Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Le/WtIK2SYA/ooKBOlgdWf8qL5C0xm/WUNQJV2dDRXo=
Subject key identifier: 38:85:DA:BF:7B:7B:F9:4D:39:2C:BB:27:B2:24:54:31:07:96:3A:B1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 45D485E7489E526A4BA80F2967E7D5104DE3CA3C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236343a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 16909
IP address blocks: 2a14:7584:6264::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 00:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d4:85:e7:48:9e:52:6a:4b:a8:0f:29:67:e7:d5:10:4d:e3:ca:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=3885DABF7B7BF94D392CBB27B224543107963AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:dd:ee:1e:20:84:93:45:24:58:bc:71:06:
09:a9:54:6b:00:54:de:b8:7c:fa:8e:bc:49:60:65:
df:90:27:a6:11:5c:29:3c:cd:87:81:b9:f9:b8:e5:
cc:3c:c7:fc:7f:f5:b5:cc:7f:94:4f:cd:9f:be:b9:
77:ca:13:3c:95:fd:00:f3:7a:d3:9d:ee:c8:df:15:
c6:04:72:19:72:67:1d:bc:ac:62:a0:c9:32:89:f0:
c0:b9:bd:48:4e:f3:3b:0f:48:9b:da:8d:68:74:6c:
97:9d:87:15:8a:28:4d:56:3b:08:20:e7:c1:98:d9:
bd:47:6e:35:f5:f6:d5:e7:f6:41:02:c8:d6:55:40:
24:61:40:6e:20:a1:bc:92:6c:cd:62:a7:31:c3:f4:
84:67:74:e5:d5:fc:e8:84:b1:63:73:76:25:83:04:
97:e9:b9:ff:7b:5c:3f:ae:53:9c:35:41:52:36:b6:
fe:29:75:13:1f:d3:7d:62:e7:4e:48:fa:90:20:16:
30:ea:8f:74:e2:a8:29:90:9b:ef:c7:03:02:f1:3c:
4d:dc:f8:b4:30:2b:ab:37:16:7f:57:0d:33:b1:3d:
e0:ec:d2:6e:d1:53:96:ed:e3:1e:52:c7:d8:83:5a:
f4:58:7a:dc:a6:bd:9d:ba:90:b1:25:17:ee:f1:89:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:DA:BF:7B:7B:F9:4D:39:2C:BB:27:B2:24:54:31:07:96:3A:B1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6264::/48
Signature Algorithm: sha256WithRSAEncryption
67:f9:b9:7b:32:22:69:3c:a9:ed:f7:ee:e6:37:a1:5c:e4:91:
f1:0a:93:6f:7a:10:47:05:79:9c:6a:aa:50:dc:84:98:32:4a:
4b:2a:06:61:49:88:05:cd:0e:e3:54:66:48:fd:6c:a0:ee:d0:
01:f8:d0:cc:b4:07:b2:a7:24:c4:42:f9:a1:fd:a5:0c:83:3e:
37:bf:7c:55:56:73:88:56:91:22:aa:64:e7:a7:34:cb:5e:69:
3c:1c:5a:bf:9f:3e:6d:6b:01:10:9b:9b:5f:48:f4:2c:55:d1:
93:44:48:84:c6:59:1f:7a:80:f0:12:fe:ec:54:c0:1c:0c:53:
7a:17:b3:aa:50:e9:22:72:dd:35:df:45:75:78:fd:b0:7f:2e:
d1:be:c9:80:0a:c4:7e:f4:e5:ad:4c:02:97:64:13:66:eb:8a:
1e:0b:ea:33:d0:84:36:aa:f6:01:8b:c2:29:13:bf:0b:8f:87:
02:ac:08:39:7a:52:48:51:68:f5:88:cb:1c:3c:51:85:72:cc:
e7:1c:9a:14:a6:b1:58:73:3d:36:4b:98:fa:53:0d:07:50:0d:
c0:b7:8b:85:7d:7e:72:74:3a:d3:17:d5:75:70:71:1d:d4:52:
4b:d0:bd:d1:ce:15:4e:da:28:03:77:28:51:2d:28:b5:0c:37:
91:8b:e1:83
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURdSF50ieUmpLqA8pZ+fVEE3jyjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDhaFw0yNjA1MTExNjE4MDhaMDMxMTAvBgNV
BAMTKDM4ODVEQUJGN0I3QkY5NEQzOTJDQkIyN0IyMjQ1NDMxMDc5NjNBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU4d3uHiCEk0UkWLxxBgmpVGsA
VN64fPqOvElgZd+QJ6YRXCk8zYeBufm45cw8x/x/9bXMf5RPzZ++uXfKEzyV/QDz
etOd7sjfFcYEchlyZx28rGKgyTKJ8MC5vUhO8zsPSJvajWh0bJedhxWKKE1WOwgg
58GY2b1HbjX19tXn9kECyNZVQCRhQG4gobySbM1ipzHD9IRndOXV/OiEsWNzdiWD
BJfpuf97XD+uU5w1QVI2tv4pdRMf031i505I+pAgFjDqj3TiqCmQm+/HAwLxPE3c
+LQwK6s3Fn9XDTOxPeDs0m7RU5bt4x5Sx9iDWvRYetymvZ26kLElF+7xiRlNAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUOIXav3t7+U05LLsnsiRUMQeWOrEwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNjM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiZDAN
BgkqhkiG9w0BAQsFAAOCAQEAZ/m5ezIiaTyp7ffu5jehXOSR8QqTb3oQRwV5nGqq
UNyEmDJKSyoGYUmIBc0O41RmSP1soO7QAfjQzLQHsqckxEL5of2lDIM+N798VVZz
iFaRIqpk56c0y15pPBxav58+bWsBEJubX0j0LFXRk0RIhMZZH3qA8BL+7FTAHAxT
ehezqlDpInLdNd9FdXj9sH8u0b7JgArEfvTlrUwCl2QTZuuKHgvqM9CENqr2AYvC
KRO/C4+HAqwIOXpSSFFo9YjLHDxRhXLM5xyaFKaxWHM9NkuY+lMNB1ANwLeLhX1+
cnQ60xfVdXBxHdRSS9C90c4VTtooA3coUS0otQw3kYvhgw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:33 2025 by rpki-client