Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: xzShLj8laG7nslan7PkGVIUesiXBY1TVo7pJ4YzR+0k=
Subject key identifier: 8D:45:D8:8D:97:63:63:A0:16:56:9A:7D:9C:3B:AC:CA:1D:61:7E:4A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 12E35D2492545C7AE86879B61F41A671155FE032
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334353a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 06:48:01 +0000
ROA not before: Thu 22 May 2025 06:43:01 +0000
ROA not after: Thu 21 May 2026 06:48:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6345::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e3:5d:24:92:54:5c:7a:e8:68:79:b6:1f:41:a6:71:15:5f:e0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 06:43:01 2025 GMT
Not After : May 21 06:48:01 2026 GMT
Subject: CN=8D45D88D976363A016569A7D9C3BACCA1D617E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:1b:d0:51:f7:b5:85:a8:3f:07:03:bb:b8:
32:37:9c:8e:1e:6c:6d:b7:13:7a:f1:e4:4e:b0:97:
de:a3:50:cd:13:73:bc:15:76:cd:93:63:4d:01:3d:
a4:62:64:62:df:4a:f4:96:36:80:48:01:6b:dc:eb:
2a:9d:e3:22:4a:fd:90:85:36:b4:b8:f2:62:eb:0c:
01:fe:70:d9:8e:61:fc:6c:04:5d:e3:be:e5:34:5c:
9a:3c:58:07:90:f0:68:15:d3:33:52:4b:dd:63:ed:
17:48:99:17:59:06:09:2b:a6:04:b1:30:31:83:5b:
81:23:fe:ae:72:e6:14:6b:f1:55:c7:46:49:3c:9a:
c1:fe:a7:e7:cf:58:5a:6c:b4:e6:1e:ac:d0:f4:9e:
44:46:46:64:ea:5a:7f:45:01:09:24:07:b7:7c:66:
aa:8a:b7:a8:80:63:f3:50:a8:2e:f7:73:65:bf:be:
9a:27:c1:fb:e2:a6:94:a3:c7:a9:1d:96:4a:17:b0:
b5:0b:ce:32:b6:ac:07:e8:83:0f:b3:2f:e9:68:31:
32:1d:96:c9:a1:71:a4:5a:88:32:9f:e1:b4:02:a8:
5b:5b:71:9b:94:0b:95:3a:fa:8d:56:aa:f5:80:c0:
4c:d2:6a:7e:24:9d:d3:f0:1e:8d:ac:b3:37:20:9b:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:45:D8:8D:97:63:63:A0:16:56:9A:7D:9C:3B:AC:CA:1D:61:7E:4A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6345::/48
Signature Algorithm: sha256WithRSAEncryption
1b:ba:6c:b6:8e:fa:e1:7a:43:87:4e:1f:7a:d6:91:0d:a0:9a:
57:8a:42:4d:16:13:a1:34:a2:70:da:a6:46:ea:00:58:9f:bf:
68:32:87:46:a2:e5:b9:dd:f6:48:86:44:c7:ee:61:1d:e8:ca:
e4:75:09:c8:f0:a5:13:d8:3a:b0:e6:54:69:da:73:54:2a:e7:
99:fd:ae:7e:fb:ab:15:fe:d9:cf:ed:c9:63:c6:9b:bd:fb:02:
a0:50:fe:7e:56:f3:96:84:3e:a6:4f:4a:30:e7:a7:71:6f:76:
3d:13:a5:9f:05:a9:95:8e:0d:b8:44:4e:91:6a:77:46:9f:c9:
47:73:31:57:78:0d:3a:4d:81:4f:34:b5:08:33:88:5c:04:f7:
96:48:ab:e8:c2:19:d8:2c:d0:40:15:83:dd:60:58:bb:49:3f:
0c:af:d7:42:bc:22:37:a6:9d:d6:60:83:5f:0c:fd:8b:b0:a1:
e8:cc:d6:a9:77:5a:55:d7:6f:61:74:63:c8:b9:53:07:06:0a:
cb:1b:86:2a:35:21:23:25:d7:b5:18:5b:28:18:87:5d:28:86:
f8:8d:0d:59:ce:4f:c6:d2:6a:3e:c3:ba:a3:df:0b:2e:37:24:
8e:1f:bf:10:99:63:64:97:a1:e0:28:99:8d:4d:7e:d2:60:98:
fa:0f:8c:e8
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUEuNdJJJUXHroaHm2H0GmcRVf4DIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjIwNjQzMDFaFw0yNjA1MjEwNjQ4MDFaMDMxMTAvBgNV
BAMTKDhENDVEODhEOTc2MzYzQTAxNjU2OUE3RDlDM0JBQ0NBMUQ2MTdFNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OBvQUfe1hag/BwO7uDI3nI4e
bG23E3rx5E6wl96jUM0Tc7wVds2TY00BPaRiZGLfSvSWNoBIAWvc6yqd4yJK/ZCF
NrS48mLrDAH+cNmOYfxsBF3jvuU0XJo8WAeQ8GgV0zNSS91j7RdImRdZBgkrpgSx
MDGDW4Ej/q5y5hRr8VXHRkk8msH+p+fPWFpstOYerND0nkRGRmTqWn9FAQkkB7d8
ZqqKt6iAY/NQqC73c2W/vponwfvippSjx6kdlkoXsLULzjK2rAfogw+zL+loMTId
lsmhcaRaiDKf4bQCqFtbcZuUC5U6+o1WqvWAwEzSan4kndPwHo2sszcgm2LNAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUjUXYjZdjY6AWVpp9nDusyh1hfkowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzNDM1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjRTAN
BgkqhkiG9w0BAQsFAAOCAQEAG7psto764XpDh04fetaRDaCaV4pCTRYToTSicNqm
RuoAWJ+/aDKHRqLlud32SIZEx+5hHejK5HUJyPClE9g6sOZUadpzVCrnmf2ufvur
Ff7Zz+3JY8abvfsCoFD+flbzloQ+pk9KMOencW92PROlnwWplY4NuEROkWp3Rp/J
R3MxV3gNOk2BTzS1CDOIXAT3lkir6MIZ2CzQQBWD3WBYu0k/DK/XQrwiN6ad1mCD
Xwz9i7Ch6MzWqXdaVddvYXRjyLlTBwYKyxuGKjUhIyXXtRhbKBiHXSiG+I0NWc5P
xtJqPsO6o98LLjckjh+/EJljZJeh4CiZjU1+0mCY+g+M6A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:59 2025 by rpki-client