Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234643a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363234643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: xv8J/ah8jFXVdaPzQ67FSVKrogPDBsP8okUFig5wogQ=
Subject key identifier: 5E:57:67:4E:2A:70:FD:7C:BB:0A:66:8B:9D:FA:3C:89:07:56:6A:EA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: DD47F0F541C9120FF44EE08BBFE519CC6A2F0A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234643a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:07 +0000
ROA not before: Mon 12 May 2025 16:13:07 +0000
ROA not after: Mon 11 May 2026 16:18:07 +0000
asID: 401507
IP address blocks: 2a14:7584:624d::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
dd:47:f0:f5:41:c9:12:0f:f4:4e:e0:8b:bf:e5:19:cc:6a:2f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:07 2025 GMT
Not After : May 11 16:18:07 2026 GMT
Subject: CN=5E57674E2A70FD7CBB0A668B9DFA3C8907566AEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:cd:02:7b:68:d6:4a:7e:91:8d:c9:65:7b:
4a:f5:19:a2:80:7c:04:e8:86:da:13:34:cb:2d:92:
bb:5e:bc:98:c3:82:5c:6f:1b:28:19:cc:3b:e0:56:
41:a4:92:85:9f:8d:69:47:a8:e5:18:90:20:8e:c4:
2b:cf:2a:e0:30:9f:b9:dd:00:97:6b:f6:d2:61:39:
3a:9a:c2:3e:1b:7a:e7:0f:9a:a9:06:be:23:91:72:
05:27:79:07:c4:2c:74:04:64:24:2d:04:1d:87:52:
94:65:33:bf:11:6c:95:fb:46:e2:6d:42:de:ad:97:
13:5d:08:f2:a6:95:ba:ab:84:ab:8e:2c:1b:e5:3a:
b1:4f:62:c3:65:fb:da:00:b1:60:78:8e:93:76:c3:
39:ce:69:64:4d:9d:12:3f:9e:29:4a:e0:2f:88:e9:
f0:49:8e:cf:23:26:49:ad:be:c9:49:95:24:e0:69:
96:1c:a6:a6:f5:ba:93:7b:1e:ae:37:70:cf:1b:f4:
66:5b:42:a2:4f:c8:61:c8:96:88:ce:5c:a0:37:b0:
9b:43:af:51:0b:a1:43:a0:62:86:31:93:3c:27:7b:
fc:a6:37:8c:f9:c1:b3:ca:7e:bd:2c:cf:e1:6a:b1:
f6:ab:49:57:d0:a2:e0:17:89:d7:82:51:59:f5:2b:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:57:67:4E:2A:70:FD:7C:BB:0A:66:8B:9D:FA:3C:89:07:56:6A:EA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234643a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:624d::/48
Signature Algorithm: sha256WithRSAEncryption
08:c7:45:1b:fe:e0:07:34:75:07:01:be:99:c3:07:37:7a:21:
3c:c9:a2:f2:ee:59:47:d4:04:16:88:5c:41:46:a1:86:ac:81:
fc:1d:1a:29:d5:b3:09:56:39:fd:ac:69:10:fb:e9:a2:13:17:
62:b7:fb:d3:8f:7c:f1:db:11:3c:bd:c3:14:96:0f:1a:c5:d1:
39:44:30:0f:77:27:fe:02:e5:ab:00:f6:d3:b0:e1:c3:f6:cb:
cd:13:80:15:88:6b:9b:9a:ec:a1:aa:75:3b:9f:e3:44:d9:09:
d9:52:94:27:4f:2a:84:ac:96:85:99:7c:1d:6b:85:5e:08:e3:
e5:d9:1d:40:cd:0f:cf:7a:8f:39:30:d3:35:a7:21:4e:90:e8:
7e:0d:3b:f4:ed:1d:d1:60:80:e1:6f:2c:8c:1a:70:2c:c1:13:
76:07:40:80:3d:a3:fc:b7:0f:79:8e:d9:75:fa:18:f9:87:02:
05:e6:8c:f3:b4:d3:e6:4d:23:55:ae:d9:05:c6:d7:b0:17:53:
3d:8d:22:06:64:d0:b5:09:60:77:9d:d7:7d:f9:aa:68:d2:9a:
4a:db:5f:cd:69:7a:12:84:99:3e:70:10:14:dc:f7:ea:1b:86:
64:db:3c:74:c8:e7:1c:03:a3:66:27:e0:c3:76:37:03:be:fb:
b8:f3:80:9b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUAN1H8PVByRIP9E7gi7/lGcxqLwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDdaFw0yNjA1MTExNjE4MDdaMDMxMTAvBgNV
BAMTKDVFNTc2NzRFMkE3MEZEN0NCQjBBNjY4QjlERkEzQzg5MDc1NjZBRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOc0Ce2jWSn6Rjclle0r1GaKA
fATohtoTNMstkrtevJjDglxvGygZzDvgVkGkkoWfjWlHqOUYkCCOxCvPKuAwn7nd
AJdr9tJhOTqawj4beucPmqkGviORcgUneQfELHQEZCQtBB2HUpRlM78RbJX7RuJt
Qt6tlxNdCPKmlbqrhKuOLBvlOrFPYsNl+9oAsWB4jpN2wznOaWRNnRI/nilK4C+I
6fBJjs8jJkmtvslJlSTgaZYcpqb1upN7Hq43cM8b9GZbQqJPyGHIlojOXKA3sJtD
r1ELoUOgYoYxkzwne/ymN4z5wbPKfr0sz+FqsfarSVfQouAXideCUVn1K/4PAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUXldnTipw/Xy7CmaLnfo8iQdWauowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNDY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGJN
MA0GCSqGSIb3DQEBCwUAA4IBAQAIx0Ub/uAHNHUHAb6Zwwc3eiE8yaLy7llH1AQW
iFxBRqGGrIH8HRop1bMJVjn9rGkQ++miExdit/vTj3zx2xE8vcMUlg8axdE5RDAP
dyf+AuWrAPbTsOHD9svNE4AViGubmuyhqnU7n+NE2QnZUpQnTyqErJaFmXwda4Ve
COPl2R1AzQ/Peo85MNM1pyFOkOh+DTv07R3RYIDhbyyMGnAswRN2B0CAPaP8tw95
jtl1+hj5hwIF5ozztNPmTSNVrtkFxtewF1M9jSIGZNC1CWB3ndd9+apo0ppK21/N
aXoShJk+cBAU3PfqG4Zk2zx0yOccA6NmJ+DDdjcDvvu484Cb
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:45:37 2025 by rpki-client