Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: q1r8HMXAMIMOX9qoxNla6wmOR+YkbphVC2yNCNVM4QQ=
Subject key identifier: 75:C3:D3:A1:E9:A1:DD:2C:80:91:4D:F2:CC:07:09:7C:FA:85:C4:32
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 40C7302751EDEE8B33C265F737947D4923BD43B4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266623a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 06:54:03 +0000
ROA not before: Mon 19 May 2025 06:49:03 +0000
ROA not after: Mon 18 May 2026 06:54:03 +0000
asID: 16909
IP address blocks: 2a14:7584:62fb::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 18:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c7:30:27:51:ed:ee:8b:33:c2:65:f7:37:94:7d:49:23:bd:43:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 06:49:03 2025 GMT
Not After : May 18 06:54:03 2026 GMT
Subject: CN=75C3D3A1E9A1DD2C80914DF2CC07097CFA85C432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:3c:f9:8d:31:27:93:ee:ed:b3:33:00:8d:
98:1e:97:4e:df:a2:41:51:a9:2e:99:77:5f:0c:d8:
58:e4:bf:c2:0e:14:da:bc:b1:95:38:18:a8:a5:6a:
eb:a2:23:f1:95:a1:c7:67:e6:c2:52:54:9e:9e:f5:
39:99:9e:aa:00:4b:cb:fb:59:1d:21:ae:87:4c:70:
d4:48:6a:be:03:cd:c6:d7:2b:3f:ca:a4:25:3f:6f:
88:9c:50:25:d6:49:d8:76:3e:00:bf:cd:51:4e:9f:
ff:12:06:5c:c1:3d:56:a1:a9:6e:cb:04:7d:26:b2:
ac:4b:a9:5d:f8:39:75:05:88:e8:a5:04:de:04:a8:
80:b0:ed:b4:4b:bf:51:04:19:bb:e7:49:e2:17:a2:
8e:ae:47:e5:44:09:eb:e4:fd:09:5c:08:b0:cf:73:
06:4d:3c:9a:30:f5:c7:95:12:a4:ed:d6:8d:98:ca:
1a:73:b8:1b:6f:76:88:d3:5c:2d:d5:6d:f6:4d:e4:
7f:4d:b0:3c:13:28:01:79:30:d7:f8:2f:86:40:19:
90:4c:a8:9f:43:f8:76:0e:00:15:94:61:f0:d8:ef:
81:63:60:8d:8c:00:e7:ec:d3:ba:12:47:b7:52:9e:
69:f3:bb:0b:3f:32:e2:ab:53:29:ce:f8:37:7f:c9:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C3:D3:A1:E9:A1:DD:2C:80:91:4D:F2:CC:07:09:7C:FA:85:C4:32
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62fb::/48
Signature Algorithm: sha256WithRSAEncryption
99:d2:5a:e9:f0:71:5b:51:4d:78:e5:31:c6:23:b6:82:63:54:
1b:bd:86:1e:0f:97:dc:b3:ba:bf:9f:2f:8d:9d:07:af:96:e4:
d5:42:33:39:e1:97:19:43:b5:c4:e4:dc:48:2e:25:dd:f9:2a:
7d:a5:d9:18:27:a1:72:2b:8f:4f:0b:c6:f2:f5:62:6f:12:23:
db:d9:3c:0f:1f:b8:fa:cc:0a:b6:a4:f7:ef:76:0c:68:50:91:
72:31:b0:22:b3:bf:7a:6c:a6:40:81:70:31:a9:e2:b2:19:06:
61:4f:be:6d:59:ad:d8:1c:4d:1a:52:8e:9c:3d:67:31:30:38:
7e:ea:5d:d9:82:54:d6:a7:75:b3:9e:a5:62:5d:b8:c5:a0:ea:
5b:1a:9c:64:9b:fe:94:a6:6b:17:11:a1:33:32:83:d1:14:27:
5b:05:eb:26:9d:70:4c:fc:c3:38:cd:f2:87:e4:c1:8f:7a:da:
34:92:84:8d:3e:c7:f4:fd:ef:86:5f:16:f5:8a:ce:97:b7:2b:
6b:0b:ca:9f:19:27:05:fa:79:69:2e:fa:7b:91:87:4a:ba:42:
7b:48:71:dd:5f:dd:9f:b7:3d:fe:9c:c0:fb:f4:fe:b1:9e:de:
1e:2b:fa:36:f2:32:8e:fe:45:50:11:1c:42:16:40:3a:d5:83:
76:5c:3a:cc
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUQMcwJ1Ht7oszwmX3N5R9SSO9Q7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTkwNjQ5MDNaFw0yNjA1MTgwNjU0MDNaMDMxMTAvBgNV
BAMTKDc1QzNEM0ExRTlBMUREMkM4MDkxNERGMkNDMDcwOTdDRkE4NUM0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmzz5jTEnk+7tszMAjZgel07f
okFRqS6Zd18M2Fjkv8IOFNq8sZU4GKilauuiI/GVocdn5sJSVJ6e9TmZnqoAS8v7
WR0hrodMcNRIar4DzcbXKz/KpCU/b4icUCXWSdh2PgC/zVFOn/8SBlzBPVahqW7L
BH0msqxLqV34OXUFiOilBN4EqICw7bRLv1EEGbvnSeIXoo6uR+VECevk/QlcCLDP
cwZNPJow9ceVEqTt1o2YyhpzuBtvdojTXC3VbfZN5H9NsDwTKAF5MNf4L4ZAGZBM
qJ9D+HYOABWUYfDY74FjYI2MAOfs07oSR7dSnmnzuws/MuKrUynO+Dd/yQidAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUdcPToemh3SyAkU3yzAcJfPqFxDIwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2NjYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRi+zAN
BgkqhkiG9w0BAQsFAAOCAQEAmdJa6fBxW1FNeOUxxiO2gmNUG72GHg+X3LO6v58v
jZ0Hr5bk1UIzOeGXGUO1xOTcSC4l3fkqfaXZGCehciuPTwvG8vVibxIj29k8Dx+4
+swKtqT373YMaFCRcjGwIrO/emymQIFwManishkGYU++bVmt2BxNGlKOnD1nMTA4
fupd2YJU1qd1s56lYl24xaDqWxqcZJv+lKZrFxGhMzKD0RQnWwXrJp1wTPzDOM3y
h+TBj3raNJKEjT7H9P3vhl8W9YrOl7crawvKnxknBfp5aS76e5GHSrpCe0hx3V/d
n7c9/pzA+/T+sZ7eHiv6NvIyjv5FUBEcQhZAOtWDdlw6zA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:28:26 2025 by rpki-client