Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AR0Hui7JCZezEE5talyDJQ4V6XAg/gz0gmccV1zOvPA=
Subject key identifier: 82:AC:50:C2:1C:52:11:D0:C9:D8:63:70:B8:AD:42:79:6B:47:4B:10
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5C8A98BCAF129604063C43F7FAD35F796D9C7AFB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 30 Dec 2024 20:23:53 +0000
ROA not before: Mon 30 Dec 2024 20:18:53 +0000
ROA not after: Mon 29 Dec 2025 20:23:53 +0000
asID: 16909
IP address blocks: 2a14:7584:62b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 20:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8a:98:bc:af:12:96:04:06:3c:43:f7:fa:d3:5f:79:6d:9c:7a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 30 20:18:53 2024 GMT
Not After : Dec 29 20:23:53 2025 GMT
Subject: CN=82AC50C21C5211D0C9D86370B8AD42796B474B10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3b:89:63:24:8a:23:e3:db:0f:8b:f4:1e:6c:
14:a4:54:0d:3b:56:d7:a1:3e:17:f7:dd:4d:fb:03:
02:bb:24:93:d6:7e:68:c0:c9:c5:b4:c5:33:96:a5:
cd:39:a3:a5:eb:e3:5f:49:4c:75:f3:65:5c:f3:81:
af:3e:3a:36:7f:69:3b:50:dd:50:aa:6b:98:3d:f7:
ab:8d:4f:12:3c:f6:75:06:5c:4b:17:b5:0a:fb:1d:
1b:49:cb:f6:3f:e0:c7:15:ef:c1:18:ce:56:cf:de:
5c:fa:66:fe:5e:52:0f:12:38:2d:2e:d2:9d:68:9a:
c9:ba:65:ed:ef:ef:10:48:68:be:86:24:0e:c1:4e:
b6:95:fa:c6:3f:dc:c6:2e:41:ed:75:3e:6c:0d:43:
a3:89:da:33:88:28:8b:56:7c:00:ef:ac:9d:9c:7e:
76:a8:c3:da:66:b8:c4:50:88:02:44:2d:87:2a:27:
65:93:15:36:80:d7:9d:90:9c:e4:ea:cb:9f:b6:a2:
3e:52:e1:7f:95:91:fd:dc:17:07:70:03:13:53:db:
22:47:8f:06:d3:13:77:8b:e9:fb:b9:6e:46:e0:cf:
4f:61:77:fc:03:4e:3e:7c:ab:a4:2c:53:1d:21:5f:
da:f2:c0:03:ee:8c:07:b6:8c:71:9d:32:59:eb:45:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AC:50:C2:1C:52:11:D0:C9:D8:63:70:B8:AD:42:79:6B:47:4B:10
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62b0::/48
Signature Algorithm: sha256WithRSAEncryption
8b:86:c0:c5:51:06:c6:0b:47:8c:c1:dd:a6:71:16:7b:be:64:
08:b6:9f:06:38:c7:72:72:2d:20:9a:ee:0f:01:73:81:cc:16:
73:78:c2:74:5d:68:68:16:46:6b:c3:4b:71:0d:01:c7:29:1c:
a0:dd:10:cc:26:9a:3e:9e:b2:4b:13:d4:96:64:da:74:aa:c9:
03:7e:e2:2e:9b:92:7a:f2:a2:ff:e2:0f:7d:65:32:af:77:61:
c6:1c:ec:09:f7:98:cc:55:70:a5:df:51:cb:40:57:3d:a2:72:
c4:80:e1:4f:4f:12:f2:ca:44:f6:28:c9:b4:99:4c:ac:e6:b9:
b7:ba:0b:b7:6c:6b:a3:e3:f8:63:b3:78:67:76:ac:ab:22:75:
92:17:6b:06:f4:f8:09:2f:9a:d3:6a:88:51:b2:d7:11:ae:de:
4d:c8:06:e1:58:f0:d1:d9:ec:bf:a0:6e:0c:8b:ad:e1:d3:0c:
e6:a8:88:da:ac:d1:4f:d9:d2:1f:67:8a:ee:3c:52:b6:58:dc:
97:83:98:c1:d7:61:df:f2:ba:64:1c:6d:d4:d7:1c:a8:37:44:
93:0f:a4:51:3c:f5:d5:3e:0d:59:9f:e0:c6:b4:f3:0e:0e:0f:
42:51:e5:1f:1e:ab:71:49:6f:c5:29:da:73:c3:02:2f:d5:c3:
d3:6a:31:84
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUXIqYvK8SlgQGPEP3+tNfeW2cevswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMzAyMDE4NTNaFw0yNTEyMjkyMDIzNTNaMDMxMTAvBgNV
BAMTKDgyQUM1MEMyMUM1MjExRDBDOUQ4NjM3MEI4QUQ0Mjc5NkI0NzRCMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgO4ljJIoj49sPi/QebBSkVA07
VtehPhf33U37AwK7JJPWfmjAycW0xTOWpc05o6Xr419JTHXzZVzzga8+OjZ/aTtQ
3VCqa5g996uNTxI89nUGXEsXtQr7HRtJy/Y/4McV78EYzlbP3lz6Zv5eUg8SOC0u
0p1omsm6Ze3v7xBIaL6GJA7BTraV+sY/3MYuQe11PmwNQ6OJ2jOIKItWfADvrJ2c
fnaow9pmuMRQiAJELYcqJ2WTFTaA152QnOTqy5+2oj5S4X+Vkf3cFwdwAxNT2yJH
jwbTE3eL6fu5bkbgz09hd/wDTj58q6QsUx0hX9rywAPujAe2jHGdMlnrRf7PAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUgqxQwhxSEdDJ2GNwuK1CeWtHSxAwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2MjMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRisDAN
BgkqhkiG9w0BAQsFAAOCAQEAi4bAxVEGxgtHjMHdpnEWe75kCLafBjjHcnItIJru
DwFzgcwWc3jCdF1oaBZGa8NLcQ0BxykcoN0QzCaaPp6ySxPUlmTadKrJA37iLpuS
evKi/+IPfWUyr3dhxhzsCfeYzFVwpd9Ry0BXPaJyxIDhT08S8spE9ijJtJlMrOa5
t7oLt2xro+P4Y7N4Z3asqyJ1khdrBvT4CS+a02qIUbLXEa7eTcgG4Vjw0dnsv6Bu
DIut4dMM5qiI2qzRT9nSH2eK7jxStljcl4OYwddh3/K6ZBxt1NccqDdEkw+kUTz1
1T4NWZ/gxrTzDg4PQlHlHx6rcUlvxSnac8MCL9XD02oxhA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:16 2025 by rpki-client