Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 40iPt5KczfHK2qXw29MuQ3qkfgACrKrwq8ITXCLtdEo=
Subject key identifier: EA:80:DD:BC:BE:A9:04:A0:58:85:D8:ED:4E:56:6B:C2:D1:31:C6:C4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4BFBB4F0215DB18EBCD28B9B5EAC1E32A108DE68
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337363a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:36:02 +0000
ROA not before: Fri 23 May 2025 20:31:02 +0000
ROA not after: Fri 22 May 2026 20:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6376::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 02:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:fb:b4:f0:21:5d:b1:8e:bc:d2:8b:9b:5e:ac:1e:32:a1:08:de:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:31:02 2025 GMT
Not After : May 22 20:36:02 2026 GMT
Subject: CN=EA80DDBCBEA904A05885D8ED4E566BC2D131C6C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:e1:1a:e4:5b:f2:f9:7b:5c:4d:ef:11:41:
39:eb:39:42:e6:3d:a0:09:92:ba:8e:75:f4:0a:52:
ff:b7:64:13:27:9c:b6:8d:3b:16:c2:bd:51:e4:4f:
a6:52:57:f9:df:51:5b:9b:5d:ac:c8:1a:77:5e:a0:
b9:47:63:64:9e:18:5a:81:bd:3e:4d:29:ab:88:87:
1b:66:02:c9:a5:4f:ed:6d:2d:73:57:95:25:e8:ae:
2c:97:ea:b0:8b:c3:d2:b2:5e:0d:b3:9e:f8:7a:f3:
68:87:d0:ed:46:ee:80:a6:1d:9a:a4:41:d7:f1:33:
b5:7b:3f:8c:f2:f5:20:ad:33:70:9b:a6:ba:18:09:
f2:54:f6:be:26:73:af:bf:bf:fb:43:8c:16:c1:e5:
38:91:08:fa:0a:a5:d5:61:29:a2:75:f8:70:3a:cc:
f5:68:ae:5f:6c:41:51:d7:6e:3c:43:dd:24:17:6e:
81:df:75:eb:48:d0:3f:b3:0a:42:24:78:ee:d6:46:
a4:ef:09:05:bf:12:53:df:61:6f:4a:a5:bb:5a:22:
d1:81:2c:70:33:18:52:8d:a5:52:43:6b:ce:33:90:
ff:fe:6a:80:f7:c8:6b:80:d6:a5:99:c0:17:83:19:
3a:e5:b7:20:18:5c:fd:e6:97:9e:b9:62:66:ad:47:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:DD:BC:BE:A9:04:A0:58:85:D8:ED:4E:56:6B:C2:D1:31:C6:C4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6376::/48
Signature Algorithm: sha256WithRSAEncryption
0c:de:40:ec:de:a0:69:11:2f:29:6c:39:40:c5:0a:ad:f3:d3:
7d:31:d5:16:5d:20:53:a8:a5:ec:7e:ca:3d:15:40:bd:a5:90:
a2:55:f8:64:8b:d3:bd:87:99:0f:e5:27:9f:16:9e:09:22:65:
f4:9a:14:33:26:5d:1c:96:cb:a4:06:2c:b5:29:62:9d:b4:f0:
75:88:59:5d:74:1d:98:ee:f8:66:16:62:e4:be:41:56:1f:01:
21:2c:d9:10:7b:e2:ec:6a:43:85:29:ae:2b:22:b6:7f:9b:4c:
90:37:39:f1:fc:b8:77:10:8f:dc:62:77:86:50:e7:eb:7b:a2:
7a:e6:2c:83:dc:44:44:a0:90:c2:3f:38:04:50:6d:09:a1:48:
2a:55:fe:7d:e5:e5:15:7a:28:e0:ea:c0:17:3c:ee:29:17:db:
70:c9:7e:4b:39:31:4a:aa:40:b6:9b:2d:4f:1f:a6:21:9c:d1:
7e:cc:aa:ef:50:41:9a:a2:63:ba:f2:47:a1:83:ad:13:14:6b:
d9:df:4d:f2:c1:87:a6:42:45:27:17:17:24:54:77:8d:17:c9:
27:ae:53:ec:9c:9c:97:ab:1b:de:a4:92:4d:00:7e:d6:e1:7a:
8b:ff:90:33:d0:05:ac:6d:56:bd:63:4e:e4:2d:ee:2e:f8:6a:
f8:34:c4:bc
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUS/u08CFdsY680oubXqweMqEI3mgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjMyMDMxMDJaFw0yNjA1MjIyMDM2MDJaMDMxMTAvBgNV
BAMTKEVBODBEREJDQkVBOTA0QTA1ODg1RDhFRDRFNTY2QkMyRDEzMUM2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYG+Ea5Fvy+XtcTe8RQTnrOULm
PaAJkrqOdfQKUv+3ZBMnnLaNOxbCvVHkT6ZSV/nfUVubXazIGndeoLlHY2SeGFqB
vT5NKauIhxtmAsmlT+1tLXNXlSXoriyX6rCLw9KyXg2znvh682iH0O1G7oCmHZqk
QdfxM7V7P4zy9SCtM3CbproYCfJU9r4mc6+/v/tDjBbB5TiRCPoKpdVhKaJ1+HA6
zPVorl9sQVHXbjxD3SQXboHfdetI0D+zCkIkeO7WRqTvCQW/ElPfYW9KpbtaItGB
LHAzGFKNpVJDa84zkP/+aoD3yGuA1qWZwBeDGTrltyAYXP3ml565YmatRzqNAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU6oDdvL6pBKBYhdjtTlZrwtExxsQwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzNzM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjdjAN
BgkqhkiG9w0BAQsFAAOCAQEADN5A7N6gaREvKWw5QMUKrfPTfTHVFl0gU6il7H7K
PRVAvaWQolX4ZIvTvYeZD+UnnxaeCSJl9JoUMyZdHJbLpAYstSlinbTwdYhZXXQd
mO74ZhZi5L5BVh8BISzZEHvi7GpDhSmuKyK2f5tMkDc58fy4dxCP3GJ3hlDn63ui
euYsg9xERKCQwj84BFBtCaFIKlX+feXlFXoo4OrAFzzuKRfbcMl+SzkxSqpAtpst
Tx+mIZzRfsyq71BBmqJjuvJHoYOtExRr2d9N8sGHpkJFJxcXJFR3jRfJJ65T7Jyc
l6sb3qSSTQB+1uF6i/+QM9AFrG1WvWNO5C3uLvhq+DTEvA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:14:33 2025 by rpki-client