Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: JMH4/ijnUGbnd/y543Gb+6gRPx4NCSFuDBKIKhkGyA8=
Subject key identifier: DF:9E:7D:EA:CE:4A:8A:7F:E2:4A:14:5A:BB:7C:A2:EA:30:3F:27:33
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0A86367EFA3F3BD6C5091FFD69119559024F0664
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238353a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 21:42:02 +0000
ROA not before: Wed 14 May 2025 21:37:02 +0000
ROA not after: Wed 13 May 2026 21:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6285::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:86:36:7e:fa:3f:3b:d6:c5:09:1f:fd:69:11:95:59:02:4f:06:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 21:37:02 2025 GMT
Not After : May 13 21:42:02 2026 GMT
Subject: CN=DF9E7DEACE4A8A7FE24A145ABB7CA2EA303F2733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:15:bd:88:ab:fb:9b:d4:00:b7:4e:f9:2a:19:
5f:ff:0d:14:da:57:49:0a:7d:40:e1:33:c4:ff:cd:
7c:93:76:a5:25:59:5b:b9:b4:a5:bb:e9:74:ed:9c:
c6:9c:03:85:1e:78:56:82:b8:6a:fb:d3:47:61:03:
65:12:15:12:b6:b4:54:eb:3f:61:40:91:8b:62:81:
c0:32:98:64:7a:e9:58:b9:76:a0:b9:0e:a3:c0:2a:
6d:1d:67:06:72:bd:3a:b2:a4:bc:4d:23:5e:8e:d8:
f8:68:cb:e8:ec:ba:7f:46:c2:dc:f4:22:d9:32:4a:
79:1b:a0:45:62:2b:8a:00:9d:9a:2f:30:40:aa:14:
29:6a:f5:f1:e2:31:7a:ea:15:85:53:72:67:17:14:
fb:7d:91:a4:63:04:4c:65:a7:ea:b9:7b:42:82:92:
fc:95:8f:42:3a:64:b1:7c:95:7f:43:1a:ab:11:66:
26:b0:5a:ba:57:f7:74:63:53:b1:7a:0f:47:12:23:
af:b4:2a:18:07:44:cb:39:18:b0:0b:1c:47:fb:d4:
18:13:56:2b:c1:ab:a5:8e:fb:87:8c:65:ac:87:7d:
d9:0d:1b:fd:32:47:75:65:1d:0b:02:2c:2f:de:c9:
96:84:a2:24:f4:14:2e:c1:0d:5a:35:79:ce:29:46:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9E:7D:EA:CE:4A:8A:7F:E2:4A:14:5A:BB:7C:A2:EA:30:3F:27:33
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6285::/48
Signature Algorithm: sha256WithRSAEncryption
68:a1:b7:8f:ef:85:2a:1a:48:a5:63:c9:7d:76:b2:d4:5d:cd:
e6:4a:5f:a2:68:57:54:a0:33:38:b1:86:57:c3:a7:19:0a:c1:
4e:a8:80:99:a2:0c:5a:9e:c7:47:c6:8a:57:0a:02:f7:0a:2d:
20:57:66:b4:00:39:40:5a:c2:41:5e:2d:5b:66:b0:ba:db:bc:
6b:ef:7d:e0:d9:10:7d:a3:f8:c1:73:7b:54:45:75:af:d4:1f:
02:58:7b:cc:f0:35:3b:00:60:0b:63:17:d6:ca:06:b1:ba:b2:
eb:4c:09:69:9e:08:8e:c5:0a:67:8c:f9:23:ed:90:36:84:12:
1c:eb:d5:bc:8b:90:4f:4e:42:b0:70:4b:a4:c9:db:48:02:f0:
2e:f2:dd:65:e9:2c:7d:a6:af:89:81:c9:18:bb:b9:16:81:7d:
c7:6c:85:ae:10:22:70:12:c2:3a:61:ee:ff:c4:e6:71:97:6f:
6d:cf:59:1b:09:4c:86:67:71:6f:2c:d1:0a:03:24:81:4e:aa:
e4:af:2b:ea:d6:ce:12:e8:2c:c8:fc:a4:f1:5c:98:6b:cb:4a:
4a:d1:1c:0a:4c:1f:08:09:b8:d4:6a:d2:17:9f:2a:c8:3a:52:
4f:c0:51:d5:96:b1:eb:5a:50:8e:5f:87:99:8d:c1:8b:bf:1d:
96:ed:5d:b5
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUCoY2fvo/O9bFCR/9aRGVWQJPBmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTQyMTM3MDJaFw0yNjA1MTMyMTQyMDJaMDMxMTAvBgNV
BAMTKERGOUU3REVBQ0U0QThBN0ZFMjRBMTQ1QUJCN0NBMkVBMzAzRjI3MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXFb2Iq/ub1AC3TvkqGV//DRTa
V0kKfUDhM8T/zXyTdqUlWVu5tKW76XTtnMacA4UeeFaCuGr700dhA2USFRK2tFTr
P2FAkYtigcAymGR66Vi5dqC5DqPAKm0dZwZyvTqypLxNI16O2Phoy+jsun9Gwtz0
ItkySnkboEViK4oAnZovMECqFClq9fHiMXrqFYVTcmcXFPt9kaRjBExlp+q5e0KC
kvyVj0I6ZLF8lX9DGqsRZiawWrpX93RjU7F6D0cSI6+0KhgHRMs5GLALHEf71BgT
VivBq6WO+4eMZayHfdkNG/0yR3VlHQsCLC/eyZaEoiT0FC7BDVo1ec4pRiP7AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU35596s5Kin/iShRau3yi6jA/JzMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzODM1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRihTAN
BgkqhkiG9w0BAQsFAAOCAQEAaKG3j++FKhpIpWPJfXay1F3N5kpfomhXVKAzOLGG
V8OnGQrBTqiAmaIMWp7HR8aKVwoC9wotIFdmtAA5QFrCQV4tW2awutu8a+994NkQ
faP4wXN7VEV1r9QfAlh7zPA1OwBgC2MX1soGsbqy60wJaZ4IjsUKZ4z5I+2QNoQS
HOvVvIuQT05CsHBLpMnbSALwLvLdZeksfaaviYHJGLu5FoF9x2yFrhAicBLCOmHu
/8TmcZdvbc9ZGwlMhmdxbyzRCgMkgU6q5K8r6tbOEugsyPyk8VyYa8tKStEcCkwf
CAm41GrSF58qyDpST8BR1Zax61pQjl+HmY3Bi78dlu1dtQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:34 2025 by rpki-client