Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261623a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363261623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: x606KzPMzKD+v+3vGrsiet00nUY55jRACW2D8fMdlHI=
Subject key identifier: A2:22:12:CF:0B:B7:8F:6E:6C:0E:37:1F:D8:64:66:7D:E6:CD:B8:63
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7807B7F51A1C3385C909D44C723B565BBD100C10
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261623a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 16 May 2025 21:00:02 +0000
ROA not before: Fri 16 May 2025 20:55:02 +0000
ROA not after: Fri 15 May 2026 21:00:02 +0000
asID: 401507
IP address blocks: 2a14:7584:62ab::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 20:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:07:b7:f5:1a:1c:33:85:c9:09:d4:4c:72:3b:56:5b:bd:10:0c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 20:55:02 2025 GMT
Not After : May 15 21:00:02 2026 GMT
Subject: CN=A22212CF0BB78F6E6C0E371FD864667DE6CDB863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:fe:cf:eb:88:8d:cd:a0:e4:81:30:26:5e:
5c:52:22:9c:09:85:92:98:2b:b4:31:ce:1e:3f:46:
69:a4:23:ea:09:12:54:b2:fa:38:c7:59:6c:6a:6e:
34:61:ca:5c:8a:dc:3f:72:93:af:1d:d3:cc:68:b5:
b9:90:67:f1:52:c2:2c:29:9c:d3:5d:48:25:58:1f:
48:52:11:41:15:69:d7:71:cf:77:5f:04:03:2a:da:
7c:58:db:e5:20:fb:b4:10:f2:06:24:53:24:32:b0:
bb:4c:8c:d2:e4:fd:e0:62:b2:62:75:92:28:7b:bd:
7b:b4:fc:05:57:e0:05:e1:84:42:80:5f:42:11:a5:
61:21:9a:d8:d3:20:5c:7c:76:67:3f:72:7a:b1:4f:
89:77:97:ae:01:e8:78:78:ee:dc:be:7a:8a:a9:ce:
7f:e1:f1:df:f8:7d:5d:31:85:09:62:03:5c:28:7a:
0b:d7:f5:87:e2:cf:53:23:4c:c8:ee:ad:8b:aa:7d:
fd:e9:3b:47:c3:fd:84:e3:8f:3e:3a:57:a0:ed:2f:
ae:d4:75:7b:ee:bc:43:22:dd:77:a2:c0:5f:b2:fe:
09:14:40:bc:1f:3f:ff:14:7a:92:1c:84:7c:c6:bf:
9d:f3:0f:59:7a:80:a3:9c:ef:1a:da:2d:ad:ed:e0:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:22:12:CF:0B:B7:8F:6E:6C:0E:37:1F:D8:64:66:7D:E6:CD:B8:63
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261623a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ab::/48
Signature Algorithm: sha256WithRSAEncryption
06:8e:da:62:a2:55:74:51:5b:9f:f5:9e:60:4e:16:76:be:e5:
b7:8d:1b:42:cf:41:b0:79:f6:1f:0b:55:67:4b:44:06:40:e1:
84:c6:24:9f:63:f7:a3:db:4b:07:6e:29:1a:97:73:ab:60:12:
79:f1:5a:a7:38:be:85:f3:11:50:0f:9e:7a:67:e5:da:ca:55:
3e:d6:09:56:93:ff:35:ef:74:bb:04:0a:61:72:6e:67:16:36:
6c:74:7a:a1:a1:1b:3c:25:49:05:52:c8:a0:c2:18:d1:9e:46:
e4:0c:c3:12:c8:ee:eb:6f:d7:b7:dd:d2:cf:27:28:d5:9b:3d:
7f:6c:d9:da:0b:65:94:5a:68:2f:15:e6:fb:e2:86:b4:dc:9c:
bc:d4:7f:05:6f:bc:fc:50:87:2d:6d:94:a5:f3:a3:16:64:8a:
75:82:48:bc:b0:7e:80:68:89:bf:a2:62:ba:91:9f:be:67:6f:
89:02:c2:7b:60:9a:cb:be:a6:fd:4a:2a:f6:85:34:90:97:f9:
d4:dc:46:d4:96:f9:92:7b:e9:24:16:6f:71:4f:bc:8c:45:f7:
96:ed:99:13:6a:56:fe:04:43:61:52:b2:24:b8:24:c2:6f:ae:
64:03:fe:78:b5:19:88:63:69:70:4f:28:eb:ec:c6:df:3d:8b:
f5:ae:23:9f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeAe39RocM4XJCdRMcjtWW70QDBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTYyMDU1MDJaFw0yNjA1MTUyMTAwMDJaMDMxMTAvBgNV
BAMTKEEyMjIxMkNGMEJCNzhGNkU2QzBFMzcxRkQ4NjQ2NjdERTZDREI4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWf7P64iNzaDkgTAmXlxSIpwJ
hZKYK7Qxzh4/RmmkI+oJElSy+jjHWWxqbjRhylyK3D9yk68d08xotbmQZ/FSwiwp
nNNdSCVYH0hSEUEVaddxz3dfBAMq2nxY2+Ug+7QQ8gYkUyQysLtMjNLk/eBismJ1
kih7vXu0/AVX4AXhhEKAX0IRpWEhmtjTIFx8dmc/cnqxT4l3l64B6Hh47ty+eoqp
zn/h8d/4fV0xhQliA1woegvX9Yfiz1MjTMjurYuqff3pO0fD/YTjjz46V6DtL67U
dXvuvEMi3XeiwF+y/gkUQLwfP/8UepIchHzGv53zD1l6gKOc7xraLa3t4B81AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUoiISzwu3j25sDjcf2GRmfebNuGMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2MTYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGKr
MA0GCSqGSIb3DQEBCwUAA4IBAQAGjtpiolV0UVuf9Z5gThZ2vuW3jRtCz0GwefYf
C1VnS0QGQOGExiSfY/ej20sHbikal3OrYBJ58VqnOL6F8xFQD556Z+XaylU+1glW
k/8173S7BAphcm5nFjZsdHqhoRs8JUkFUsigwhjRnkbkDMMSyO7rb9e33dLPJyjV
mz1/bNnaC2WUWmgvFeb74oa03Jy81H8Fb7z8UIctbZSl86MWZIp1gki8sH6AaIm/
omK6kZ++Z2+JAsJ7YJrLvqb9Sir2hTSQl/nU3EbUlvmSe+kkFm9xT7yMRfeW7ZkT
alb+BENhUrIkuCTCb65kA/54tRmIY2lwTyjr7MbfPYv1riOf
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:46:22 2025 by rpki-client