Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: YQv0NNYDH72fno6arkaZBuhS/z3Jes2uP/VCtuSJx3Q=
Subject key identifier: 81:A4:3B:2D:AA:31:5C:37:5F:A0:C1:AD:19:E3:DF:4B:7B:E0:31:36
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 584E57E26BE35D20D0EB99EDB7A5DCB88FB07F7C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236373a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:03 +0000
ROA not before: Mon 12 May 2025 16:13:03 +0000
ROA not after: Mon 11 May 2026 16:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6267::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 11:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:4e:57:e2:6b:e3:5d:20:d0:eb:99:ed:b7:a5:dc:b8:8f:b0:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:03 2025 GMT
Not After : May 11 16:18:03 2026 GMT
Subject: CN=81A43B2DAA315C375FA0C1AD19E3DF4B7BE03136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:27:8a:4c:ed:cb:52:8b:32:c5:c0:ce:bc:
f9:d1:0e:d8:1e:ac:88:88:66:07:29:15:28:e6:4a:
d6:df:4f:89:18:53:40:b2:2d:88:ae:43:f8:50:81:
1f:c0:8c:c4:be:ab:6b:0d:28:c3:85:db:61:90:3f:
4b:70:4f:2b:d5:11:10:45:fd:7c:9c:c1:9e:44:13:
13:37:c4:4c:a7:3e:a3:f6:76:0a:6d:b1:bc:39:a6:
01:c8:e9:3d:f0:34:9c:94:e0:92:04:85:b3:cf:24:
83:a7:e8:2c:1d:62:d8:51:80:1c:e6:01:8e:e8:db:
2f:63:01:10:2b:ab:24:17:35:73:23:51:77:5a:2c:
6b:77:b3:14:64:9b:80:0e:78:48:11:90:0d:26:0e:
3c:d2:04:13:4b:a4:4a:75:50:80:4a:ff:46:31:74:
a6:04:9b:e1:31:bc:8b:46:88:ec:73:94:0c:f6:f7:
d9:42:49:4a:25:5c:c0:aa:55:26:b5:6a:dd:87:88:
7c:b4:f6:9c:d5:4a:d2:a7:f7:58:1f:c5:9f:2b:fe:
44:d1:d8:90:ef:43:53:0d:aa:fe:7d:5b:30:40:d5:
68:ee:2f:50:c2:16:b7:b1:ee:c1:5c:cc:72:89:54:
1c:88:34:de:9e:87:4b:69:01:9f:9d:56:a7:f5:6c:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A4:3B:2D:AA:31:5C:37:5F:A0:C1:AD:19:E3:DF:4B:7B:E0:31:36
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6267::/48
Signature Algorithm: sha256WithRSAEncryption
50:54:a2:31:e3:17:1f:cc:ba:79:30:b2:fd:24:72:e1:b1:4e:
93:93:4d:ab:ce:6c:56:8a:20:1a:95:dd:44:9e:47:29:76:0d:
11:c9:3e:19:64:3f:7f:c2:f8:de:42:9e:18:a0:33:f8:dd:a1:
d4:a2:3a:ba:37:26:e3:e0:12:1c:fe:1c:99:47:e0:6f:ba:fe:
a3:39:72:04:f8:43:19:3a:35:7f:db:42:73:05:91:2a:11:0f:
83:ec:f4:34:c9:d5:a0:4b:3c:85:55:3a:a8:3c:c3:c4:93:96:
60:ed:11:bd:f6:d1:a6:43:bd:6d:df:00:0d:96:fb:9d:6e:bc:
00:cc:59:93:e2:af:6b:27:2d:a3:8d:b0:4c:5b:79:20:52:7b:
9e:32:7f:be:8f:20:6e:68:98:e4:2e:b9:89:f8:51:a5:49:6d:
33:03:a4:11:e8:6c:e0:36:f3:e4:60:3a:36:c5:e9:55:ea:22:
5e:a1:d1:64:31:c1:1b:2b:f1:b0:55:ba:53:1a:6e:d7:b0:38:
eb:ef:f9:0b:e1:50:f7:14:3c:05:4a:e4:15:13:79:2e:13:27:
e4:c5:5c:15:23:51:11:f0:c5:14:d2:4b:3a:2d:3a:46:1a:b2:
f1:1f:aa:68:04:c3:35:56:a2:d9:c0:04:71:ce:6e:2a:e0:f1:
e7:1b:dd:a0
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUWE5X4mvjXSDQ65ntt6XcuI+wf3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDNaFw0yNjA1MTExNjE4MDNaMDMxMTAvBgNV
BAMTKDgxQTQzQjJEQUEzMTVDMzc1RkEwQzFBRDE5RTNERjRCN0JFMDMxMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUOCeKTO3LUosyxcDOvPnRDtge
rIiIZgcpFSjmStbfT4kYU0CyLYiuQ/hQgR/AjMS+q2sNKMOF22GQP0twTyvVERBF
/XycwZ5EExM3xEynPqP2dgptsbw5pgHI6T3wNJyU4JIEhbPPJIOn6CwdYthRgBzm
AY7o2y9jARArqyQXNXMjUXdaLGt3sxRkm4AOeEgRkA0mDjzSBBNLpEp1UIBK/0Yx
dKYEm+ExvItGiOxzlAz299lCSUolXMCqVSa1at2HiHy09pzVStKn91gfxZ8r/kTR
2JDvQ1MNqv59WzBA1WjuL1DCFrex7sFczHKJVByINN6eh0tpAZ+dVqf1bPEJAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUgaQ7LaoxXDdfoMGtGePfS3vgMTYwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNjM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiZzAN
BgkqhkiG9w0BAQsFAAOCAQEAUFSiMeMXH8y6eTCy/SRy4bFOk5NNq85sVoogGpXd
RJ5HKXYNEck+GWQ/f8L43kKeGKAz+N2h1KI6ujcm4+ASHP4cmUfgb7r+ozlyBPhD
GTo1f9tCcwWRKhEPg+z0NMnVoEs8hVU6qDzDxJOWYO0RvfbRpkO9bd8ADZb7nW68
AMxZk+Kvaycto42wTFt5IFJ7njJ/vo8gbmiY5C65ifhRpUltMwOkEehs4Dbz5GA6
NsXpVeoiXqHRZDHBGyvxsFW6Uxpu17A46+/5C+FQ9xQ8BUrkFRN5LhMn5MVcFSNR
EfDFFNJLOi06Rhqy8R+qaATDNVai2cAEcc5uKuDx5xvdoA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:54 2025 by rpki-client