Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334663a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363334663a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: W6CxTbt/3VM64N1ClAk3ZEy7Qq0Q/wg/mBfT8YggxYw=
Subject key identifier: 05:C0:BB:19:9F:BF:D2:81:25:07:BE:86:EB:27:63:17:31:19:D4:E2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7992F8F09DA9364C0AC519F1DE3471F175C09965
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334663a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 22 May 2025 16:36:02 +0000
ROA not before: Thu 22 May 2025 16:31:02 +0000
ROA not after: Thu 21 May 2026 16:36:02 +0000
asID: 401507
IP address blocks: 2a14:7584:634f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 15:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:92:f8:f0:9d:a9:36:4c:0a:c5:19:f1:de:34:71:f1:75:c0:99:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:31:02 2025 GMT
Not After : May 21 16:36:02 2026 GMT
Subject: CN=05C0BB199FBFD2812507BE86EB2763173119D4E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:33:ea:df:ab:18:b5:6f:cb:5a:f8:07:bf:
9c:10:84:fd:04:b1:f7:bc:6e:13:5b:56:4a:a3:2a:
82:5b:02:0c:c5:e4:53:d3:b0:cb:61:b0:d4:e7:a3:
d1:78:c3:6c:d9:99:38:5f:a9:a9:10:99:f0:44:63:
68:20:0b:2f:03:1f:ea:be:1d:9c:17:9f:c7:43:e6:
d3:a3:bc:4c:b3:1f:ec:a0:09:9d:62:38:70:aa:24:
94:27:b3:c3:1d:73:54:f7:33:7b:f6:c5:86:07:26:
4a:7a:4b:6c:70:4f:2e:4c:41:2d:e7:08:8d:a5:67:
c7:1a:17:02:a5:7a:7d:84:3c:e9:12:23:d8:75:e5:
49:0f:43:e5:2c:29:11:91:28:df:f9:38:dc:ff:ba:
47:e9:5a:35:65:49:15:00:9b:e4:59:74:31:4a:4a:
25:bd:46:e3:1f:0a:42:2d:eb:61:9b:8c:b9:01:30:
5f:a3:7b:0c:50:79:24:91:e6:29:23:8a:33:5a:d7:
e0:d1:98:3a:fc:eb:c8:24:b5:5d:21:0d:d3:cd:2f:
e8:d5:ff:86:97:74:48:9b:19:1b:19:b8:0c:84:c0:
39:62:57:8c:78:0f:b3:5b:54:8b:ae:db:6d:1d:22:
19:e0:f7:94:01:00:9e:1f:05:af:74:38:64:e3:48:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C0:BB:19:9F:BF:D2:81:25:07:BE:86:EB:27:63:17:31:19:D4:E2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334663a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:634f::/48
Signature Algorithm: sha256WithRSAEncryption
2a:8a:ae:c1:26:4d:49:aa:90:ee:35:0f:cd:7b:4f:d4:7d:d5:
05:c2:45:43:e3:9f:41:ed:43:b5:df:eb:87:cf:e3:2f:4e:67:
f5:85:26:3b:fa:34:99:61:99:67:51:97:5e:0d:e4:73:30:6f:
d1:d6:c9:0c:7a:c5:26:83:3a:03:9b:28:b5:d7:cb:aa:9b:fe:
75:99:79:c4:9d:58:1f:de:72:1a:f6:cd:97:6e:59:26:e6:ad:
07:44:1c:12:aa:07:0f:e8:15:e2:65:48:7e:6f:38:77:0b:a5:
24:c4:00:f0:14:ed:45:6d:4a:7b:90:68:1a:08:42:65:c3:71:
3b:d5:dd:9e:fe:9c:cb:48:42:38:6d:fc:f1:5f:f6:3e:c1:2b:
41:e9:cb:76:f7:40:a9:31:18:65:56:56:c5:e2:90:7b:ee:55:
07:20:17:86:fe:42:af:1b:59:cd:ea:65:0c:be:4d:dc:ff:d5:
12:d8:51:aa:06:72:40:9b:28:dc:89:ca:43:ed:ee:85:1e:a8:
1e:ba:25:33:1d:f3:01:2a:b7:c1:e5:77:29:23:af:a1:e0:62:
6a:46:76:53:b6:9a:d8:a0:b8:62:12:6f:ee:d2:89:7a:ab:ca:
3f:a3:88:e9:d8:70:1c:c8:40:fb:ca:a5:c8:1e:6f:84:fb:5f:
63:02:08:7b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeZL48J2pNkwKxRnx3jRx8XXAmWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjIxNjMxMDJaFw0yNjA1MjExNjM2MDJaMDMxMTAvBgNV
BAMTKDA1QzBCQjE5OUZCRkQyODEyNTA3QkU4NkVCMjc2MzE3MzExOUQ0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTKDPq36sYtW/LWvgHv5wQhP0E
sfe8bhNbVkqjKoJbAgzF5FPTsMthsNTno9F4w2zZmThfqakQmfBEY2ggCy8DH+q+
HZwXn8dD5tOjvEyzH+ygCZ1iOHCqJJQns8Mdc1T3M3v2xYYHJkp6S2xwTy5MQS3n
CI2lZ8caFwKlen2EPOkSI9h15UkPQ+UsKRGRKN/5ONz/ukfpWjVlSRUAm+RZdDFK
SiW9RuMfCkIt62GbjLkBMF+jewxQeSSR5ikjijNa1+DRmDr868gktV0hDdPNL+jV
/4aXdEibGRsZuAyEwDliV4x4D7NbVIuu220dIhng95QBAJ4fBa90OGTjSEd/AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUBcC7GZ+/0oElB76G6ydjFzEZ1OIwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzNDY2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGNP
MA0GCSqGSIb3DQEBCwUAA4IBAQAqiq7BJk1JqpDuNQ/Ne0/UfdUFwkVD459B7UO1
3+uHz+MvTmf1hSY7+jSZYZlnUZdeDeRzMG/R1skMesUmgzoDmyi118uqm/51mXnE
nVgf3nIa9s2Xblkm5q0HRBwSqgcP6BXiZUh+bzh3C6UkxADwFO1FbUp7kGgaCEJl
w3E71d2e/pzLSEI4bfzxX/Y+wStB6ct290CpMRhlVlbF4pB77lUHIBeG/kKvG1nN
6mUMvk3c/9US2FGqBnJAmyjcicpD7e6FHqgeuiUzHfMBKrfB5XcpI6+h4GJqRnZT
tprYoLhiEm/u0ol6q8o/o4jp2HAcyED7yqXIHm+E+19jAgh7
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:24 2025 by rpki-client