Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: jjNoJNf356c97kAxl+x1hBB5y3HhSMvdZxc8m9E9klc=
Subject key identifier: AD:C0:25:AD:F3:85:A1:29:50:73:41:FF:2F:24:F7:DD:4F:E8:95:89
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 77CA3CE1C8C262AB3088AA1636DB68365F8CD93A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:06:03 +0000
ROA not before: Sun 18 May 2025 23:01:03 +0000
ROA not after: Sun 17 May 2026 23:06:03 +0000
asID: 16909
IP address blocks: 2a14:7584:62ec::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 11:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ca:3c:e1:c8:c2:62:ab:30:88:aa:16:36:db:68:36:5f:8c:d9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:01:03 2025 GMT
Not After : May 17 23:06:03 2026 GMT
Subject: CN=ADC025ADF385A129507341FF2F24F7DD4FE89589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:c6:df:5b:d6:eb:59:92:a1:0c:e4:34:66:
ec:ba:51:1e:b6:6c:f7:22:25:d2:49:50:0f:21:17:
c1:a3:e5:49:29:f3:5d:43:be:e1:e0:40:df:5e:a2:
09:99:1d:5a:e3:ec:63:b3:57:ce:32:e9:29:c5:df:
17:21:f1:f2:6b:c5:22:ea:0b:f2:5d:b8:3d:f8:99:
6e:13:2e:6c:3f:14:6f:9c:df:26:d9:a3:a5:df:d6:
83:8e:40:cd:28:d4:0a:8f:c1:5e:29:b5:4c:ee:2a:
93:23:e6:14:82:b6:f3:92:40:46:d7:fd:ac:63:d5:
7a:1a:d7:eb:3b:2b:8d:d4:5b:73:2b:ee:2b:cd:b1:
63:3e:7d:08:ec:4b:99:2a:d8:e7:d7:45:64:97:2b:
f8:f8:96:62:48:4f:c1:a5:48:27:d4:bf:32:6d:3f:
e9:8c:32:2d:52:5e:d3:a7:9c:0b:ab:d3:c8:83:3d:
30:6c:4a:75:d1:53:6d:94:7a:2a:5d:fd:52:5f:4d:
47:fc:1b:fb:55:03:4a:09:b1:7e:4d:87:a9:60:4f:
51:13:b7:ca:67:70:37:d1:af:9a:f6:87:47:45:64:
5b:4a:56:b6:cd:7b:d9:1c:7c:16:eb:49:65:d1:02:
e7:39:53:6a:8d:56:af:a6:ea:a8:52:c9:5b:df:19:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:25:AD:F3:85:A1:29:50:73:41:FF:2F:24:F7:DD:4F:E8:95:89
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ec::/48
Signature Algorithm: sha256WithRSAEncryption
2e:06:e1:4f:1b:16:9f:18:6d:50:51:ed:47:1f:6e:e4:75:d2:
0e:9d:2c:9a:e4:dd:f7:f1:02:79:e6:b0:4e:4f:1e:24:72:12:
7c:c5:26:7f:db:80:54:92:19:1a:bb:45:9a:ae:6b:4b:10:a7:
70:99:9a:2a:db:4f:dd:62:9b:12:a9:d7:20:65:bc:27:d7:fd:
d7:b2:1f:f0:1b:92:2a:8b:e1:3a:5a:01:29:0e:84:aa:07:2a:
5a:d1:cd:0b:1e:24:a6:e3:9c:22:cb:03:2d:17:37:6c:a9:be:
ac:dc:40:92:33:29:9f:88:85:80:59:64:dc:f3:aa:6a:dc:92:
61:9c:ed:40:a9:c2:89:88:06:22:cd:30:e1:5b:c8:0a:4a:d8:
a4:2e:63:98:b5:2f:c6:87:7a:1e:ee:88:b4:d4:f0:d3:0e:0a:
5c:4b:09:f4:f6:e8:6b:cc:4c:fe:f2:d5:18:60:75:3c:a8:a8:
e3:7a:de:db:40:75:85:2b:4e:db:4f:fe:13:2b:cc:a9:ea:4a:
7c:8b:c1:59:1f:8e:ce:ef:97:d9:1a:15:fe:7b:d1:44:af:59:
00:63:0d:a9:7a:a9:80:31:2d:2f:a7:c1:b7:2d:12:b7:43:80:
22:73:7d:6b:fd:8e:ed:a4:ea:27:77:26:26:c5:6c:90:16:b4:
21:5e:db:6b
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUd8o84cjCYqswiKoWNttoNl+M2TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTgyMzAxMDNaFw0yNjA1MTcyMzA2MDNaMDMxMTAvBgNV
BAMTKEFEQzAyNUFERjM4NUExMjk1MDczNDFGRjJGMjRGN0RENEZFODk1ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ68bfW9brWZKhDOQ0Zuy6UR62
bPciJdJJUA8hF8Gj5Ukp811DvuHgQN9eogmZHVrj7GOzV84y6SnF3xch8fJrxSLq
C/JduD34mW4TLmw/FG+c3ybZo6Xf1oOOQM0o1AqPwV4ptUzuKpMj5hSCtvOSQEbX
/axj1Xoa1+s7K43UW3Mr7ivNsWM+fQjsS5kq2OfXRWSXK/j4lmJIT8GlSCfUvzJt
P+mMMi1SXtOnnAur08iDPTBsSnXRU22Ueipd/VJfTUf8G/tVA0oJsX5Nh6lgT1ET
t8pncDfRr5r2h0dFZFtKVrbNe9kcfBbrSWXRAuc5U2qNVq+m6qhSyVvfGYDbAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUrcAlrfOFoSlQc0H/LyT33U/olYkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2NTYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRi7DAN
BgkqhkiG9w0BAQsFAAOCAQEALgbhTxsWnxhtUFHtRx9u5HXSDp0smuTd9/ECeeaw
Tk8eJHISfMUmf9uAVJIZGrtFmq5rSxCncJmaKttP3WKbEqnXIGW8J9f917If8BuS
KovhOloBKQ6EqgcqWtHNCx4kpuOcIssDLRc3bKm+rNxAkjMpn4iFgFlk3POqatyS
YZztQKnCiYgGIs0w4VvICkrYpC5jmLUvxod6Hu6ItNTw0w4KXEsJ9Pboa8xM/vLV
GGB1PKio43re20B1hStO20/+EyvMqepKfIvBWR+Ozu+X2RoV/nvRRK9ZAGMNqXqp
gDEtL6fBty0St0OAInN9a/2O7aTqJ3cmJsVskBa0IV7baw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:35:59 2025 by rpki-client