Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Z7HDDpDro5Trt0iXFoqDIg3ZywvToYJOsas9rFwQVgA=
Subject key identifier: 49:98:24:D7:38:DE:CE:18:82:9C:34:97:86:E3:A9:FA:16:86:27:E0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 15C217BEB2D44100F8E50474D9EB19FE12D591CB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331323a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 23:00:02 +0000
ROA not before: Mon 19 May 2025 22:55:02 +0000
ROA not after: Mon 18 May 2026 23:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6312::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c2:17:be:b2:d4:41:00:f8:e5:04:74:d9:eb:19:fe:12:d5:91:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 22:55:02 2025 GMT
Not After : May 18 23:00:02 2026 GMT
Subject: CN=499824D738DECE18829C349786E3A9FA168627E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:9d:5a:fa:d1:9a:89:af:96:42:47:92:06:
1e:a5:a4:c2:1b:c6:af:60:95:b3:21:32:9c:55:65:
7d:b6:9d:7e:f5:e2:b6:b6:c9:7f:ed:8c:f5:4c:c7:
88:4c:58:29:12:86:45:9b:e6:0d:2b:5c:4c:48:91:
c0:8c:79:43:3b:73:2e:4c:b0:9f:5c:4d:32:99:b7:
dd:9a:59:5d:54:d3:d6:a0:e1:17:7f:53:25:f8:8e:
29:8b:a3:be:ab:b6:7b:2a:19:f0:2f:70:3a:d5:88:
93:5b:e9:5e:76:cc:78:27:df:41:22:39:72:de:8d:
ab:f1:b0:d9:06:82:d6:d4:ec:05:45:e7:a3:52:2f:
51:1c:cd:47:00:89:b7:17:35:87:39:45:0a:fa:b8:
21:f1:b5:44:d2:3a:b0:0b:48:50:f8:0a:24:ea:15:
7c:8a:0d:ef:06:a4:92:54:12:dc:0f:e6:e4:c3:61:
e5:d6:75:08:03:ae:22:c6:0c:8b:bc:00:c3:7a:d4:
ca:80:40:eb:80:a1:ef:a3:44:3a:8e:1b:b4:e5:8f:
d9:ca:77:8f:8f:42:4c:51:f5:a7:94:d7:6e:cd:b7:
ff:9c:27:05:e2:24:e0:97:93:36:5e:4a:34:a2:e7:
c9:54:4a:12:49:6c:b1:f5:51:5f:20:64:d4:30:8d:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:98:24:D7:38:DE:CE:18:82:9C:34:97:86:E3:A9:FA:16:86:27:E0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6312::/48
Signature Algorithm: sha256WithRSAEncryption
42:49:91:21:d0:d0:a4:06:ff:d4:28:bf:b4:b3:a4:4d:b5:45:
cb:46:71:4a:89:cf:40:3f:04:19:6d:49:1b:4e:f2:92:97:2e:
67:b5:fb:71:20:21:fd:ee:12:5c:d9:c3:2b:cb:51:b0:b9:1e:
92:9a:45:58:dd:7e:33:b5:e9:36:b6:81:ab:d6:9b:6e:a3:86:
75:59:0f:fc:eb:d8:84:25:5f:7e:40:53:99:cb:c7:b8:af:a0:
85:76:48:c7:a2:a0:ac:03:28:94:19:20:3c:61:d8:d5:1c:8d:
31:f7:1c:2b:dd:df:4a:b6:ab:8b:be:3b:59:80:59:29:46:dc:
13:74:10:e5:b5:a1:f6:e4:ab:27:1f:83:80:43:d6:49:bf:dc:
63:83:0a:0a:ce:b2:f2:4f:01:23:69:c4:f4:8d:0a:66:4e:ad:
c3:c2:de:c0:8c:57:00:0e:c5:38:85:f8:1b:f1:4a:67:62:82:
96:b7:71:bf:c2:c1:cc:ee:f9:7d:87:75:97:11:18:0a:30:35:
8f:ff:09:1b:1b:22:c8:31:33:11:0d:71:ad:a3:7f:4a:8a:42:
b6:8d:7d:6b:6c:bf:fd:0e:02:58:30:ab:7d:fd:03:6b:37:12:
c0:b2:a2:75:34:31:7c:66:39:ea:1b:fd:77:71:d0:40:63:ec:
62:00:b9:87
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUFcIXvrLUQQD45QR02esZ/hLVkcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTkyMjU1MDJaFw0yNjA1MTgyMzAwMDJaMDMxMTAvBgNV
BAMTKDQ5OTgyNEQ3MzhERUNFMTg4MjlDMzQ5Nzg2RTNBOUZBMTY4NjI3RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPZ1a+tGaia+WQkeSBh6lpMIb
xq9glbMhMpxVZX22nX714ra2yX/tjPVMx4hMWCkShkWb5g0rXExIkcCMeUM7cy5M
sJ9cTTKZt92aWV1U09ag4Rd/UyX4jimLo76rtnsqGfAvcDrViJNb6V52zHgn30Ei
OXLejavxsNkGgtbU7AVF56NSL1EczUcAibcXNYc5RQr6uCHxtUTSOrALSFD4CiTq
FXyKDe8GpJJUEtwP5uTDYeXWdQgDriLGDIu8AMN61MqAQOuAoe+jRDqOG7Tlj9nK
d4+PQkxR9aeU127Nt/+cJwXiJOCXkzZeSjSi58lUShJJbLH1UV8gZNQwjeaxAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUSZgk1zjezhiCnDSXhuOp+haGJ+AwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzMTMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjEjAN
BgkqhkiG9w0BAQsFAAOCAQEAQkmRIdDQpAb/1Ci/tLOkTbVFy0ZxSonPQD8EGW1J
G07ykpcuZ7X7cSAh/e4SXNnDK8tRsLkekppFWN1+M7XpNraBq9abbqOGdVkP/OvY
hCVffkBTmcvHuK+ghXZIx6KgrAMolBkgPGHY1RyNMfccK93fSrari747WYBZKUbc
E3QQ5bWh9uSrJx+DgEPWSb/cY4MKCs6y8k8BI2nE9I0KZk6tw8LewIxXAA7FOIX4
G/FKZ2KClrdxv8LBzO75fYd1lxEYCjA1j/8JGxsiyDEzEQ1xraN/SopCto19a2y/
/Q4CWDCrff0DazcSwLKidTQxfGY56hv9d3HQQGPsYgC5hw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:30 2025 by rpki-client