Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: LgSeZzSGdDoIiLgGmQBZoNK1QDqN7Hb5JehCruq1pJo=
Subject key identifier: 86:B3:D7:03:0D:35:29:8B:AC:EC:4E:03:55:AD:19:B2:22:9B:4A:F2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7F49FEF5A861CD20EABFF0020C455CEAFD205E66
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:06:03 +0000
ROA not before: Sun 18 May 2025 23:01:03 +0000
ROA not after: Sun 17 May 2026 23:06:03 +0000
asID: 16909
IP address blocks: 2a14:7584:62ef::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 12:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:49:fe:f5:a8:61:cd:20:ea:bf:f0:02:0c:45:5c:ea:fd:20:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:01:03 2025 GMT
Not After : May 17 23:06:03 2026 GMT
Subject: CN=86B3D7030D35298BACEC4E0355AD19B2229B4AF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:a1:1d:4e:b7:db:3b:c7:b1:d1:44:3c:96:
e2:3e:8b:3f:b4:09:63:52:71:c3:12:e7:1a:9c:72:
b7:5e:18:04:21:35:dd:c2:c7:9b:70:de:f0:f5:63:
10:0c:a6:05:d7:3a:da:39:10:aa:ac:0d:04:95:27:
8e:aa:1d:e2:8c:bc:2c:e8:ba:8a:38:0d:47:81:1a:
fb:dd:5e:8a:84:32:2c:6b:98:e9:b3:b8:2d:88:03:
23:5e:5c:44:fb:65:cf:37:a4:b2:d7:0d:07:a7:0b:
52:e8:bc:e8:31:c2:f2:7e:a2:0e:ef:b6:5b:49:3b:
e4:90:37:45:9a:8b:27:31:2e:d1:4c:75:9d:df:7e:
02:75:1f:23:8e:92:b4:50:3c:33:cf:25:39:71:b5:
4d:b0:9b:fa:74:fb:42:14:7c:51:c5:29:d6:c6:81:
c3:43:72:d2:da:40:fa:1e:12:3f:b2:34:72:17:bd:
a0:0a:d2:bd:37:7c:c7:b6:4e:9a:1a:96:43:46:65:
d0:d5:47:75:26:d2:f5:ea:48:34:a8:9a:30:a4:d1:
6c:d2:79:d3:2c:d2:fb:dd:fd:d0:02:80:f0:9e:3d:
6d:d8:8f:0f:e8:1b:12:4d:76:e9:5b:c9:65:a6:cb:
1f:3b:fa:0f:09:74:9a:51:ab:6a:99:7d:de:25:0f:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B3:D7:03:0D:35:29:8B:AC:EC:4E:03:55:AD:19:B2:22:9B:4A:F2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ef::/48
Signature Algorithm: sha256WithRSAEncryption
71:43:9e:9c:99:39:ef:ff:ac:af:c4:20:bf:0e:ed:90:6a:18:
a5:9e:6c:10:e0:6d:31:a5:21:bc:98:9d:09:83:4f:f6:59:51:
dc:d8:a6:e7:08:35:58:b4:90:56:2d:ce:d3:4b:30:1a:11:92:
a0:47:d9:88:0a:11:df:9a:f2:1b:0f:32:e8:08:28:2d:84:8e:
32:b7:09:2b:2f:85:6b:4f:3c:0b:d8:fa:9e:a6:b0:9c:ec:69:
f6:fc:44:98:f3:1a:18:68:5d:e5:e3:f5:8e:22:a8:5a:61:04:
01:18:a4:ac:cd:38:f4:b3:ab:a3:8c:9b:a8:41:2b:69:20:f1:
0e:7c:06:e1:25:42:85:81:53:9d:d0:b9:8d:d5:fc:a3:53:29:
c5:74:e7:f8:61:b6:a7:c0:f5:55:4d:35:54:78:b4:95:6b:d8:
ee:a7:a0:b7:52:7d:f8:55:7b:5a:77:7e:b6:df:ec:b0:6e:e0:
82:7f:e8:89:36:91:a5:81:21:c7:9b:df:29:fb:36:98:e4:e1:
f5:b6:d7:17:92:3b:31:fa:67:cb:dd:3a:48:89:28:a3:18:95:
d5:ba:e0:f7:92:4c:0e:a7:e6:e2:3b:12:34:87:50:6a:f7:21:
e5:b4:47:16:67:24:cb:a5:2f:33:71:76:66:5a:f5:ef:31:1f:
70:b1:03:ff
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUf0n+9ahhzSDqv/ACDEVc6v0gXmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTgyMzAxMDNaFw0yNjA1MTcyMzA2MDNaMDMxMTAvBgNV
BAMTKDg2QjNENzAzMEQzNTI5OEJBQ0VDNEUwMzU1QUQxOUIyMjI5QjRBRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmaEdTrfbO8ex0UQ8luI+iz+0
CWNSccMS5xqccrdeGAQhNd3Cx5tw3vD1YxAMpgXXOto5EKqsDQSVJ46qHeKMvCzo
uoo4DUeBGvvdXoqEMixrmOmzuC2IAyNeXET7Zc83pLLXDQenC1LovOgxwvJ+og7v
tltJO+SQN0WaiycxLtFMdZ3ffgJ1HyOOkrRQPDPPJTlxtU2wm/p0+0IUfFHFKdbG
gcNDctLaQPoeEj+yNHIXvaAK0r03fMe2TpoalkNGZdDVR3Um0vXqSDSomjCk0WzS
edMs0vvd/dACgPCePW3Yjw/oGxJNdulbyWWmyx87+g8JdJpRq2qZfd4lD8QTAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUhrPXAw01KYus7E4DVa0ZsiKbSvIwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2NTY2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRi7zAN
BgkqhkiG9w0BAQsFAAOCAQEAcUOenJk57/+sr8Qgvw7tkGoYpZ5sEOBtMaUhvJid
CYNP9llR3Nim5wg1WLSQVi3O00swGhGSoEfZiAoR35ryGw8y6AgoLYSOMrcJKy+F
a088C9j6nqawnOxp9vxEmPMaGGhd5eP1jiKoWmEEARikrM049LOro4ybqEEraSDx
DnwG4SVChYFTndC5jdX8o1MpxXTn+GG2p8D1VU01VHi0lWvY7qegt1J9+FV7Wnd+
tt/ssG7ggn/oiTaRpYEhx5vfKfs2mOTh9bbXF5I7Mfpny906SIkooxiV1brg95JM
Dqfm4jsSNIdQavch5bRHFmcky6UvM3F2Zlr17zEfcLED/w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:17:57 2025 by rpki-client