Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: SL2a4ADTccDKC59dtXRSPZJrgXr+S10pkuveuOePP8Y=
Subject key identifier: 2A:24:38:06:5D:3E:A5:14:90:9A:07:FC:03:24:8B:12:CF:9B:1A:61
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3AB8E845E23C0097D38FBF5F65E9ACA611BA5D53
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239323a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 14:42:01 +0000
ROA not before: Thu 15 May 2025 14:37:01 +0000
ROA not after: Thu 14 May 2026 14:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6292::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 15:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b8:e8:45:e2:3c:00:97:d3:8f:bf:5f:65:e9:ac:a6:11:ba:5d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 14:37:01 2025 GMT
Not After : May 14 14:42:01 2026 GMT
Subject: CN=2A2438065D3EA514909A07FC03248B12CF9B1A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:a9:f9:f7:2c:0f:49:c7:4e:41:3e:35:c9:
f1:bd:fa:8e:78:db:ab:1f:8c:90:66:81:75:fa:77:
b7:00:1d:79:99:96:91:da:36:15:56:34:ca:6d:cd:
33:48:f5:9a:c9:04:e8:a8:8e:b2:04:16:61:c1:fb:
92:ea:06:be:50:fb:01:f1:72:04:1a:2b:8d:5a:ee:
22:28:7b:e8:57:b6:9d:ff:5e:71:c1:22:cc:b8:ba:
3e:c1:32:3d:33:b1:86:d2:20:b3:af:a2:12:97:ab:
08:da:44:e7:ed:6c:62:61:22:fc:37:f2:a7:c6:28:
56:ab:ab:ed:9e:f7:b2:32:70:fb:7c:0b:2b:7a:0f:
d4:19:52:5d:a9:c2:9d:b8:85:f8:f8:21:a3:39:a8:
ad:3f:2b:ac:aa:7e:83:db:38:18:a0:78:2a:0e:21:
ab:ed:8a:89:ea:32:9c:7c:c6:35:e2:22:2b:87:b1:
2f:e3:87:01:df:26:df:77:b6:df:9f:89:41:cd:d5:
93:dd:f7:1f:b6:0f:30:1b:a4:4b:54:9b:06:e4:a8:
c6:7e:ba:8e:89:ca:82:73:ae:fd:ce:f0:a4:e2:87:
cc:29:51:07:dc:21:8c:6f:ff:fe:99:dd:4c:e2:39:
7e:b9:72:bd:ca:97:5e:a2:4e:e8:4e:0a:8b:cd:12:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:24:38:06:5D:3E:A5:14:90:9A:07:FC:03:24:8B:12:CF:9B:1A:61
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6292::/48
Signature Algorithm: sha256WithRSAEncryption
28:be:14:d8:97:a3:ff:c8:61:fe:8f:fa:64:1c:01:b6:4f:2a:
d9:6e:10:fa:60:47:05:af:a3:d3:30:0f:1d:bd:11:4c:e0:05:
6e:88:20:c0:01:0e:7e:cb:1d:e4:95:fc:1f:47:0a:1c:65:e2:
56:ee:fe:bc:21:f1:00:16:50:b8:bb:db:94:05:61:5e:71:1f:
b2:ca:49:9e:49:9c:6a:3c:22:7c:25:04:d9:b7:aa:44:e3:29:
a9:2f:cd:52:7f:49:c0:90:cf:1e:f6:6c:c5:56:d5:e0:fb:92:
58:a2:96:62:77:80:21:ff:b6:9d:15:64:79:cc:60:86:95:42:
49:45:92:b7:dc:3a:94:22:d1:60:9c:45:84:28:a5:9a:98:c3:
8a:f8:fe:6a:90:f0:e6:b1:8a:0c:55:50:3d:f4:03:2f:83:e1:
d6:0a:7a:2e:9b:0b:8a:0b:da:06:18:d8:88:d5:cd:5b:48:c2:
6d:be:6f:39:7a:84:07:a0:54:e4:cd:9a:90:c9:c1:f9:f6:03:
a9:77:2e:e1:eb:23:15:a8:64:e4:91:6d:2e:f8:16:87:92:2f:
32:13:16:04:1b:24:ad:1f:73:30:6e:b1:74:95:f5:d3:e3:1a:
97:ff:a2:c3:19:5d:fc:75:4d:48:fa:59:89:65:b1:2e:cc:18:
3c:0d:f0:86
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUOrjoReI8AJfTj79fZemsphG6XVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTUxNDM3MDFaFw0yNjA1MTQxNDQyMDFaMDMxMTAvBgNV
BAMTKDJBMjQzODA2NUQzRUE1MTQ5MDlBMDdGQzAzMjQ4QjEyQ0Y5QjFBNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1u6n59ywPScdOQT41yfG9+o54
26sfjJBmgXX6d7cAHXmZlpHaNhVWNMptzTNI9ZrJBOiojrIEFmHB+5LqBr5Q+wHx
cgQaK41a7iIoe+hXtp3/XnHBIsy4uj7BMj0zsYbSILOvohKXqwjaROftbGJhIvw3
8qfGKFarq+2e97IycPt8Cyt6D9QZUl2pwp24hfj4IaM5qK0/K6yqfoPbOBigeCoO
IavtionqMpx8xjXiIiuHsS/jhwHfJt93tt+fiUHN1ZPd9x+2DzAbpEtUmwbkqMZ+
uo6JyoJzrv3O8KTih8wpUQfcIYxv//6Z3UziOX65cr3Kl16iTuhOCovNEj2jAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUKiQ4Bl0+pRSQmgf8AySLEs+bGmEwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzOTMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRikjAN
BgkqhkiG9w0BAQsFAAOCAQEAKL4U2Jej/8hh/o/6ZBwBtk8q2W4Q+mBHBa+j0zAP
Hb0RTOAFboggwAEOfssd5JX8H0cKHGXiVu7+vCHxABZQuLvblAVhXnEfsspJnkmc
ajwifCUE2beqROMpqS/NUn9JwJDPHvZsxVbV4PuSWKKWYneAIf+2nRVkecxghpVC
SUWSt9w6lCLRYJxFhCilmpjDivj+apDw5rGKDFVQPfQDL4Ph1gp6LpsLigvaBhjY
iNXNW0jCbb5vOXqEB6BU5M2akMnB+fYDqXcu4esjFahk5JFtLvgWh5IvMhMWBBsk
rR9zMG6xdJX10+Mal/+iwxld/HVNSPpZiWWxLswYPA3whg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:42:05 2025 by rpki-client