Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: bL9gHSN/+EtuehG8RbzTRSUrFbxpFULZw7GnJgwBy64=
Subject key identifier: 6C:DC:D0:3E:D8:EB:13:6D:B8:07:28:77:AF:62:82:48:EE:51:FB:05
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 748687EB59D22C13BC394D56670BE59C027DDEE4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265363a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 18:06:03 +0000
ROA not before: Sun 18 May 2025 18:01:03 +0000
ROA not after: Sun 17 May 2026 18:06:03 +0000
asID: 16909
IP address blocks: 2a14:7584:62e6::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 01:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:86:87:eb:59:d2:2c:13:bc:39:4d:56:67:0b:e5:9c:02:7d:de:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 18:01:03 2025 GMT
Not After : May 17 18:06:03 2026 GMT
Subject: CN=6CDCD03ED8EB136DB8072877AF628248EE51FB05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:ef:0a:4d:fa:24:3a:31:00:4e:62:8b:31:
5f:aa:a5:3b:3a:d6:23:e0:ce:d3:e9:81:01:1f:53:
d7:10:d0:9f:b5:b4:ea:a2:d2:cf:95:52:73:16:08:
e6:81:de:1c:c1:74:0d:c5:0e:1b:8a:b3:54:3b:aa:
77:1f:4e:8a:8f:1b:8f:c8:4f:51:f9:ec:27:c2:17:
da:82:ef:71:a0:a2:9c:1b:d2:e4:a4:a1:1d:71:31:
a8:c7:22:8f:06:03:16:6c:83:1b:d0:1c:c8:55:95:
02:e4:e6:8f:db:69:df:f9:5c:06:85:2c:77:46:9f:
94:8b:e0:2c:8e:43:95:91:2e:c3:19:e4:c5:85:c0:
06:fd:4e:2e:f8:97:b1:57:f8:6d:b2:99:13:aa:e0:
e8:78:22:24:31:3a:a7:bc:db:c2:48:98:47:e1:ba:
59:92:fc:ef:77:7e:0b:9e:a4:3e:63:24:74:a8:5f:
7a:15:47:5d:77:a4:b3:3d:d6:7b:6a:e5:76:5e:df:
d4:83:9a:37:bb:54:d7:a1:03:e9:86:1a:9c:d8:66:
24:12:e1:f5:af:49:ae:28:fc:88:a2:bc:76:8b:b0:
9e:f1:e8:fa:8b:71:98:c3:d5:cd:ef:64:44:6d:39:
42:35:93:c2:76:a7:13:6a:f8:75:ec:48:62:9c:4f:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DC:D0:3E:D8:EB:13:6D:B8:07:28:77:AF:62:82:48:EE:51:FB:05
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62e6::/48
Signature Algorithm: sha256WithRSAEncryption
96:c1:ba:bf:e8:ef:95:47:a6:2e:94:f4:d3:1a:63:d0:9e:09:
55:aa:12:ea:bd:43:85:a2:62:60:07:c9:95:8b:d8:aa:b2:e6:
bf:d5:15:29:eb:57:ac:04:f0:88:84:f1:a9:33:44:87:73:fb:
ff:79:0f:f1:d5:3e:31:e6:d1:ee:6d:03:e8:d0:ad:9e:92:91:
b9:a9:f8:61:10:7c:f9:1a:a0:ed:1d:28:a2:d1:ad:07:1a:87:
1c:88:f9:9b:16:d7:16:18:ef:50:60:50:76:fd:53:b7:c6:fc:
bd:31:2b:c3:0a:65:b0:fb:27:a5:a6:27:f3:0e:13:3d:cd:e3:
ba:31:0f:36:72:f5:3f:23:49:a9:97:a7:49:95:b5:55:1f:9e:
87:a8:f0:a7:86:59:8c:70:58:37:3f:5d:62:d8:9a:9f:08:3f:
c5:28:32:c8:b2:17:33:b0:2a:be:de:39:c8:11:14:81:bf:a2:
f9:a6:3a:9a:f0:cf:4c:7f:fb:5a:e2:1c:c8:ed:17:d3:60:e1:
8b:9d:02:11:6a:86:1b:e0:47:0a:e7:d9:89:98:da:0e:a1:21:
30:be:3e:d9:e7:5b:ae:4b:39:1c:95:88:f4:ae:70:11:37:c4:
ed:85:b7:76:ed:f4:20:9c:b4:92:a0:4e:1d:f4:a7:c5:cb:6d:
b9:79:b7:5f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUdIaH61nSLBO8OU1WZwvlnAJ93uQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTgxODAxMDNaFw0yNjA1MTcxODA2MDNaMDMxMTAvBgNV
BAMTKDZDRENEMDNFRDhFQjEzNkRCODA3Mjg3N0FGNjI4MjQ4RUU1MUZCMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQu8KTfokOjEATmKLMV+qpTs6
1iPgztPpgQEfU9cQ0J+1tOqi0s+VUnMWCOaB3hzBdA3FDhuKs1Q7qncfToqPG4/I
T1H57CfCF9qC73Ggopwb0uSkoR1xMajHIo8GAxZsgxvQHMhVlQLk5o/bad/5XAaF
LHdGn5SL4CyOQ5WRLsMZ5MWFwAb9Ti74l7FX+G2ymROq4Oh4IiQxOqe828JImEfh
ulmS/O93fguepD5jJHSoX3oVR113pLM91ntq5XZe39SDmje7VNehA+mGGpzYZiQS
4fWvSa4o/IiivHaLsJ7x6PqLcZjD1c3vZERtOUI1k8J2pxNq+HXsSGKcTwKjAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUbNzQPtjrE224Byh3r2KCSO5R+wUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2NTM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRi5jAN
BgkqhkiG9w0BAQsFAAOCAQEAlsG6v+jvlUemLpT00xpj0J4JVaoS6r1DhaJiYAfJ
lYvYqrLmv9UVKetXrATwiITxqTNEh3P7/3kP8dU+MebR7m0D6NCtnpKRuan4YRB8
+Rqg7R0ootGtBxqHHIj5mxbXFhjvUGBQdv1Tt8b8vTErwwplsPsnpaYn8w4TPc3j
ujEPNnL1PyNJqZenSZW1VR+eh6jwp4ZZjHBYNz9dYtianwg/xSgyyLIXM7Aqvt45
yBEUgb+i+aY6mvDPTH/7WuIcyO0X02Dhi50CEWqGG+BHCufZiZjaDqEhML4+2edb
rks5HJWI9K5wETfE7YW3du30IJy0kqBOHfSnxcttuXm3Xw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:47:22 2025 by rpki-client