Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: yPiQyoHcMH2VvLvZ2xYckTmwNOz7apjAFZ3eG8v5tGw=
Subject key identifier: BC:15:63:97:96:3A:F8:5E:46:2C:2F:51:66:F7:35:CF:E0:3F:26:2A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 180D646E184ECAA91803770EF3E040B4ED0CDB50
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237633a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 11:30:01 +0000
ROA not before: Wed 14 May 2025 11:25:01 +0000
ROA not after: Wed 13 May 2026 11:30:01 +0000
asID: 16909
IP address blocks: 2a14:7584:627c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 14:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0d:64:6e:18:4e:ca:a9:18:03:77:0e:f3:e0:40:b4:ed:0c:db:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 11:25:01 2025 GMT
Not After : May 13 11:30:01 2026 GMT
Subject: CN=BC156397963AF85E462C2F5166F735CFE03F262A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:49:d6:c7:d0:06:7c:a1:b1:e7:00:14:2c:
73:f3:27:c6:5f:da:67:7b:0c:64:99:47:ea:ab:69:
e2:6f:0c:9f:3e:94:5c:15:f4:24:ef:4e:22:10:27:
e1:65:45:a0:5f:27:a7:17:25:a1:2d:04:be:ef:0c:
b3:d6:41:6f:4a:26:4f:42:98:7f:92:8b:eb:d3:dd:
9b:7c:ab:30:f0:50:34:6e:a7:68:ac:6a:38:af:c4:
38:f2:2a:af:de:97:34:b3:89:96:05:8f:aa:c7:9f:
99:57:1b:bf:be:78:36:53:08:84:5d:39:e9:6f:78:
1e:db:71:ba:10:06:26:14:39:e8:50:ef:dc:6e:ae:
29:98:1e:19:54:c7:0c:3f:42:9e:eb:68:24:e5:0c:
64:bf:da:3d:be:d1:0c:31:1a:51:73:6d:d6:54:da:
99:c6:7b:17:6c:94:fc:83:14:fa:d7:e1:e4:5f:69:
6d:a5:c6:52:2a:de:38:81:f0:5e:e3:d8:06:34:8f:
f6:98:02:be:90:7c:28:22:96:56:c8:1a:1e:37:8b:
d9:ea:45:58:23:28:eb:3c:eb:fa:9d:17:dd:4c:a0:
d7:74:c5:b3:9c:e6:2c:2e:34:7f:d0:32:50:f2:5f:
ee:ee:c4:38:9b:9a:58:b4:2a:f0:3a:1e:7a:f9:e3:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:63:97:96:3A:F8:5E:46:2C:2F:51:66:F7:35:CF:E0:3F:26:2A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:627c::/48
Signature Algorithm: sha256WithRSAEncryption
36:b7:b0:1c:f3:5e:6f:6c:2f:bc:e0:1c:64:6b:4b:89:99:1b:
90:d8:9d:08:9c:19:d8:14:8c:3b:8b:6c:93:12:32:00:2d:18:
a8:0f:f1:a9:c6:a0:99:2e:0b:44:81:db:b8:86:d7:5a:cb:2e:
e3:c2:2e:33:72:04:8c:fd:4a:b0:86:a4:07:09:07:6c:8f:e9:
94:f6:56:28:5a:4b:ca:98:21:7e:49:0a:08:cd:7c:5d:0f:c5:
8d:67:8f:61:be:1e:b9:c0:34:80:99:6c:8a:22:e0:29:82:a3:
41:17:6d:13:8f:99:ba:2a:e9:91:66:a7:b0:ff:e5:8c:83:2f:
f6:45:d1:d4:68:7e:5a:6c:2f:c9:2e:6f:6c:2c:5b:c0:26:34:
1d:0a:9e:aa:2c:24:ff:03:ff:21:09:cb:e1:f8:6c:06:99:ce:
b4:00:35:28:7f:d8:73:6f:36:59:b7:1d:8d:f3:86:d6:7c:05:
24:33:89:68:1e:83:0f:54:c7:3e:56:dd:fe:4e:43:30:13:40:
d9:f1:91:10:d5:ce:8b:30:4d:c7:85:92:d1:92:5c:ef:43:6b:
9a:24:9d:34:ba:8d:3e:a2:cd:f9:cc:e3:76:c7:8d:a7:3e:86:
c9:09:2b:ee:c6:42:ca:20:66:01:c4:75:dd:39:69:78:6a:bf:
5a:23:d6:f1
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUGA1kbhhOyqkYA3cO8+BAtO0M21AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTQxMTI1MDFaFw0yNjA1MTMxMTMwMDFaMDMxMTAvBgNV
BAMTKEJDMTU2Mzk3OTYzQUY4NUU0NjJDMkY1MTY2RjczNUNGRTAzRjI2MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6knWx9AGfKGx5wAULHPzJ8Zf
2md7DGSZR+qraeJvDJ8+lFwV9CTvTiIQJ+FlRaBfJ6cXJaEtBL7vDLPWQW9KJk9C
mH+Si+vT3Zt8qzDwUDRup2isajivxDjyKq/elzSziZYFj6rHn5lXG7++eDZTCIRd
OelveB7bcboQBiYUOehQ79xurimYHhlUxww/Qp7raCTlDGS/2j2+0QwxGlFzbdZU
2pnGexdslPyDFPrX4eRfaW2lxlIq3jiB8F7j2AY0j/aYAr6QfCgillbIGh43i9nq
RVgjKOs86/qdF91MoNd0xbOc5iwuNH/QMlDyX+7uxDibmli0KvA6Hnr540mHAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUvBVjl5Y6+F5GLC9RZvc1z+A/JiowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNzYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRifDAN
BgkqhkiG9w0BAQsFAAOCAQEANrewHPNeb2wvvOAcZGtLiZkbkNidCJwZ2BSMO4ts
kxIyAC0YqA/xqcagmS4LRIHbuIbXWssu48IuM3IEjP1KsIakBwkHbI/plPZWKFpL
ypghfkkKCM18XQ/FjWePYb4eucA0gJlsiiLgKYKjQRdtE4+ZuirpkWansP/ljIMv
9kXR1Gh+WmwvyS5vbCxbwCY0HQqeqiwk/wP/IQnL4fhsBpnOtAA1KH/Yc282Wbcd
jfOG1nwFJDOJaB6DD1THPlbd/k5DMBNA2fGRENXOizBNx4WS0ZJc70NrmiSdNLqN
PqLN+czjdseNpz6GyQkr7sZCyiBmAcR13TlpeGq/WiPW8Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:20:58 2025 by rpki-client