Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363335613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: YuDzMZuXnHN4URkQMsaM1xOjJRiMCKVcey8m2sPOsrk=
Subject key identifier: EC:41:DE:1A:8D:28:3A:77:36:05:61:12:51:56:87:7C:19:11:4F:A9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 72083104E1008E63BE4ACEEC80E2BA1AF8746146
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335613a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 05:06:02 +0000
ROA not before: Fri 23 May 2025 05:01:02 +0000
ROA not after: Fri 22 May 2026 05:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:635a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 07:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:08:31:04:e1:00:8e:63:be:4a:ce:ec:80:e2:ba:1a:f8:74:61:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 05:01:02 2025 GMT
Not After : May 22 05:06:02 2026 GMT
Subject: CN=EC41DE1A8D283A77360561125156877C19114FA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:bc:a8:0a:e4:ca:0f:8b:c2:3f:ce:cb:bc:
7a:44:25:ba:e1:96:6f:1c:8b:d5:d1:bf:76:6e:dd:
d9:a5:0c:e3:35:45:a7:92:e7:9f:2c:53:1c:4d:f5:
0e:ee:39:c4:75:2e:1a:25:bc:d4:c9:e4:47:54:56:
55:aa:a6:3b:8b:db:66:ab:6e:9a:fe:b1:fd:81:40:
6c:53:79:a1:27:61:a3:12:b5:db:0e:56:20:90:cf:
2f:90:6c:5e:9a:93:20:6f:6f:72:91:be:54:17:09:
4c:0a:ac:33:69:d2:27:64:b3:ee:bc:91:bd:1d:58:
1b:46:6e:28:c1:ad:63:76:8e:37:63:06:e9:bd:95:
c6:0a:44:3f:39:fe:e6:1f:6e:5f:54:c4:8a:8d:f7:
5a:3d:3d:ce:07:1c:22:e8:41:f7:88:16:9b:91:5f:
2c:3b:57:14:f4:d6:53:91:b1:f6:10:00:74:7a:9b:
94:92:ed:12:31:4f:12:2b:9d:15:fd:76:96:29:88:
73:dd:c7:ab:7f:ae:da:8c:0f:20:2d:d7:ba:74:0b:
d8:8f:7b:c1:ab:31:26:8f:22:15:e1:3a:b1:25:2d:
3b:b8:f1:51:15:aa:05:90:2b:f0:5e:b9:9a:49:af:
34:96:76:f0:b5:1c:74:c0:a3:4b:7b:38:2b:fb:84:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:DE:1A:8D:28:3A:77:36:05:61:12:51:56:87:7C:19:11:4F:A9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:635a::/48
Signature Algorithm: sha256WithRSAEncryption
44:72:0f:ed:4e:89:7e:b6:b4:61:30:5a:d0:c4:02:d6:44:0b:
98:4d:15:5a:df:af:47:80:ee:f7:79:be:81:c8:3f:52:68:fb:
1d:bb:8b:65:72:ad:8c:f2:07:94:95:ba:3c:df:43:23:f2:a1:
a3:b8:96:d6:ad:59:f3:d5:c1:c5:b8:87:5c:d6:87:42:a7:4b:
f1:9e:7b:ae:b6:9a:49:b8:92:3f:22:87:4a:66:6a:07:14:3d:
02:3e:81:26:92:4c:61:a7:93:fd:cd:4c:7b:97:a6:cd:3a:e6:
5c:c0:24:75:3a:1c:a5:a5:54:c3:c3:d6:45:1e:f0:e2:43:4d:
b7:3f:e7:83:7d:3e:2c:77:8f:3d:2c:ee:db:fa:4e:27:44:cf:
0c:fc:da:dd:c2:10:89:48:a7:6b:33:65:26:70:d3:d8:e9:1a:
b2:0c:7a:e8:ac:28:8f:f2:e3:84:e5:ad:93:8a:f5:6b:84:5e:
13:32:3f:58:4c:22:c9:3f:d7:16:ca:e9:32:80:31:5e:81:b3:
eb:93:d0:c7:33:d8:2d:f4:e5:28:53:8b:31:07:41:6d:99:9b:
36:28:ce:59:54:b2:c1:97:88:df:87:e4:c5:37:50:8d:c5:ce:
3a:b8:91:22:09:b4:d9:32:c9:32:4f:e2:fb:56:a9:c5:69:1b:
9a:62:ec:05
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUcggxBOEAjmO+Ss7sgOK6Gvh0YUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjMwNTAxMDJaFw0yNjA1MjIwNTA2MDJaMDMxMTAvBgNV
BAMTKEVDNDFERTFBOEQyODNBNzczNjA1NjExMjUxNTY4NzdDMTkxMTRGQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbp7yoCuTKD4vCP87LvHpEJbrh
lm8ci9XRv3Zu3dmlDOM1RaeS558sUxxN9Q7uOcR1LholvNTJ5EdUVlWqpjuL22ar
bpr+sf2BQGxTeaEnYaMStdsOViCQzy+QbF6akyBvb3KRvlQXCUwKrDNp0idks+68
kb0dWBtGbijBrWN2jjdjBum9lcYKRD85/uYfbl9UxIqN91o9Pc4HHCLoQfeIFpuR
Xyw7VxT01lORsfYQAHR6m5SS7RIxTxIrnRX9dpYpiHPdx6t/rtqMDyAt17p0C9iP
e8GrMSaPIhXhOrElLTu48VEVqgWQK/BeuZpJrzSWdvC1HHTAo0t7OCv7hMtZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU7EHeGo0oOnc2BWESUVaHfBkRT6kwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzNTYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjWjAN
BgkqhkiG9w0BAQsFAAOCAQEARHIP7U6Jfra0YTBa0MQC1kQLmE0VWt+vR4Du93m+
gcg/Umj7HbuLZXKtjPIHlJW6PN9DI/Kho7iW1q1Z89XBxbiHXNaHQqdL8Z57rraa
SbiSPyKHSmZqBxQ9Aj6BJpJMYaeT/c1Me5emzTrmXMAkdTocpaVUw8PWRR7w4kNN
tz/ng30+LHePPSzu2/pOJ0TPDPza3cIQiUinazNlJnDT2Okasgx66Kwoj/LjhOWt
k4r1a4ReEzI/WEwiyT/XFsrpMoAxXoGz65PQxzPYLfTlKFOLMQdBbZmbNijOWVSy
wZeI34fkxTdQjcXOOriRIgm02TLJMk/i+1apxWkbmmLsBQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:13 2025 by rpki-client