Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: SZ8EUB8o9sIf18T3ngcQ37ud8opUPQDPSfOFbd9AfU4=
Subject key identifier: 27:1A:B4:E0:29:2A:CF:6C:22:80:A1:B5:73:EA:5F:FE:BB:31:F9:54
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 06505D920AFA33F8AE926089E05CB94857D2C5A7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237643a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 11:30:01 +0000
ROA not before: Wed 14 May 2025 11:25:01 +0000
ROA not after: Wed 13 May 2026 11:30:01 +0000
asID: 16909
IP address blocks: 2a14:7584:627d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 00:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:50:5d:92:0a:fa:33:f8:ae:92:60:89:e0:5c:b9:48:57:d2:c5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 11:25:01 2025 GMT
Not After : May 13 11:30:01 2026 GMT
Subject: CN=271AB4E0292ACF6C2280A1B573EA5FFEBB31F954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:88:01:a5:3d:be:21:98:95:db:a6:7a:ba:
e4:4c:1c:7a:b8:5f:ba:59:1e:e1:79:2a:e1:57:e5:
86:f0:e2:9c:cf:42:24:1e:4c:0e:33:a3:02:12:0e:
1d:71:b8:57:67:ce:42:c2:4b:68:96:dc:42:d7:b5:
3e:40:9c:ed:1d:fb:87:c3:65:81:65:66:e9:64:b5:
84:9d:85:d9:e1:b1:ba:dd:d2:93:1f:49:89:a2:0c:
bc:d9:d3:94:7c:8f:ac:c8:c6:75:84:be:c2:18:aa:
4f:aa:21:b1:07:91:ce:b0:2e:13:b4:15:78:0d:f2:
21:0d:72:c2:1a:cc:ae:fa:b1:b9:32:6e:08:c5:4b:
77:34:7f:7e:53:4d:74:46:b9:b9:f9:cb:ac:c0:9e:
3e:e3:1d:2b:72:42:90:3e:79:c2:44:c7:a3:e5:17:
b7:15:b9:5c:ed:08:c1:56:ad:01:91:31:22:c7:12:
d4:17:9c:38:95:2f:a4:13:e9:2d:84:d5:19:c2:76:
9f:5d:cd:80:e2:6c:bc:03:f4:68:18:b4:52:a1:b4:
8b:04:8c:9c:8c:3d:b7:3e:45:b8:4f:e4:ec:ef:c0:
9e:cc:63:c9:dd:18:cd:0f:3f:a7:47:b9:43:5c:34:
2d:b2:90:d4:72:70:0b:af:e0:bd:17:90:63:c6:6e:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1A:B4:E0:29:2A:CF:6C:22:80:A1:B5:73:EA:5F:FE:BB:31:F9:54
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:627d::/48
Signature Algorithm: sha256WithRSAEncryption
aa:c3:14:57:ec:7c:c5:48:a2:42:e6:6f:0c:c6:00:63:75:fb:
d8:ad:29:b9:21:15:26:34:f6:3e:c5:00:f1:b6:39:6b:b1:14:
8b:44:86:df:68:b6:02:de:e1:79:d8:87:4a:46:b4:2e:50:1b:
9f:c7:26:4f:86:b4:c5:45:0f:ae:da:8a:de:07:e2:4d:82:2f:
4f:c6:08:3e:78:05:8d:d3:07:2f:13:4c:78:8c:c0:c1:7a:2f:
da:c4:66:0f:b8:2e:e8:f3:39:bf:54:6c:9c:47:20:13:db:40:
30:ae:83:19:63:29:52:85:fe:91:2c:b2:ac:ca:80:1b:86:b0:
20:08:77:47:a4:16:9d:cf:ce:47:ee:16:70:59:b1:fe:ce:1c:
bf:8d:1f:fa:b2:ec:cc:d7:eb:0a:5c:fc:fd:9e:1d:10:60:5b:
26:bc:f5:d9:72:77:d9:07:a1:63:6b:f3:60:12:84:aa:53:9f:
78:14:4a:9e:83:ae:e2:8c:b5:90:f9:73:50:bd:f4:76:3e:02:
77:35:f7:65:af:2b:4c:29:6f:fc:28:16:9f:0f:ec:9b:96:87:
f4:96:15:80:87:5a:4a:f1:da:39:5f:a7:45:83:a0:26:9a:ec:
5c:fb:a9:55:41:0d:cf:2c:b8:89:7b:3a:46:a3:50:7b:d8:8a:
f8:59:69:6e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUBlBdkgr6M/iukmCJ4Fy5SFfSxacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTQxMTI1MDFaFw0yNjA1MTMxMTMwMDFaMDMxMTAvBgNV
BAMTKDI3MUFCNEUwMjkyQUNGNkMyMjgwQTFCNTczRUE1RkZFQkIzMUY5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1E4gBpT2+IZiV26Z6uuRMHHq4
X7pZHuF5KuFX5Ybw4pzPQiQeTA4zowISDh1xuFdnzkLCS2iW3ELXtT5AnO0d+4fD
ZYFlZulktYSdhdnhsbrd0pMfSYmiDLzZ05R8j6zIxnWEvsIYqk+qIbEHkc6wLhO0
FXgN8iENcsIazK76sbkybgjFS3c0f35TTXRGubn5y6zAnj7jHStyQpA+ecJEx6Pl
F7cVuVztCMFWrQGRMSLHEtQXnDiVL6QT6S2E1RnCdp9dzYDibLwD9GgYtFKhtIsE
jJyMPbc+RbhP5OzvwJ7MY8ndGM0PP6dHuUNcNC2ykNRycAuv4L0XkGPGbo2dAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUJxq04Ckqz2wigKG1c+pf/rsx+VQwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNzY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRifTAN
BgkqhkiG9w0BAQsFAAOCAQEAqsMUV+x8xUiiQuZvDMYAY3X72K0puSEVJjT2PsUA
8bY5a7EUi0SG32i2At7hediHSka0LlAbn8cmT4a0xUUPrtqK3gfiTYIvT8YIPngF
jdMHLxNMeIzAwXov2sRmD7gu6PM5v1RsnEcgE9tAMK6DGWMpUoX+kSyyrMqAG4aw
IAh3R6QWnc/OR+4WcFmx/s4cv40f+rLszNfrClz8/Z4dEGBbJrz12XJ32QehY2vz
YBKEqlOfeBRKnoOu4oy1kPlzUL30dj4CdzX3Za8rTClv/CgWnw/sm5aH9JYVgIda
SvHaOV+nRYOgJprsXPupVUENzyy4iXs6RqNQe9iK+Flpbg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:04:06 2025 by rpki-client