Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Exeio9YQdvmtcNm5fo6Kha/iObKtnNFakoNPQKdlwDY=
Subject key identifier: 44:81:D0:23:DD:E0:F7:E6:E8:99:92:51:DC:60:BF:B3:E1:81:D4:D6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 08477915E9DFED5141E9A8C9E57030F66C6F755E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236643a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 15:54:02 +0000
ROA not before: Tue 13 May 2025 15:49:02 +0000
ROA not after: Tue 12 May 2026 15:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:626d::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 08:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:47:79:15:e9:df:ed:51:41:e9:a8:c9:e5:70:30:f6:6c:6f:75:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 15:49:02 2025 GMT
Not After : May 12 15:54:02 2026 GMT
Subject: CN=4481D023DDE0F7E6E8999251DC60BFB3E181D4D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:79:95:4b:d0:73:3c:9e:be:0e:7d:df:cc:
21:29:58:01:8d:0c:3a:ab:f7:f3:f7:26:b4:1f:e0:
de:ce:6a:59:ea:de:7f:31:6a:59:94:f0:51:34:e1:
c0:30:45:6a:2f:1f:bb:dd:9f:6f:1a:c0:84:b3:69:
b7:59:5a:39:e8:8e:97:6a:2f:d8:3d:76:ec:55:90:
8e:46:3b:69:0d:14:c8:3d:48:cb:19:dd:e3:bf:6d:
4f:84:5b:c3:cb:ef:61:ac:cd:61:64:59:e0:0d:8c:
90:32:34:f2:7c:fc:2f:dc:30:e8:dc:ce:3c:af:06:
40:9d:c5:1d:10:6b:ef:f5:38:25:f6:08:a2:5e:1d:
40:08:12:67:f0:07:83:9d:15:9f:37:e8:bc:44:37:
8a:22:14:a6:17:79:ca:81:77:47:79:31:b3:f7:7a:
70:e1:1c:31:5e:0f:db:18:6c:f6:9d:9d:b9:86:a8:
92:59:5d:4e:bb:d8:fb:d2:3f:d4:1b:c9:b9:d3:5f:
c8:d3:de:ff:06:53:0a:4a:b4:55:a3:7b:6a:d1:e4:
32:bb:03:55:9f:cf:30:98:b1:b3:4e:27:44:95:5c:
5d:16:21:fd:36:7e:c5:67:ba:21:8e:82:23:c5:99:
4d:6e:70:31:53:05:2a:c9:79:db:5d:5f:c9:b6:30:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:81:D0:23:DD:E0:F7:E6:E8:99:92:51:DC:60:BF:B3:E1:81:D4:D6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:626d::/48
Signature Algorithm: sha256WithRSAEncryption
36:8a:4c:2a:ae:9a:2b:05:39:eb:72:91:d1:58:63:49:12:f7:
b3:75:47:10:8e:c3:91:db:a4:08:72:7a:b9:ec:0a:e9:91:b0:
98:a8:58:81:2c:87:15:40:5f:19:6c:68:5b:17:90:d4:39:fd:
9d:60:92:5a:6e:ec:3a:61:0d:2b:db:c2:47:bb:3a:2e:02:33:
01:a5:42:b0:ff:49:61:e9:87:01:ce:5a:71:f8:a6:6d:e4:72:
e3:0c:f8:bb:df:e4:5c:2e:25:4b:d4:c7:23:6f:75:ba:97:df:
0d:3d:f6:20:45:27:be:4b:df:75:8b:96:78:c4:4a:ca:20:77:
5c:da:46:11:34:9e:4f:9e:30:f0:c9:57:4b:41:22:7a:76:9c:
b4:82:9e:fe:42:16:5a:ab:da:43:29:8a:f1:9c:5b:33:1a:7f:
cd:62:d6:0d:49:ea:65:0e:5f:9b:53:9a:c6:fa:cb:10:a9:b6:
b2:88:07:e1:bc:b0:d0:10:33:7e:d0:f8:28:02:13:1c:19:d4:
80:ab:7f:32:ce:cc:40:aa:44:a3:2d:62:81:b5:2d:f7:e5:f5:
72:f0:cd:8d:da:ab:8d:01:b5:5a:0d:a5:99:ef:10:2c:6e:fa:
2d:6f:d7:09:e2:43:34:b8:8c:ee:89:b7:a0:f9:ad:86:8d:8a:
2e:f9:9e:f2
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUCEd5Fenf7VFB6ajJ5XAw9mxvdV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTMxNTQ5MDJaFw0yNjA1MTIxNTU0MDJaMDMxMTAvBgNV
BAMTKDQ0ODFEMDIzRERFMEY3RTZFODk5OTI1MURDNjBCRkIzRTE4MUQ0RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MnmVS9BzPJ6+Dn3fzCEpWAGN
DDqr9/P3JrQf4N7Oalnq3n8xalmU8FE04cAwRWovH7vdn28awISzabdZWjnojpdq
L9g9duxVkI5GO2kNFMg9SMsZ3eO/bU+EW8PL72GszWFkWeANjJAyNPJ8/C/cMOjc
zjyvBkCdxR0Qa+/1OCX2CKJeHUAIEmfwB4OdFZ836LxEN4oiFKYXecqBd0d5MbP3
enDhHDFeD9sYbPadnbmGqJJZXU672PvSP9QbybnTX8jT3v8GUwpKtFWje2rR5DK7
A1WfzzCYsbNOJ0SVXF0WIf02fsVnuiGOgiPFmU1ucDFTBSrJedtdX8m2MOadAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQURIHQI93g9+bomZJR3GC/s+GB1NYwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNjY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRibTAN
BgkqhkiG9w0BAQsFAAOCAQEANopMKq6aKwU563KR0VhjSRL3s3VHEI7DkdukCHJ6
uewK6ZGwmKhYgSyHFUBfGWxoWxeQ1Dn9nWCSWm7sOmENK9vCR7s6LgIzAaVCsP9J
YemHAc5acfimbeRy4wz4u9/kXC4lS9THI291upffDT32IEUnvkvfdYuWeMRKyiB3
XNpGETSeT54w8MlXS0EienactIKe/kIWWqvaQymK8ZxbMxp/zWLWDUnqZQ5fm1Oa
xvrLEKm2sogH4byw0BAzftD4KAITHBnUgKt/Ms7MQKpEoy1igbUt9+X1cvDNjdqr
jQG1Wg2lme8QLG76LW/XCeJDNLiM7om3oPmtho2KLvme8g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:30 2025 by rpki-client