Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Wr8kOA7PDQSPA/7KWVBeA5vQlL4PlU4IEz6+wbkkcMY=
Subject key identifier: CE:06:2A:64:AE:9E:4D:8A:D8:44:05:D7:76:99:64:53:1B:8E:56:5F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 66B23B34F397018B2F286F5993C268711FEA3E6A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239353a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 20:18:02 +0000
ROA not before: Thu 15 May 2025 20:13:02 +0000
ROA not after: Thu 14 May 2026 20:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6295::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 21:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b2:3b:34:f3:97:01:8b:2f:28:6f:59:93:c2:68:71:1f:ea:3e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 20:13:02 2025 GMT
Not After : May 14 20:18:02 2026 GMT
Subject: CN=CE062A64AE9E4D8AD84405D7769964531B8E565F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:1e:2c:b9:e0:fe:58:14:0e:c9:20:ad:ef:
1d:13:05:16:69:19:fa:ff:7b:0b:5f:26:cc:32:93:
47:6b:2b:78:1d:d8:5c:7d:0b:5b:29:cc:98:1b:cf:
ff:ae:fa:5b:c1:1b:96:03:b8:07:b9:97:f1:c4:87:
74:59:da:45:e7:19:9e:3c:27:59:5d:22:87:67:62:
ce:05:ed:ba:6a:f3:f2:10:83:3e:cd:5f:f6:2c:4e:
57:5c:c5:dd:61:c1:5c:14:8c:8f:d2:0a:be:1c:b5:
12:9c:95:a9:ba:41:1c:c6:ae:b3:9d:57:30:72:e1:
bc:00:7a:6e:51:23:d9:4f:c3:53:ee:3f:e9:04:97:
26:53:25:7a:f1:20:44:d7:05:dd:63:1c:d1:ed:ec:
96:f5:26:79:39:c1:23:3f:5e:29:61:bc:b4:26:c1:
04:30:f0:fc:80:80:4d:cc:18:54:46:f6:69:ba:cf:
53:90:ff:2a:4d:c3:6e:97:82:7c:42:54:81:38:e6:
b6:b2:98:0b:c7:e2:d8:e7:21:16:a3:5c:fe:ef:78:
3e:6a:b1:9b:b4:56:7d:65:1f:f7:af:e4:20:d3:98:
d7:d1:7c:e7:0f:f1:af:ea:ff:08:ae:2e:e4:e9:59:
49:10:9e:fe:f5:88:9f:9f:b9:46:a7:ee:4d:f1:e3:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:2A:64:AE:9E:4D:8A:D8:44:05:D7:76:99:64:53:1B:8E:56:5F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6295::/48
Signature Algorithm: sha256WithRSAEncryption
08:e0:72:00:40:ac:3c:53:3c:4a:6c:fa:ee:62:40:55:f2:0d:
92:b0:36:fb:1d:e8:97:7c:8e:7a:88:4a:eb:ff:20:ec:03:5b:
a8:99:31:76:88:82:ef:85:75:15:fe:2b:9c:22:a1:6e:00:00:
3d:17:a0:a8:b5:ed:b1:bb:a8:ca:40:56:63:72:2b:55:9f:6c:
45:0a:79:e3:29:0a:77:17:07:d1:c9:74:77:af:8c:71:a4:72:
bb:2b:78:41:a8:4c:c3:63:30:b9:d2:f9:ac:2e:e6:e9:5f:2c:
1d:e9:97:74:b5:a7:6b:c6:9f:18:22:5d:ac:fa:48:79:19:e8:
c6:0b:f0:9d:00:16:8f:e1:ac:9f:98:dd:d1:27:4b:e1:dc:23:
45:bd:b0:5a:9e:99:d2:6c:69:28:f9:34:58:81:49:7f:c1:e3:
70:a1:d8:40:4e:54:06:05:ec:de:99:d1:a1:2c:1e:ac:05:d2:
af:54:ec:28:13:c4:00:9e:8d:e7:c2:8f:32:74:8f:0a:75:89:
15:02:67:e9:51:df:0f:c6:1d:b9:f0:46:27:91:77:ac:71:0c:
85:05:e9:70:31:9a:0f:b6:19:93:c1:2a:8a:7b:9d:1f:be:10:
25:82:f3:c8:8c:99:10:be:cf:24:3c:a7:56:d9:5e:4d:cf:e6:
bf:be:49:78
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUZrI7NPOXAYsvKG9Zk8JocR/qPmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTUyMDEzMDJaFw0yNjA1MTQyMDE4MDJaMDMxMTAvBgNV
BAMTKENFMDYyQTY0QUU5RTREOEFEODQ0MDVENzc2OTk2NDUzMUI4RTU2NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgh4sueD+WBQOySCt7x0TBRZp
Gfr/ewtfJswyk0drK3gd2Fx9C1spzJgbz/+u+lvBG5YDuAe5l/HEh3RZ2kXnGZ48
J1ldIodnYs4F7bpq8/IQgz7NX/YsTldcxd1hwVwUjI/SCr4ctRKclam6QRzGrrOd
VzBy4bwAem5RI9lPw1PuP+kElyZTJXrxIETXBd1jHNHt7Jb1Jnk5wSM/XilhvLQm
wQQw8PyAgE3MGFRG9mm6z1OQ/ypNw26XgnxCVIE45raymAvH4tjnIRajXP7veD5q
sZu0Vn1lH/ev5CDTmNfRfOcP8a/q/wiuLuTpWUkQnv71iJ+fuUan7k3x4z5fAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUzgYqZK6eTYrYRAXXdplkUxuOVl8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzOTM1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRilTAN
BgkqhkiG9w0BAQsFAAOCAQEACOByAECsPFM8Smz67mJAVfINkrA2+x3ol3yOeohK
6/8g7ANbqJkxdoiC74V1Ff4rnCKhbgAAPRegqLXtsbuoykBWY3IrVZ9sRQp54ykK
dxcH0cl0d6+McaRyuyt4QahMw2MwudL5rC7m6V8sHemXdLWna8afGCJdrPpIeRno
xgvwnQAWj+Gsn5jd0SdL4dwjRb2wWp6Z0mxpKPk0WIFJf8HjcKHYQE5UBgXs3pnR
oSwerAXSr1TsKBPEAJ6N58KPMnSPCnWJFQJn6VHfD8YdufBGJ5F3rHEMhQXpcDGa
D7YZk8EqinudH74QJYLzyIyZEL7PJDynVtleTc/mv75JeA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:23 2025 by rpki-client