Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: t8wZBxdYf2QbI07xJVAQSMe+d9gj4gBoz9QU/ZoMSn4=
Subject key identifier: 31:BA:39:E4:2F:E0:D1:AF:55:5F:D8:E6:B5:48:61:67:C6:EA:35:04
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2D103BE9FD29BD942F14D1ABB86379F484D530C9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:12:02 +0000
ROA not before: Sun 18 May 2025 23:07:02 +0000
ROA not after: Sun 17 May 2026 23:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62f2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 18:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:10:3b:e9:fd:29:bd:94:2f:14:d1:ab:b8:63:79:f4:84:d5:30:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:07:02 2025 GMT
Not After : May 17 23:12:02 2026 GMT
Subject: CN=31BA39E42FE0D1AF555FD8E6B5486167C6EA3504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:88:aa:98:25:51:76:9f:5a:7a:37:c5:bb:
89:60:77:55:c0:9e:da:55:ee:d7:41:84:e7:3e:8f:
ff:41:37:9a:f5:85:00:9e:98:5e:02:18:42:e8:d4:
f3:10:ab:ca:9b:ee:fc:ce:53:a5:fd:eb:d6:1a:4e:
65:75:95:16:8b:ba:a2:43:13:63:c2:a2:95:b1:36:
11:27:7d:d4:f8:60:c3:a4:4e:a3:1b:0d:e4:3a:70:
c1:4c:4d:c3:b7:35:19:30:b4:a5:3d:3f:4f:c5:70:
56:9e:a1:79:a4:1e:5b:2f:06:5c:4b:d5:e5:d2:6c:
2a:60:08:41:49:f9:3c:7d:bb:42:1d:ac:36:ea:3e:
b4:bd:69:d7:7a:3f:74:fd:97:67:63:bb:f2:eb:8c:
e4:d0:68:e8:ad:34:77:6e:65:33:11:39:84:4b:d4:
d4:e8:c3:bf:8f:a8:79:9f:40:82:c9:f1:08:b2:b8:
e7:c8:54:30:9c:be:ae:f4:36:f0:4f:02:b8:02:4c:
01:7f:d6:13:50:9d:8a:57:af:9f:48:c0:8b:8b:52:
b0:d3:79:8e:33:44:75:fd:dd:f2:e0:09:d7:6a:f7:
be:1f:f7:c7:0b:21:e9:3a:7e:a3:37:ea:a3:2f:dd:
c0:37:f6:df:ad:bc:d6:77:e6:0b:97:03:9b:be:c3:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:39:E4:2F:E0:D1:AF:55:5F:D8:E6:B5:48:61:67:C6:EA:35:04
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62f2::/48
Signature Algorithm: sha256WithRSAEncryption
2b:be:df:92:50:12:fc:99:1c:48:41:53:db:c4:3d:b4:6a:c8:
da:10:c5:55:ee:42:01:bc:87:07:27:34:28:31:1e:68:29:1c:
54:29:86:7c:99:31:7a:53:ed:fc:5a:5e:7f:85:27:5f:8c:fa:
ce:04:3c:0d:a7:0c:78:7a:47:99:94:c9:e2:4d:54:72:d0:28:
4c:08:da:6d:a0:4c:8a:4b:6a:a7:14:f1:23:68:ba:30:12:fb:
c3:9a:ab:5e:16:01:9b:e2:1f:74:4a:ce:1a:45:3e:88:a7:57:
ac:a3:29:c5:88:a9:93:d3:15:7f:91:42:e4:74:b5:f3:cd:46:
c2:c4:e7:fc:e1:fd:ea:a7:dc:6d:da:74:9d:00:e0:6b:91:08:
9f:98:cb:8b:b6:17:3b:c1:81:98:5f:90:86:8d:f4:9f:48:3c:
54:e3:81:d5:d3:25:47:9e:94:8e:0f:ba:c3:92:63:e5:b4:93:
77:0b:ab:cf:65:8f:f9:76:bc:a4:48:4c:c4:e6:10:c1:e8:2b:
36:8d:46:b5:18:99:c8:44:36:f3:b6:fc:e8:7c:9f:60:ad:fc:
d9:76:21:41:ab:bf:b7:9f:38:05:44:cb:21:5c:03:e3:7a:db:
4c:24:6d:83:7f:ac:71:bd:56:8f:3f:7b:83:37:e8:0c:9c:c7:
43:cb:2c:a6
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIULRA76f0pvZQvFNGruGN59ITVMMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTgyMzA3MDJaFw0yNjA1MTcyMzEyMDJaMDMxMTAvBgNV
BAMTKDMxQkEzOUU0MkZFMEQxQUY1NTVGRDhFNkI1NDg2MTY3QzZFQTM1MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmoiqmCVRdp9aejfFu4lgd1XA
ntpV7tdBhOc+j/9BN5r1hQCemF4CGELo1PMQq8qb7vzOU6X969YaTmV1lRaLuqJD
E2PCopWxNhEnfdT4YMOkTqMbDeQ6cMFMTcO3NRkwtKU9P0/FcFaeoXmkHlsvBlxL
1eXSbCpgCEFJ+Tx9u0IdrDbqPrS9add6P3T9l2dju/LrjOTQaOitNHduZTMROYRL
1NTow7+PqHmfQILJ8QiyuOfIVDCcvq70NvBPArgCTAF/1hNQnYpXr59IwIuLUrDT
eY4zRHX93fLgCddq974f98cLIek6fqM36qMv3cA39t+tvNZ35guXA5u+w5aNAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUMbo55C/g0a9VX9jmtUhhZ8bqNQQwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2NjMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRi8jAN
BgkqhkiG9w0BAQsFAAOCAQEAK77fklAS/JkcSEFT28Q9tGrI2hDFVe5CAbyHByc0
KDEeaCkcVCmGfJkxelPt/Fpef4UnX4z6zgQ8DacMeHpHmZTJ4k1UctAoTAjabaBM
iktqpxTxI2i6MBL7w5qrXhYBm+IfdErOGkU+iKdXrKMpxYipk9MVf5FC5HS1881G
wsTn/OH96qfcbdp0nQDga5EIn5jLi7YXO8GBmF+Qho30n0g8VOOB1dMlR56Ujg+6
w5Jj5bSTdwurz2WP+Xa8pEhMxOYQwegrNo1GtRiZyEQ287b86HyfYK382XYhQau/
t584BUTLIVwD43rbTCRtg3+scb1Wjz97gzfoDJzHQ8sspg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:04 2025 by rpki-client