Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731333a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363731333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 1NnZBDZNP+TEhTI5PIkShlTeEP4jh9MbwBva8VYhC4o=
Subject key identifier: C5:7D:0F:0E:65:B6:82:A0:38:E3:FB:94:FB:1A:54:B5:C7:44:94:4D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 191A4C67967688F803CFB97CC12E868A258CA3AD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731333a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 28 May 2025 00:42:01 +0000
ROA not before: Wed 28 May 2025 00:37:01 +0000
ROA not after: Wed 27 May 2026 00:42:01 +0000
asID: 401507
IP address blocks: 2a14:7584:6713::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1a:4c:67:96:76:88:f8:03:cf:b9:7c:c1:2e:86:8a:25:8c:a3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 00:37:01 2025 GMT
Not After : May 27 00:42:01 2026 GMT
Subject: CN=C57D0F0E65B682A038E3FB94FB1A54B5C744944D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:cd:b9:46:0f:3d:ef:94:fb:48:7b:22:9d:
be:b8:41:eb:ba:a5:da:d9:11:c6:67:e8:9c:ec:f1:
59:2a:5f:d3:2a:5c:5e:5d:e9:45:01:02:aa:c2:d9:
a6:9a:e3:13:d1:c2:02:9c:dd:e5:bd:a1:b7:47:e4:
a0:44:d7:f1:36:0e:2a:0d:04:fa:71:3f:59:29:db:
0e:8a:6a:ec:a8:f8:d1:e6:0a:e5:14:7f:ec:dd:e4:
8e:33:a2:47:7b:67:1d:12:1d:30:57:55:52:e4:e2:
21:6e:0e:3b:d2:36:a2:e9:51:de:6b:74:9f:10:80:
6b:49:d3:7e:1a:79:7c:6a:30:e4:e8:ee:a6:6b:25:
e2:54:76:33:1a:ec:08:a1:a3:be:0d:c7:49:10:d6:
a0:f0:b0:4e:5b:e1:bc:9c:cb:f0:bc:ca:47:c0:d7:
2d:d6:9a:4f:44:98:a8:e9:84:74:2b:f7:b1:b2:1e:
a8:2c:81:b5:aa:c5:e6:ac:d1:b5:6f:40:36:1d:d3:
14:5f:d6:95:5b:b6:f2:b7:62:ab:9e:41:98:fd:d8:
16:d1:96:71:a1:1a:c5:01:7f:1c:f2:00:8f:86:85:
ed:6d:e8:ac:38:e2:7a:49:6d:87:1b:c1:85:6b:8a:
b5:43:f6:48:56:b9:2a:80:21:89:a2:80:7b:e4:e9:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7D:0F:0E:65:B6:82:A0:38:E3:FB:94:FB:1A:54:B5:C7:44:94:4D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731333a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6713::/48
Signature Algorithm: sha256WithRSAEncryption
ad:17:e2:2d:fd:9e:5d:10:28:4a:e6:0f:0d:7a:40:64:b8:da:
53:81:43:42:77:1e:5c:e6:8c:ee:d4:69:4c:1d:e6:ed:d9:3a:
e8:ce:d3:50:a7:47:c9:ff:20:a3:10:bb:d4:ba:48:28:c4:a1:
b0:4c:e6:dd:02:03:27:dc:2c:c0:af:f3:a0:db:82:18:8b:3b:
8e:70:f7:0a:ee:06:56:a8:83:d6:62:a9:a6:f6:ec:90:cb:1d:
b9:9e:00:27:de:bb:ad:8b:6f:57:bd:68:d4:11:14:c0:bc:11:
06:ea:b3:f8:4b:0a:2c:a9:c2:b5:87:b0:3a:e3:f2:f9:24:2c:
d4:4f:4f:3f:10:be:41:99:09:4e:84:16:b6:4f:37:42:48:6d:
f2:f8:d6:a5:b3:7f:0f:70:33:53:87:6e:9a:36:3a:66:a2:0c:
e0:17:88:22:c2:98:f3:a4:a6:03:31:31:18:66:1e:2f:be:05:
8b:a5:41:62:4f:66:a5:a3:1f:58:e3:9a:fc:d0:ca:17:7c:34:
85:7e:81:d1:73:a7:10:22:f5:82:4b:0d:a6:e2:80:87:59:ff:
a4:81:2c:ac:e8:6c:41:33:b5:79:0f:6b:60:80:23:d4:0f:19:
0c:fb:00:d1:61:e7:fd:3a:98:7e:5e:b7:47:c0:6f:46:e9:f6:
d2:3e:18:8d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGRpMZ5Z2iPgDz7l8wS6GiiWMo60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjgwMDM3MDFaFw0yNjA1MjcwMDQyMDFaMDMxMTAvBgNV
BAMTKEM1N0QwRjBFNjVCNjgyQTAzOEUzRkI5NEZCMUE1NEI1Qzc0NDk0NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2825Rg8975T7SHsinb64Qeu6
pdrZEcZn6Jzs8VkqX9MqXF5d6UUBAqrC2aaa4xPRwgKc3eW9obdH5KBE1/E2DioN
BPpxP1kp2w6Kauyo+NHmCuUUf+zd5I4zokd7Zx0SHTBXVVLk4iFuDjvSNqLpUd5r
dJ8QgGtJ034aeXxqMOTo7qZrJeJUdjMa7Aiho74Nx0kQ1qDwsE5b4bycy/C8ykfA
1y3Wmk9EmKjphHQr97GyHqgsgbWqxeas0bVvQDYd0xRf1pVbtvK3YqueQZj92BbR
lnGhGsUBfxzyAI+Ghe1t6Kw44npJbYcbwYVrirVD9khWuSqAIYmigHvk6R+JAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUxX0PDmW2gqA44/uU+xpUtcdElE0wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzczMTMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGcT
MA0GCSqGSIb3DQEBCwUAA4IBAQCtF+It/Z5dEChK5g8NekBkuNpTgUNCdx5c5ozu
1GlMHebt2TroztNQp0fJ/yCjELvUukgoxKGwTObdAgMn3CzAr/Og24IYizuOcPcK
7gZWqIPWYqmm9uyQyx25ngAn3ruti29XvWjUERTAvBEG6rP4SwosqcK1h7A64/L5
JCzUT08/EL5BmQlOhBa2TzdCSG3y+Nals38PcDNTh26aNjpmogzgF4giwpjzpKYD
MTEYZh4vvgWLpUFiT2alox9Y45r80MoXfDSFfoHRc6cQIvWCSw2m4oCHWf+kgSys
6GxBM7V5D2tggCPUDxkM+wDRYef9Oph+XrdHwG9G6fbSPhiN
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:09:48 2025 by rpki-client