Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335343a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363335343a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: +Ush5h6UCsjagZJUaNFUQeRUsr3TnBVR6y56xIJQbB8=
Subject key identifier: A9:42:5E:82:A1:3C:D3:DA:34:55:F3:F5:E1:10:50:DB:D3:38:06:4F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 695467DB51C39E49348CE60E169A35C3D850B4F8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335343a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 22 May 2025 16:54:02 +0000
ROA not before: Thu 22 May 2025 16:49:02 +0000
ROA not after: Thu 21 May 2026 16:54:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6354::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:54:67:db:51:c3:9e:49:34:8c:e6:0e:16:9a:35:c3:d8:50:b4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:49:02 2025 GMT
Not After : May 21 16:54:02 2026 GMT
Subject: CN=A9425E82A13CD3DA3455F3F5E11050DBD338064F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:9a:9b:3b:17:fe:9d:5f:0f:6b:64:bd:66:
45:94:78:9d:85:19:d0:50:36:a5:0a:da:87:5e:53:
2a:13:0c:fc:0d:c0:28:54:bb:3c:6f:04:37:f0:27:
9f:bc:9a:93:f5:32:4f:e0:99:58:3d:b3:20:7c:ef:
f7:8e:5c:82:74:53:d2:77:08:89:3d:7f:ea:95:0e:
5a:ec:03:95:70:26:dc:7b:bf:2a:2d:bf:dd:2d:40:
ea:19:e0:97:19:af:c1:77:e7:8f:1b:8a:fb:e6:e3:
a6:9e:c0:2a:cf:ff:8d:b3:9f:83:6b:dd:d4:c2:2c:
80:ac:c0:52:2c:0d:ac:95:6a:f3:51:84:1c:99:70:
7b:d0:35:02:1b:3b:c6:25:84:99:5f:ad:06:3d:05:
47:6b:5e:56:dc:85:86:dd:d5:0c:cd:9a:4f:22:8a:
4a:f4:3d:d5:29:6a:e5:55:d0:f4:19:86:34:6a:03:
21:3c:8c:c2:cf:62:53:ae:5b:21:ed:6e:83:cf:bd:
70:d7:7b:34:f7:ae:30:ff:a1:56:8a:e1:af:74:60:
3a:db:4a:b2:72:bb:ca:8b:f9:bf:04:71:d1:48:e3:
9e:a0:fb:a1:34:ec:a2:b9:fb:74:cd:01:43:27:16:
51:08:a6:d6:c1:53:a5:04:3b:b9:ea:de:50:5c:95:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:42:5E:82:A1:3C:D3:DA:34:55:F3:F5:E1:10:50:DB:D3:38:06:4F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335343a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6354::/48
Signature Algorithm: sha256WithRSAEncryption
27:3f:cb:32:b3:a7:6f:5e:96:98:63:17:20:8e:fa:db:01:68:
ae:22:82:90:0d:1a:f2:e2:15:75:25:0e:a5:ce:fc:95:56:f0:
c7:29:0a:23:08:67:27:b4:ef:54:bd:08:95:15:70:df:0d:2f:
76:44:a1:23:ce:46:8f:f8:dc:b9:76:2a:25:b5:33:2b:57:f7:
cc:5b:f6:4a:79:42:54:40:3a:c8:95:59:f8:73:56:85:f9:a3:
57:a0:14:7f:8b:ae:b6:b9:ac:d6:20:ff:3a:aa:c8:ea:5f:ef:
77:16:88:da:5f:56:c5:5e:c3:85:ae:5d:d0:27:2a:c3:51:2c:
8b:14:dc:85:0c:2b:cf:79:72:d3:20:96:a1:28:2b:04:01:db:
f4:12:2a:ad:9c:48:99:22:63:ba:75:b3:4a:d3:97:c2:a5:e7:
14:7f:43:2d:bb:02:7f:c0:84:aa:55:c3:9d:51:6a:f6:d0:eb:
26:53:3b:cf:58:90:3d:5d:a8:b2:7d:37:a1:03:61:f4:c1:78:
0c:46:d0:13:8a:79:09:d4:91:d9:81:14:5f:f4:ab:c4:9c:b4:
37:50:c6:31:8e:b7:0a:e6:78:65:17:17:4a:24:2f:b0:56:31:
e8:61:c8:27:04:d1:fa:e3:e7:2c:72:d7:65:a8:d9:ad:39:e1:
5e:31:c7:ce
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaVRn21HDnkk0jOYOFpo1w9hQtPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjIxNjQ5MDJaFw0yNjA1MjExNjU0MDJaMDMxMTAvBgNV
BAMTKEE5NDI1RTgyQTEzQ0QzREEzNDU1RjNGNUUxMTA1MERCRDMzODA2NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY2JqbOxf+nV8Pa2S9ZkWUeJ2F
GdBQNqUK2odeUyoTDPwNwChUuzxvBDfwJ5+8mpP1Mk/gmVg9syB87/eOXIJ0U9J3
CIk9f+qVDlrsA5VwJtx7vyotv90tQOoZ4JcZr8F3548bivvm46aewCrP/42zn4Nr
3dTCLICswFIsDayVavNRhByZcHvQNQIbO8YlhJlfrQY9BUdrXlbchYbd1QzNmk8i
ikr0PdUpauVV0PQZhjRqAyE8jMLPYlOuWyHtboPPvXDXezT3rjD/oVaK4a90YDrb
SrJyu8qL+b8EcdFI456g+6E07KK5+3TNAUMnFlEIptbBU6UEO7nq3lBclQpHAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUqUJegqE809o0VfP14RBQ29M4Bk8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzNTM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGNU
MA0GCSqGSIb3DQEBCwUAA4IBAQAnP8sys6dvXpaYYxcgjvrbAWiuIoKQDRry4hV1
JQ6lzvyVVvDHKQojCGcntO9UvQiVFXDfDS92RKEjzkaP+Ny5dioltTMrV/fMW/ZK
eUJUQDrIlVn4c1aF+aNXoBR/i662uazWIP86qsjqX+93FojaX1bFXsOFrl3QJyrD
USyLFNyFDCvPeXLTIJahKCsEAdv0EiqtnEiZImO6dbNK05fCpecUf0MtuwJ/wISq
VcOdUWr20OsmUzvPWJA9XaiyfTehA2H0wXgMRtATinkJ1JHZgRRf9KvEnLQ3UMYx
jrcK5nhlFxdKJC+wVjHoYcgnBNH64+csctdlqNmtOeFeMcfO
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:40:05 2025 by rpki-client