Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Qqy8TfXJprVxzhOcMb5SotaS1J1tRIlrOuIYkMM9efc=
Subject key identifier: 0B:A8:D9:0A:2A:F3:C2:14:6E:A5:0F:7C:86:7F:E8:16:E9:03:06:67
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 73624DE68C900EC258504E1A5AB7A51F88C1F57C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265623a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:06:02 +0000
ROA not before: Sun 18 May 2025 23:01:02 +0000
ROA not after: Sun 17 May 2026 23:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62eb::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 05:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:62:4d:e6:8c:90:0e:c2:58:50:4e:1a:5a:b7:a5:1f:88:c1:f5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:01:02 2025 GMT
Not After : May 17 23:06:02 2026 GMT
Subject: CN=0BA8D90A2AF3C2146EA50F7C867FE816E9030667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:ae:7b:eb:01:31:06:bc:c1:30:71:e8:e8:
93:e8:3d:94:5e:4f:c4:c0:26:a0:42:f9:e9:9c:0a:
e5:4a:5d:ab:91:09:85:3d:13:54:99:71:68:0d:f2:
14:bd:1c:ad:98:f2:08:db:85:8b:1c:fc:c1:a8:62:
6e:4a:89:f4:ce:2f:24:9c:65:82:e0:b8:41:1c:ca:
fe:e6:f2:fc:4d:81:33:6b:6d:92:75:82:a3:a1:2f:
d3:ea:f3:09:57:d2:69:15:88:5d:a2:dd:ff:56:f0:
eb:3b:4a:0a:3a:82:c1:91:3d:21:10:f6:6b:c5:c5:
b7:c8:ed:7c:d7:83:88:e0:59:1c:7e:8d:c2:c3:71:
ff:e1:ca:ae:17:b7:5b:63:0d:da:c9:2e:cf:4b:f0:
b8:b1:83:24:57:ea:75:ca:a4:12:20:9a:e3:62:75:
5c:79:0b:6d:16:4c:30:6c:6e:07:39:be:1b:46:c9:
9a:e4:88:49:e2:e9:be:c2:33:0e:e1:e6:a8:ea:c4:
41:1b:93:cd:cb:f0:ae:f5:33:fa:16:c0:c0:ff:a9:
2f:55:1c:27:06:5a:a7:dd:aa:41:fe:94:14:7f:5d:
56:04:a8:ca:52:de:0e:23:5f:da:01:bc:1e:b7:65:
37:2d:d4:f3:d7:b9:bd:35:8e:70:73:c2:90:1c:54:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A8:D9:0A:2A:F3:C2:14:6E:A5:0F:7C:86:7F:E8:16:E9:03:06:67
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62eb::/48
Signature Algorithm: sha256WithRSAEncryption
1a:0a:87:09:cd:4c:7d:97:8f:2d:5d:67:b5:3f:4a:aa:20:da:
31:eb:fc:a8:06:07:45:f8:9b:a3:fd:9f:0c:b7:01:fa:c7:72:
2c:b0:2e:36:2c:44:21:d6:54:34:5b:61:f0:55:0a:0d:b7:39:
ea:d5:fc:a9:e8:6e:ff:6b:10:3d:29:2b:bb:f7:3d:4d:f7:db:
65:f5:72:68:04:21:64:1b:b7:10:ae:be:7b:1c:b9:96:6e:43:
37:e0:6a:35:da:99:ef:73:c4:d3:27:97:3a:1e:53:33:5b:30:
b8:15:f6:b9:43:bb:27:8b:4d:45:22:3d:02:9f:6d:00:45:11:
15:f1:69:ad:84:5b:b5:31:da:76:3c:ff:21:36:6b:13:0d:0d:
d8:8e:3b:e0:0b:67:9d:fc:08:21:64:1d:d0:13:98:28:93:a7:
a3:c8:b0:9e:31:7a:5f:36:22:34:54:25:1c:62:77:a6:27:0d:
41:0c:aa:f8:83:8e:2a:dd:31:52:9d:cd:f9:06:5c:6b:4c:e0:
0f:33:49:8f:f4:de:69:1f:85:86:62:d9:d9:03:00:23:14:56:
ea:54:e9:f5:c8:1c:c6:92:60:10:bc:fd:08:22:b5:59:b5:3a:
db:25:de:34:2b:52:06:6d:1c:d9:c2:4b:86:20:0d:00:e0:f4:
ba:b9:42:14
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUc2JN5oyQDsJYUE4aWrelH4jB9XwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTgyMzAxMDJaFw0yNjA1MTcyMzA2MDJaMDMxMTAvBgNV
BAMTKDBCQThEOTBBMkFGM0MyMTQ2RUE1MEY3Qzg2N0ZFODE2RTkwMzA2NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98a576wExBrzBMHHo6JPoPZRe
T8TAJqBC+emcCuVKXauRCYU9E1SZcWgN8hS9HK2Y8gjbhYsc/MGoYm5KifTOLySc
ZYLguEEcyv7m8vxNgTNrbZJ1gqOhL9Pq8wlX0mkViF2i3f9W8Os7Sgo6gsGRPSEQ
9mvFxbfI7XzXg4jgWRx+jcLDcf/hyq4Xt1tjDdrJLs9L8LixgyRX6nXKpBIgmuNi
dVx5C20WTDBsbgc5vhtGyZrkiEni6b7CMw7h5qjqxEEbk83L8K71M/oWwMD/qS9V
HCcGWqfdqkH+lBR/XVYEqMpS3g4jX9oBvB63ZTct1PPXub01jnBzwpAcVBi3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUC6jZCirzwhRupQ98hn/oFukDBmcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2NTYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRi6zAN
BgkqhkiG9w0BAQsFAAOCAQEAGgqHCc1MfZePLV1ntT9KqiDaMev8qAYHRfibo/2f
DLcB+sdyLLAuNixEIdZUNFth8FUKDbc56tX8qehu/2sQPSkru/c9TffbZfVyaAQh
ZBu3EK6+exy5lm5DN+BqNdqZ73PE0yeXOh5TM1swuBX2uUO7J4tNRSI9Ap9tAEUR
FfFprYRbtTHadjz/ITZrEw0N2I474AtnnfwIIWQd0BOYKJOno8iwnjF6XzYiNFQl
HGJ3picNQQyq+IOOKt0xUp3N+QZca0zgDzNJj/TeaR+FhmLZ2QMAIxRW6lTp9cgc
xpJgELz9CCK1WbU62yXeNCtSBm0c2cJLhiANAOD0urlCFA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:35 2025 by rpki-client