Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: jt46SAtvvUzNMFB46TukGGCXsjDG99BK7PTPySs1GY0=
Subject key identifier: 39:A1:A7:6C:A9:44:92:E6:5E:EC:CC:1C:BC:76:1A:E9:68:28:BA:43
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 21DE192D1E83FDA960B61D1A62C6968931094712
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336363a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 08:00:02 +0000
ROA not before: Fri 23 May 2025 07:55:02 +0000
ROA not after: Fri 22 May 2026 08:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6366::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 03:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:de:19:2d:1e:83:fd:a9:60:b6:1d:1a:62:c6:96:89:31:09:47:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 07:55:02 2025 GMT
Not After : May 22 08:00:02 2026 GMT
Subject: CN=39A1A76CA94492E65EECCC1CBC761AE96828BA43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:b0:71:da:26:62:89:2f:67:0c:3c:c9:76:
f5:6d:76:89:81:c4:06:33:7e:96:3d:4f:1f:1d:73:
1b:c8:4f:1f:1b:46:64:ee:8a:fd:9f:e8:08:10:1f:
a6:7c:16:0d:27:e0:32:36:dd:87:0e:65:9b:a4:37:
f7:ba:5d:05:38:3b:8e:80:c5:e7:35:7e:43:08:68:
cd:e7:2f:4f:bf:29:07:df:d3:4a:c8:b5:a3:59:5c:
ec:8f:98:2c:a3:01:bb:db:f3:2b:0b:db:a3:48:d5:
5d:b0:af:e7:dd:f8:a4:f4:f6:a5:14:9b:4b:6a:d8:
16:21:6d:15:e4:fb:62:c1:da:0e:c3:d8:bd:33:ed:
d8:52:ae:2f:d2:4e:96:2d:65:4f:49:f9:97:cf:2e:
89:a2:e7:7a:2a:7e:f1:7e:b6:93:67:eb:a6:6e:55:
e0:3c:4b:86:7d:7c:8e:1a:f6:5e:8a:e6:21:a6:a0:
02:04:16:71:3e:82:04:5b:6d:42:a8:8b:09:08:99:
92:87:16:56:49:72:d0:b0:44:12:9a:cf:a7:fe:b1:
1e:f3:07:8b:ea:bb:48:8e:eb:0b:b1:a2:42:81:82:
fb:fc:6f:bc:6c:c9:ec:27:f0:67:15:a0:f1:cc:15:
b8:4d:3d:28:60:f2:de:48:45:03:ec:b0:70:3c:ed:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:A7:6C:A9:44:92:E6:5E:EC:CC:1C:BC:76:1A:E9:68:28:BA:43
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6366::/48
Signature Algorithm: sha256WithRSAEncryption
49:a3:35:0b:29:ba:95:1c:19:8f:03:a9:e8:89:b7:fa:69:45:
78:b1:da:0b:d6:2a:a9:8d:ab:0d:69:18:2c:f1:42:a4:dc:80:
f6:e4:65:68:f5:d8:95:fe:dd:cd:bb:de:18:fa:a2:15:b5:c0:
e1:4d:c5:be:dd:21:eb:23:2b:fa:40:39:d3:5d:db:b3:cc:5b:
92:a6:c5:35:a7:d3:24:99:74:03:95:a5:b3:ce:b1:fe:a0:f2:
9c:8b:bb:59:48:8f:13:bd:b5:14:0e:79:2b:05:a2:04:89:cc:
91:71:61:40:38:c9:f4:2c:a0:7e:87:ab:6c:f5:0f:d5:ae:ba:
8c:b1:10:3d:fe:14:81:d7:0c:62:c1:f9:e1:43:75:f4:d5:5e:
0d:2e:7b:f6:67:0d:f7:80:15:6e:dd:02:cc:dd:77:f2:64:1c:
af:b6:f3:53:31:d5:d2:00:c7:f2:16:c8:37:fa:4a:0d:98:a1:
67:c2:0e:7f:84:63:5a:cc:db:81:90:ae:74:56:ec:3d:fc:43:
f3:c8:c1:0b:78:0c:2b:68:2c:59:7d:c2:2f:03:82:1c:af:9f:
0a:1a:97:9c:9e:ad:ba:01:b3:ec:dd:02:55:67:dd:c7:ed:8d:
2b:da:d2:67:53:7c:cc:77:73:3b:d8:13:47:57:81:36:0e:61:
79:c1:b4:f3
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUId4ZLR6D/algth0aYsaWiTEJRxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjMwNzU1MDJaFw0yNjA1MjIwODAwMDJaMDMxMTAvBgNV
BAMTKDM5QTFBNzZDQTk0NDkyRTY1RUVDQ0MxQ0JDNzYxQUU5NjgyOEJBNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnmbBx2iZiiS9nDDzJdvVtdomB
xAYzfpY9Tx8dcxvITx8bRmTuiv2f6AgQH6Z8Fg0n4DI23YcOZZukN/e6XQU4O46A
xec1fkMIaM3nL0+/KQff00rItaNZXOyPmCyjAbvb8ysL26NI1V2wr+fd+KT09qUU
m0tq2BYhbRXk+2LB2g7D2L0z7dhSri/STpYtZU9J+ZfPLomi53oqfvF+tpNn66Zu
VeA8S4Z9fI4a9l6K5iGmoAIEFnE+ggRbbUKoiwkImZKHFlZJctCwRBKaz6f+sR7z
B4vqu0iO6wuxokKBgvv8b7xsyewn8GcVoPHMFbhNPShg8t5IRQPssHA87YF7AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUOaGnbKlEkuZe7MwcvHYa6WgoukMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzNjM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjZjAN
BgkqhkiG9w0BAQsFAAOCAQEASaM1Cym6lRwZjwOp6Im3+mlFeLHaC9YqqY2rDWkY
LPFCpNyA9uRlaPXYlf7dzbveGPqiFbXA4U3Fvt0h6yMr+kA5013bs8xbkqbFNafT
JJl0A5Wls86x/qDynIu7WUiPE721FA55KwWiBInMkXFhQDjJ9CygfoerbPUP1a66
jLEQPf4UgdcMYsH54UN19NVeDS579mcN94AVbt0CzN138mQcr7bzUzHV0gDH8hbI
N/pKDZihZ8IOf4RjWszbgZCudFbsPfxD88jBC3gMK2gsWX3CLwOCHK+fChqXnJ6t
ugGz7N0CVWfdx+2NK9rSZ1N8zHdzO9gTR1eBNg5hecG08w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:29 2025 by rpki-client