Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5XVbXUxBM58QHmYBYvKzWv5wJNdP1Hjc0j+QDIeYwSw=
Subject key identifier: 78:37:61:B6:4B:B6:2F:1B:8E:DD:40:25:C7:61:AF:71:DA:92:A9:B5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0844C2A741D41F553E167CAB0B070F0996576624
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261333a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 16 May 2025 08:12:01 +0000
ROA not before: Fri 16 May 2025 08:07:01 +0000
ROA not after: Fri 15 May 2026 08:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:62a3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 10:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:44:c2:a7:41:d4:1f:55:3e:16:7c:ab:0b:07:0f:09:96:57:66:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 08:07:01 2025 GMT
Not After : May 15 08:12:01 2026 GMT
Subject: CN=783761B64BB62F1B8EDD4025C761AF71DA92A9B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:b3:47:64:96:67:1b:3c:c9:72:fb:5c:4e:
ca:04:f3:3a:d2:c7:3a:5b:4f:4f:0d:8e:73:47:3a:
b8:30:31:cd:a1:fd:36:c3:0e:8e:a6:60:02:c3:ae:
75:44:ec:5d:f5:80:16:1f:5f:69:7d:d0:d7:e7:b9:
8a:d0:5a:a7:58:80:32:6b:03:b4:4d:08:98:f6:fa:
1e:89:97:ae:87:b3:96:96:75:81:61:74:a5:96:8a:
c0:22:46:5c:d1:20:70:5a:3c:64:fb:f9:66:43:8e:
bc:4f:ff:e7:e1:e5:44:d5:aa:2f:19:63:33:fb:66:
c2:bd:86:18:d8:27:41:ee:23:84:c3:c3:56:41:02:
cd:59:18:1d:68:1b:79:fc:b0:a9:12:39:9c:7a:d9:
56:ee:49:0d:18:8a:59:2c:1d:41:ee:65:fe:58:05:
82:03:75:0c:50:a1:c7:63:36:7d:d7:18:fd:02:2b:
12:b8:6d:75:51:a8:5d:0a:fa:2e:09:ab:2d:28:46:
ea:e1:0f:99:a3:8a:9e:23:4f:db:54:dc:5e:01:6f:
9d:fe:da:56:e9:2e:46:7e:1c:36:26:9b:2c:a8:24:
6c:5a:f4:f4:56:cf:ab:52:26:f5:cd:84:7d:fb:eb:
93:38:c2:ad:72:93:ca:3e:ad:8d:30:18:40:3f:c7:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:37:61:B6:4B:B6:2F:1B:8E:DD:40:25:C7:61:AF:71:DA:92:A9:B5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62a3::/48
Signature Algorithm: sha256WithRSAEncryption
45:c0:87:23:1e:25:99:33:93:34:cd:5b:40:f0:32:e2:72:94:
4f:73:3a:ec:da:8f:9a:d1:91:34:99:d7:0a:62:78:7b:12:3c:
02:75:da:01:03:19:d3:50:dd:56:79:26:3b:ef:10:2b:e2:fb:
a9:ba:ad:36:0c:42:95:e9:2c:fb:3e:29:ea:9c:b8:30:8f:eb:
9b:59:2a:50:a2:45:e1:a0:a6:b1:c0:2c:a5:94:f2:19:09:8d:
e4:78:f9:c0:f1:ca:67:1b:c0:48:4e:f3:ac:24:69:c5:1b:83:
12:6c:06:39:71:fe:a1:09:ad:38:61:05:ee:b4:26:ab:60:6d:
7d:60:b5:77:66:cf:4d:7b:6f:f2:69:aa:ba:dd:b9:97:8f:2a:
c1:91:28:78:8d:24:c1:36:65:69:46:a8:3a:25:5d:47:42:ca:
9e:de:81:bc:94:66:7e:72:e1:93:dd:8e:c4:06:80:74:44:0c:
ef:ec:12:34:88:9f:65:e6:a9:af:5a:f6:e8:50:d3:5c:7d:1e:
cb:35:30:d2:43:81:7a:b7:04:76:fd:72:dd:ac:8d:7e:3e:25:
3e:97:dc:95:de:42:9a:11:5e:78:88:7d:e8:c5:71:25:9c:1a:
34:c7:bc:d8:a8:63:e3:65:b6:2e:29:6f:7d:84:77:70:0a:7c:
62:95:ef:e7
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUCETCp0HUH1U+FnyrCwcPCZZXZiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTYwODA3MDFaFw0yNjA1MTUwODEyMDFaMDMxMTAvBgNV
BAMTKDc4Mzc2MUI2NEJCNjJGMUI4RURENDAyNUM3NjFBRjcxREE5MkE5QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJArNHZJZnGzzJcvtcTsoE8zrS
xzpbT08NjnNHOrgwMc2h/TbDDo6mYALDrnVE7F31gBYfX2l90NfnuYrQWqdYgDJr
A7RNCJj2+h6Jl66Hs5aWdYFhdKWWisAiRlzRIHBaPGT7+WZDjrxP/+fh5UTVqi8Z
YzP7ZsK9hhjYJ0HuI4TDw1ZBAs1ZGB1oG3n8sKkSOZx62VbuSQ0YilksHUHuZf5Y
BYIDdQxQocdjNn3XGP0CKxK4bXVRqF0K+i4Jqy0oRurhD5mjip4jT9tU3F4Bb53+
2lbpLkZ+HDYmmyyoJGxa9PRWz6tSJvXNhH3765M4wq1yk8o+rY0wGEA/xyBDAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUeDdhtku2LxuO3UAlx2GvcdqSqbUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2MTMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiozAN
BgkqhkiG9w0BAQsFAAOCAQEARcCHIx4lmTOTNM1bQPAy4nKUT3M67NqPmtGRNJnX
CmJ4exI8AnXaAQMZ01DdVnkmO+8QK+L7qbqtNgxCleks+z4p6py4MI/rm1kqUKJF
4aCmscAspZTyGQmN5Hj5wPHKZxvASE7zrCRpxRuDEmwGOXH+oQmtOGEF7rQmq2Bt
fWC1d2bPTXtv8mmqut25l48qwZEoeI0kwTZlaUaoOiVdR0LKnt6BvJRmfnLhk92O
xAaAdEQM7+wSNIifZeapr1r26FDTXH0eyzUw0kOBercEdv1y3ayNfj4lPpfcld5C
mhFeeIh96MVxJZwaNMe82Khj42W2LilvfYR3cAp8YpXv5w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:15:15 2025 by rpki-client