Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: HcWM/15dyxsfrK5icuGTY9v6KcQKHaIymRWSezyrhBs=
Subject key identifier: 18:91:CD:77:0D:73:D1:8D:11:F5:6A:AD:66:17:4C:A1:69:4A:75:E7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 21E91B1E305AF071E19B7BFEF321C9BC6AB19123
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334323a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 03:54:02 +0000
ROA not before: Thu 22 May 2025 03:49:02 +0000
ROA not after: Thu 21 May 2026 03:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6342::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e9:1b:1e:30:5a:f0:71:e1:9b:7b:fe:f3:21:c9:bc:6a:b1:91:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 03:49:02 2025 GMT
Not After : May 21 03:54:02 2026 GMT
Subject: CN=1891CD770D73D18D11F56AAD66174CA1694A75E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:09:05:86:2e:1a:8b:8c:62:e6:24:26:2f:
ab:4d:e5:05:18:a9:04:1b:87:55:4b:84:b6:18:65:
2e:2f:9d:84:98:3d:22:15:8a:99:61:82:81:79:70:
ee:58:c4:0b:53:11:82:2f:31:47:44:ff:35:28:b2:
b5:c2:c4:0f:2d:f5:09:5c:dd:d3:1a:35:7e:27:8d:
31:90:21:55:e0:a7:c8:d4:3a:41:5b:0d:34:f9:e8:
7d:62:60:fb:6a:34:b8:f0:17:ca:e2:12:c5:40:9b:
1b:5a:05:ee:07:77:15:69:c8:09:cd:f0:be:4a:a2:
fa:c4:bc:3b:b2:62:44:54:ae:2c:21:b3:6e:6b:9b:
32:77:9e:67:ba:2a:86:f3:fb:6a:0f:ae:67:f0:16:
99:8d:b4:e3:0f:9e:ba:48:96:91:97:a0:e3:dd:98:
43:82:42:05:ec:97:88:09:8b:28:bf:63:75:ee:c3:
d0:58:a8:a0:c7:1b:3f:b6:6f:d6:cc:89:9f:36:3d:
98:56:4c:e1:b8:ab:d6:5d:b4:a4:de:7f:2f:04:fa:
e8:49:2d:09:30:49:4c:e7:3d:7f:39:ef:7f:2b:de:
35:c3:74:99:b9:38:7b:a3:9c:b4:a1:57:e8:e8:32:
57:8b:a4:d8:67:c8:df:3b:85:78:4d:9d:bd:f1:76:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:91:CD:77:0D:73:D1:8D:11:F5:6A:AD:66:17:4C:A1:69:4A:75:E7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6342::/48
Signature Algorithm: sha256WithRSAEncryption
2e:d2:f3:7e:10:ac:4d:e6:fb:6a:63:0a:5b:2b:26:37:5d:ff:
fe:e5:a2:f8:5a:39:58:bf:dd:5a:85:08:13:e8:cd:7d:8b:96:
59:50:a2:90:7e:41:3d:f4:71:cd:0e:72:e2:65:c8:ec:94:f4:
6e:0c:15:d7:a3:91:f6:52:9c:e2:03:09:cc:28:f4:4b:86:d3:
2e:17:ca:3c:ad:e8:1f:e1:71:6a:5e:7a:a9:a0:57:82:01:3c:
c6:c7:08:7a:6a:ed:99:36:c0:71:be:d4:aa:83:4f:4a:9e:14:
82:b6:dc:74:3c:12:3d:95:16:e0:22:b9:02:24:df:43:c6:50:
87:11:a5:6e:ea:7b:f7:50:33:cb:32:f3:56:a3:52:cf:2b:cc:
c1:fe:c5:21:76:36:cb:31:a9:f5:8c:60:07:a2:ed:76:f1:98:
f7:b4:08:df:cf:00:21:3f:ea:d3:1d:5f:91:84:1a:d1:7f:95:
94:fd:cf:07:2c:4c:88:a8:48:b5:69:e2:79:36:0d:b4:fa:85:
6e:a5:ba:22:f8:59:f9:10:34:16:45:58:4b:74:87:e8:bd:7a:
87:e1:eb:cb:90:95:46:95:fa:16:61:89:76:21:f9:a2:33:8f:
54:19:7d:2e:db:75:88:62:50:26:68:9e:7f:ba:9f:f5:8e:dc:
9b:05:0a:e8
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUIekbHjBa8HHhm3v+8yHJvGqxkSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjIwMzQ5MDJaFw0yNjA1MjEwMzU0MDJaMDMxMTAvBgNV
BAMTKDE4OTFDRDc3MEQ3M0QxOEQxMUY1NkFBRDY2MTc0Q0ExNjk0QTc1RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYxwkFhi4ai4xi5iQmL6tN5QUY
qQQbh1VLhLYYZS4vnYSYPSIViplhgoF5cO5YxAtTEYIvMUdE/zUosrXCxA8t9Qlc
3dMaNX4njTGQIVXgp8jUOkFbDTT56H1iYPtqNLjwF8riEsVAmxtaBe4HdxVpyAnN
8L5KovrEvDuyYkRUriwhs25rmzJ3nme6Kobz+2oPrmfwFpmNtOMPnrpIlpGXoOPd
mEOCQgXsl4gJiyi/Y3Xuw9BYqKDHGz+2b9bMiZ82PZhWTOG4q9ZdtKTefy8E+uhJ
LQkwSUznPX85738r3jXDdJm5OHujnLShV+joMleLpNhnyN87hXhNnb3xdgMPAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUGJHNdw1z0Y0R9WqtZhdMoWlKdecwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzNDMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjQjAN
BgkqhkiG9w0BAQsFAAOCAQEALtLzfhCsTeb7amMKWysmN13//uWi+Fo5WL/dWoUI
E+jNfYuWWVCikH5BPfRxzQ5y4mXI7JT0bgwV16OR9lKc4gMJzCj0S4bTLhfKPK3o
H+Fxal56qaBXggE8xscIemrtmTbAcb7UqoNPSp4UgrbcdDwSPZUW4CK5AiTfQ8ZQ
hxGlbup791AzyzLzVqNSzyvMwf7FIXY2yzGp9YxgB6LtdvGY97QI388AIT/q0x1f
kYQa0X+VlP3PByxMiKhItWnieTYNtPqFbqW6IvhZ+RA0FkVYS3SH6L16h+Hry5CV
RpX6FmGJdiH5ojOPVBl9Ltt1iGJQJmief7qf9Y7cmwUK6A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:35 2025 by rpki-client