:d5:
0d:0f:88:aa:16:08:58:a8:1f:83:5b:90:c7:0b:96:
10:5e:d9:d9:5e:56:61:06:4f:41:06:9b:4a:ac:36:
aa:51:41:7d:38:64:52:73:95:7b:70:1c:ac:84:fa:
ee:d3:59:53:a5:08:ea:a9:d1:a7:ae:16:48:02:2d:
01:01:3d:3b:81:28:9a:06:04:cb:04:16:f1:be:21:
96:e0:9b:49:47:c9:18:32:52:eb:db:3f:98:77:8a:
6e:ae:7a:c0:4c:b1:00:22:49:42:c1:82:8e:38:51:
de:da:c5:04:71:b3:08:bb:a5:46:3d:80:9c:ca:94:
e7:84:ea:18:47:7b:8a:bf:ff:fa:54:7a:c2:08:eb:
95:0a:19:ee:f7:c3:3b:a5:1d:52:0e:7e:50:5f:e7:
44:24:eb:3c:17:b5:aa:5e:1d:1f:ca:fd:90:5d:d6:
82:40:ab:f0:4c:8e:16:c2:c8:1d:17:c4:2c:f2:fe:
9f:1c:74:bb:5a:d5:f3:3f:d5:f1:56:50:6a:cf:e0:
04:38:a1:75:d5:f5:4b:c1:74:f3:41:2d:08:79:90:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:D1:0E:83:95:FA:F1:8A:43:CE:25:80:93:AC:16:2D:EC:51:AF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234333a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6243::/48
Signature Algorithm: sha256WithRSAEncryption
67:64:c7:f9:d4:f4:13:38:5b:8d:fe:85:2e:05:42:cf:38:1e:
3f:0f:3d:08:36:ec:57:81:df:d5:cf:b9:98:6a:34:f4:f9:b3:
2f:e5:31:0d:24:6a:16:7c:98:ac:01:ec:90:dc:10:a2:57:0f:
c4:5b:93:04:4f:30:d9:4a:57:9d:31:32:68:33:a3:6c:51:7f:
fa:91:b8:fc:38:d3:6b:70:af:4c:5c:f6:d2:db:e8:d2:bb:65:
16:23:a1:eb:d7:e1:9e:86:5e:a7:33:00:03:09:4e:8e:11:68:
9d:a2:19:1d:6c:db:19:20:d2:d5:ab:59:e0:b7:1b:35:3a:44:
69:91:b7:6a:08:20:be:50:16:c9:9a:0b:8e:4d:31:de:e1:16:
51:92:64:38:f5:01:8f:cd:39:6e:ac:6c:4b:2c:70:a1:f0:dc:
bd:5f:d9:53:0c:73:90:38:8d:f2:a2:0b:18:e9:03:79:da:45:
37:50:25:49:3a:2b:6a:39:f2:e8:5a:00:7c:d8:3e:1e:56:4c:
52:9e:3c:c5:b9:04:ee:09:d5:ae:9c:78:51:3e:32:ce:66:36:
d9:48:55:33:c4:1e:99:0f:d1:07:b6:0e:39:c3:d5:e9:fb:d6:
ea:25:1a:8d:23:88:c2:d9:12:ee:22:25:55:69:fa:a2:34:1c:
44:e3:d6:76
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUVTyDvP8FWYsiW/tALTGpl9Zs6FYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDZaFw0yNjA1MTExNjE4MDZaMDMxMTAvBgNV
BAMTKDBFREZEMTBFODM5NUZBRjE4QTQzQ0UyNTgwOTNBQzE2MkRFQzUxQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdZsy+JU3n4ZjyTYGb4icVI4EJ
h6NHYxWte39yKRWtXCDzIWCrA6RfsUME1Q0PiKoWCFioH4NbkMcLlhBe2dleVmEG
T0EGm0qsNqpRQX04ZFJzlXtwHKyE+u7TWVOlCOqp0aeuFkgCLQEBPTuBKJoGBMsE
FvG+IZbgm0lHyRgyUuvbP5h3im6uesBMsQAiSULBgo44Ud7axQRxswi7pUY9gJzK
lOeE6hhHe4q///pUesII65UKGe73wzulHVIOflBf50Qk6zwXtapeHR/K/ZBd1oJA
q/BMjhbCyB0XxCzy/p8cdLta1fM/1fFWUGrP4AQ4oXXV9UvBdPNBLQh5kLKxAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUDt/RDoOV+vGKQ84lgJOsFi3sUa8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNDMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGJD
MA0GCSqGSIb3DQEBCwUAA4IBAQBnZMf51PQTOFuN/oUuBULPOB4/Dz0INuxXgd/V
z7mYajT0+bMv5TENJGoWfJisAeyQ3BCiVw/EW5METzDZSledMTJoM6NsUX/6kbj8
ONNrcK9MXPbS2+jSu2UWI6Hr1+Gehl6nMwADCU6OEWidohkdbNsZINLVq1ngtxs1
OkRpkbdqCCC+UBbJmguOTTHe4RZRkmQ49QGPzTlurGxLLHCh8Ny9X9lTDHOQOI3y
ogsY6QN52kU3UCVJOitqOfLoWgB82D4eVkxSnjzFuQTuCdWunHhRPjLOZjbZSFUz
xB6ZD9EHtg45w9Xp+9bqJRqNI4jC2RLuIiVVafqiNBxE49Z2
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:10:28 2025 by rpki-client