Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vJko27K1TtzHGigkQ6xm1XGPLuRC1J18TFFaMDUDzjs=
Subject key identifier: 3F:4C:39:77:D9:CB:BE:C8:1C:CC:A3:45:C0:FC:8C:FC:EF:8B:4A:CA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1727ED2B946BA9A6A64CC9648434BB6AD207CB9D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236623a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 15:54:03 +0000
ROA not before: Tue 13 May 2025 15:49:03 +0000
ROA not after: Tue 12 May 2026 15:54:03 +0000
asID: 16909
IP address blocks: 2a14:7584:626b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 16:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:27:ed:2b:94:6b:a9:a6:a6:4c:c9:64:84:34:bb:6a:d2:07:cb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 15:49:03 2025 GMT
Not After : May 12 15:54:03 2026 GMT
Subject: CN=3F4C3977D9CBBEC81CCCA345C0FC8CFCEF8B4ACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:81:4b:17:d7:a4:cc:12:e2:77:87:e9:2b:
ed:1e:87:9a:f7:e8:81:8c:50:e5:85:7d:22:d3:e8:
81:23:9a:b9:33:34:9c:8f:ab:47:93:b2:6a:da:21:
58:d6:ad:dc:35:cc:1e:77:09:35:19:8f:c6:15:cc:
cc:2d:de:3c:a5:b4:84:6a:61:6f:03:59:f1:82:4e:
4d:1e:2f:ef:f6:cf:30:e9:c9:ad:d3:58:7b:f9:27:
33:a4:d2:24:be:79:98:bb:8a:6b:f4:f9:b5:8f:f1:
c9:30:9d:f8:ad:62:92:72:28:35:5a:88:c4:bf:56:
ed:2c:20:6d:91:b8:26:e5:0e:ce:18:ca:f2:8b:72:
45:ef:b8:6e:49:df:b9:dd:47:6e:e3:f4:d6:de:6d:
a1:25:52:61:15:e8:54:37:72:16:af:10:7f:6b:9a:
a5:69:ed:3c:84:90:09:b8:e7:ad:70:98:03:cd:a8:
ff:dd:b9:50:d6:3c:7d:fa:07:fd:19:b3:eb:51:1b:
ff:df:d6:ea:c2:28:57:61:3c:8d:5f:d9:8a:d3:85:
3d:b0:21:49:d1:40:08:2d:18:38:89:2f:33:ce:1a:
b7:7c:3c:da:ef:0e:1c:b5:32:f8:97:1d:c3:df:fd:
0b:64:90:24:80:a0:3a:91:1c:1a:72:6c:ce:e0:05:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:39:77:D9:CB:BE:C8:1C:CC:A3:45:C0:FC:8C:FC:EF:8B:4A:CA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:626b::/48
Signature Algorithm: sha256WithRSAEncryption
55:9b:c8:02:5f:a4:93:17:fd:98:c6:ad:30:f4:62:56:60:b0:
60:a3:c5:cc:23:96:0a:be:25:4c:0a:19:02:9d:b1:a1:17:87:
7f:01:e7:7f:54:36:57:49:29:a6:7a:5e:d1:08:7e:2f:51:50:
20:be:0d:35:86:a6:6c:a1:ad:68:98:4a:81:e0:4d:6c:bd:34:
b8:86:b6:8a:0e:66:1b:2c:0e:bd:98:53:c1:63:31:e8:b3:8d:
0a:cb:d5:fa:c9:90:91:53:39:d8:f4:99:d5:c4:53:51:12:19:
80:6d:b7:3c:ba:bd:b8:ea:a1:bd:88:ef:74:ca:9c:b0:30:81:
6d:d4:cb:f2:0c:f1:58:f3:22:8b:04:31:1a:04:9f:bd:98:7b:
ff:3f:26:09:a0:cb:4d:05:c2:28:63:db:63:91:e6:97:c8:23:
4c:d5:84:9e:94:c0:00:ce:e9:cc:41:b8:c7:85:d0:22:3a:da:
20:60:15:ee:02:2c:76:d4:af:49:cb:f3:aa:e8:28:b7:89:3e:
13:e1:b9:bb:2a:b2:cf:b0:7f:7f:c9:cb:1c:a1:be:4e:10:3f:
46:f1:a5:e3:4a:ec:5d:e4:08:38:4c:37:47:47:48:5d:33:98:
eb:e8:e4:66:16:eb:65:22:c2:85:8d:c1:90:09:9a:de:3b:ae:
c4:4c:7c:55
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUFyftK5RrqaamTMlkhDS7atIHy50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTMxNTQ5MDNaFw0yNjA1MTIxNTU0MDNaMDMxMTAvBgNV
BAMTKDNGNEMzOTc3RDlDQkJFQzgxQ0NDQTM0NUMwRkM4Q0ZDRUY4QjRBQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyoFLF9ekzBLid4fpK+0eh5r3
6IGMUOWFfSLT6IEjmrkzNJyPq0eTsmraIVjWrdw1zB53CTUZj8YVzMwt3jyltIRq
YW8DWfGCTk0eL+/2zzDpya3TWHv5JzOk0iS+eZi7imv0+bWP8ckwnfitYpJyKDVa
iMS/Vu0sIG2RuCblDs4YyvKLckXvuG5J37ndR27j9NbebaElUmEV6FQ3chavEH9r
mqVp7TyEkAm4561wmAPNqP/duVDWPH36B/0Zs+tRG//f1urCKFdhPI1f2YrThT2w
IUnRQAgtGDiJLzPOGrd8PNrvDhy1MviXHcPf/QtkkCSAoDqRHBpybM7gBQovAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUP0w5d9nLvsgczKNFwPyM/O+LSsowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNjYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiazAN
BgkqhkiG9w0BAQsFAAOCAQEAVZvIAl+kkxf9mMatMPRiVmCwYKPFzCOWCr4lTAoZ
Ap2xoReHfwHnf1Q2V0kppnpe0Qh+L1FQIL4NNYambKGtaJhKgeBNbL00uIa2ig5m
GywOvZhTwWMx6LONCsvV+smQkVM52PSZ1cRTURIZgG23PLq9uOqhvYjvdMqcsDCB
bdTL8gzxWPMiiwQxGgSfvZh7/z8mCaDLTQXCKGPbY5Hml8gjTNWEnpTAAM7pzEG4
x4XQIjraIGAV7gIsdtSvScvzqugot4k+E+G5uyqyz7B/f8nLHKG+ThA/RvGl40rs
XeQIOEw3R0dIXTOY6+jkZhbrZSLChY3BkAma3juuxEx8VQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:03:31 2025 by rpki-client