Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: XTNkUnOKsigJyDa7eJMBIBHEJ9a1UockvQJa/Rs5kPE=
Subject key identifier: C0:F9:32:C9:A2:C6:3D:2C:18:D5:AC:2F:A4:DD:05:ED:33:D7:C4:17
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1DAC9BF73E6FE6E7919656CB29D6E17D198FAAA7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237343a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 21:36:02 +0000
ROA not before: Tue 13 May 2025 21:31:02 +0000
ROA not after: Tue 12 May 2026 21:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6274::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ac:9b:f7:3e:6f:e6:e7:91:96:56:cb:29:d6:e1:7d:19:8f:aa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 21:31:02 2025 GMT
Not After : May 12 21:36:02 2026 GMT
Subject: CN=C0F932C9A2C63D2C18D5AC2FA4DD05ED33D7C417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:40:d4:ab:8a:6b:78:87:f4:10:f8:21:9b:c1:
46:a0:fd:e2:5e:30:51:5f:f8:5d:33:c3:a9:ea:f9:
69:53:55:ba:c4:e4:2a:3c:95:b0:b8:45:7f:af:d0:
ae:96:d8:84:4c:78:c1:40:1f:80:b3:a0:ab:55:e8:
af:b8:13:44:e4:f0:fa:6b:5f:f4:22:4d:39:be:bc:
a8:98:e1:df:b6:34:ef:d6:33:b2:46:8c:e1:a7:a6:
5f:3f:b7:d3:35:8a:5f:92:1c:3e:6c:82:fc:cf:76:
cc:17:9c:3e:ec:02:6e:3f:52:59:70:60:00:f2:6a:
fc:01:61:08:a3:87:f6:b0:8f:d4:a2:92:cf:69:d4:
2d:c1:a5:c4:b3:f4:23:ac:2d:34:22:51:b4:09:b9:
75:95:59:07:1e:ca:4b:c7:e2:3d:a7:71:85:0c:5a:
07:0a:a8:65:42:e2:fb:87:e5:f5:7a:11:d3:85:92:
27:6c:6c:51:e0:3a:ed:d0:60:c9:b6:19:df:29:30:
7d:06:c2:5c:f9:d8:1b:e9:8b:6b:b5:c5:66:90:cd:
1d:49:02:1a:9a:c5:73:e7:7c:31:35:5c:48:a3:e4:
5c:78:c4:2f:2f:3b:0d:63:c9:92:c3:e9:8f:9b:58:
e2:83:b0:46:8f:6c:c0:f5:24:75:60:26:5c:0b:a4:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F9:32:C9:A2:C6:3D:2C:18:D5:AC:2F:A4:DD:05:ED:33:D7:C4:17
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6274::/48
Signature Algorithm: sha256WithRSAEncryption
0e:60:e7:56:6e:71:fb:ca:6b:03:36:5c:d4:1c:5c:1e:8e:07:
e3:bc:1a:4b:4f:12:70:ef:0c:b6:57:09:38:8f:4b:58:73:81:
97:89:4e:ea:ea:c2:7e:4f:3d:c9:10:0e:19:34:3b:37:c3:b1:
12:a3:62:75:8f:8d:79:d5:15:a9:9c:4c:81:2a:71:4f:1a:1f:
60:b8:31:eb:6e:66:f0:ca:5c:44:2e:ec:2f:f0:59:0c:3e:58:
54:dd:1b:3c:a5:a9:cb:64:16:da:9b:4a:d8:c6:79:a2:7c:d5:
9b:ba:f8:8a:90:4f:b7:08:5f:8a:ed:fb:cf:71:75:19:f0:97:
97:af:eb:1b:9f:63:24:d7:c0:1a:95:08:90:a6:7e:d2:72:32:
97:0a:d9:36:02:75:a6:0b:97:3d:a8:70:ad:9a:cf:15:3e:b7:
06:50:71:f5:fc:a8:33:85:3a:13:1b:96:9a:39:48:b4:11:d0:
74:35:86:d2:1f:cc:e2:a0:80:3b:e9:37:21:e6:d2:ba:8f:2d:
f8:dc:36:b1:6c:8c:0d:e1:e9:bc:5e:70:1b:08:1a:c0:aa:c1:
65:dd:a3:5e:9e:54:78:74:2a:fb:20:4b:e6:7a:32:d0:18:de:
0e:3a:c7:9c:54:73:4b:5a:8c:90:39:4b:cf:af:62:74:e4:b6:
c5:94:27:db
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUHayb9z5v5ueRllbLKdbhfRmPqqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTMyMTMxMDJaFw0yNjA1MTIyMTM2MDJaMDMxMTAvBgNV
BAMTKEMwRjkzMkM5QTJDNjNEMkMxOEQ1QUMyRkE0REQwNUVEMzNEN0M0MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQNSrimt4h/QQ+CGbwUag/eJe
MFFf+F0zw6nq+WlTVbrE5Co8lbC4RX+v0K6W2IRMeMFAH4CzoKtV6K+4E0Tk8Ppr
X/QiTTm+vKiY4d+2NO/WM7JGjOGnpl8/t9M1il+SHD5sgvzPdswXnD7sAm4/Ullw
YADyavwBYQijh/awj9Siks9p1C3BpcSz9COsLTQiUbQJuXWVWQceykvH4j2ncYUM
WgcKqGVC4vuH5fV6EdOFkidsbFHgOu3QYMm2Gd8pMH0Gwlz52Bvpi2u1xWaQzR1J
AhqaxXPnfDE1XEij5Fx4xC8vOw1jyZLD6Y+bWOKDsEaPbMD1JHVgJlwLpFo1AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUwPkyyaLGPSwY1awvpN0F7TPXxBcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNzM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRidDAN
BgkqhkiG9w0BAQsFAAOCAQEADmDnVm5x+8prAzZc1BxcHo4H47waS08ScO8MtlcJ
OI9LWHOBl4lO6urCfk89yRAOGTQ7N8OxEqNidY+NedUVqZxMgSpxTxofYLgx625m
8MpcRC7sL/BZDD5YVN0bPKWpy2QW2ptK2MZ5onzVm7r4ipBPtwhfiu37z3F1GfCX
l6/rG59jJNfAGpUIkKZ+0nIylwrZNgJ1pguXPahwrZrPFT63BlBx9fyoM4U6ExuW
mjlItBHQdDWG0h/M4qCAO+k3IebSuo8t+Nw2sWyMDeHpvF5wGwgawKrBZd2jXp5U
eHQq+yBL5noy0BjeDjrHnFRzS1qMkDlLz69idOS2xZQn2w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:12 2025 by rpki-client