Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: HHYg+o+SdItMnNboVPrKFl/f8ha02t1t/MHV969WrJg=
Subject key identifier: A8:EC:5D:A7:DC:42:95:AD:F8:5F:60:21:A9:C9:56:51:9C:4F:A6:D2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6FBAF88DDB1B02548CE61559CFA40BC3F657A257
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239343a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 20:18:02 +0000
ROA not before: Thu 15 May 2025 20:13:02 +0000
ROA not after: Thu 14 May 2026 20:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6294::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 15:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ba:f8:8d:db:1b:02:54:8c:e6:15:59:cf:a4:0b:c3:f6:57:a2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 20:13:02 2025 GMT
Not After : May 14 20:18:02 2026 GMT
Subject: CN=A8EC5DA7DC4295ADF85F6021A9C956519C4FA6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:fc:9b:d7:ef:dd:e0:b5:6b:40:4f:6e:ec:
2c:82:5c:c1:68:01:8b:c5:3b:c6:da:df:92:bb:cf:
9b:31:6c:81:d3:76:8b:fc:d6:7f:d2:25:9b:2e:5d:
00:65:0b:57:ff:43:d8:e3:33:ce:c7:9c:be:2a:b2:
9b:4d:68:c7:14:c1:5a:7c:08:46:7a:10:fd:46:81:
44:9b:a5:91:4e:4b:8d:e5:0f:91:14:fb:b6:f8:ab:
c4:f3:22:96:40:44:14:37:27:49:59:b1:b8:a8:57:
83:af:b9:ca:12:9d:8e:ae:df:f9:fc:ec:fc:c5:63:
9d:64:61:5f:8c:4e:05:13:2f:08:4c:86:ef:fd:71:
fc:30:10:c4:01:27:9a:b4:f3:01:cb:2b:83:60:0d:
c8:18:66:53:77:9e:a7:9c:06:ff:98:a4:42:16:71:
cd:34:c9:cd:40:0c:78:ce:7d:7a:3e:67:b1:0a:97:
8b:d9:48:00:b4:8a:5c:7c:5f:86:dd:20:0c:c1:4e:
4f:f3:6b:b0:e3:5a:75:f2:86:ac:9b:83:91:1c:5c:
71:8a:e4:9b:25:b6:c0:e3:ff:1d:a5:14:18:cf:2a:
21:65:e2:1e:13:eb:70:55:03:e6:30:e9:3c:a0:8b:
d6:b2:1d:dd:d8:df:ab:e5:ff:9e:ad:1d:ac:e2:5f:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EC:5D:A7:DC:42:95:AD:F8:5F:60:21:A9:C9:56:51:9C:4F:A6:D2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6294::/48
Signature Algorithm: sha256WithRSAEncryption
b7:62:b2:38:be:35:0f:1e:04:87:a6:58:87:35:20:ef:81:f0:
1e:96:f2:17:82:62:d0:3a:ed:6f:da:7c:f3:76:7e:55:74:a4:
2b:ec:1f:d1:81:ad:19:b1:10:e1:d9:d4:6a:68:70:9d:15:1b:
b2:02:0e:a9:32:f0:25:f4:89:23:78:de:b1:0b:a9:d9:5d:09:
f2:ec:fd:5a:ad:13:9b:51:ca:1b:0f:8d:70:51:7c:85:d6:7c:
9c:7b:13:8e:9f:ee:08:b3:51:c5:ae:22:42:b1:2b:1c:93:ea:
6b:bf:2b:d3:4a:35:a1:a0:87:dd:1b:64:16:e9:9c:0c:4f:7c:
98:ca:3d:08:3f:30:cf:4f:81:60:f4:85:27:5c:29:e6:6b:6b:
c6:a5:ae:9a:ab:88:99:26:eb:9c:97:47:6a:88:fc:84:13:ca:
fa:4b:97:5e:2d:e5:4d:23:b0:12:2a:85:23:0f:1d:53:b0:a2:
65:e2:0e:03:46:d6:a9:30:fa:09:f4:2c:99:6a:91:ec:44:d4:
19:be:23:f8:e0:f0:d5:58:42:1d:7d:9a:c0:51:96:29:87:3c:
12:15:cb:63:81:3b:f9:4d:79:24:77:07:b7:2a:5d:02:2c:42:
e8:20:01:ae:40:94:9c:65:b3:5a:9d:ae:27:4a:3c:8e:90:d8:
57:3e:7a:be
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUb7r4jdsbAlSM5hVZz6QLw/ZXolcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTUyMDEzMDJaFw0yNjA1MTQyMDE4MDJaMDMxMTAvBgNV
BAMTKEE4RUM1REE3REM0Mjk1QURGODVGNjAyMUE5Qzk1NjUxOUM0RkE2RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSvyb1+/d4LVrQE9u7CyCXMFo
AYvFO8ba35K7z5sxbIHTdov81n/SJZsuXQBlC1f/Q9jjM87HnL4qsptNaMcUwVp8
CEZ6EP1GgUSbpZFOS43lD5EU+7b4q8TzIpZARBQ3J0lZsbioV4OvucoSnY6u3/n8
7PzFY51kYV+MTgUTLwhMhu/9cfwwEMQBJ5q08wHLK4NgDcgYZlN3nqecBv+YpEIW
cc00yc1ADHjOfXo+Z7EKl4vZSAC0ilx8X4bdIAzBTk/za7DjWnXyhqybg5EcXHGK
5JsltsDj/x2lFBjPKiFl4h4T63BVA+Yw6Tygi9ayHd3Y36vl/56tHaziX6ZpAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUqOxdp9xCla34X2AhqclWUZxPptIwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzOTM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRilDAN
BgkqhkiG9w0BAQsFAAOCAQEAt2KyOL41Dx4Eh6ZYhzUg74HwHpbyF4Ji0Drtb9p8
83Z+VXSkK+wf0YGtGbEQ4dnUamhwnRUbsgIOqTLwJfSJI3jesQup2V0J8uz9Wq0T
m1HKGw+NcFF8hdZ8nHsTjp/uCLNRxa4iQrErHJPqa78r00o1oaCH3RtkFumcDE98
mMo9CD8wz0+BYPSFJ1wp5mtrxqWumquImSbrnJdHaoj8hBPK+kuXXi3lTSOwEiqF
Iw8dU7CiZeIOA0bWqTD6CfQsmWqR7ETUGb4j+ODw1VhCHX2awFGWKYc8EhXLY4E7
+U15JHcHtypdAixC6CABrkCUnGWzWp2uJ0o8jpDYVz56vg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:59:29 2025 by rpki-client