Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363765633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363765633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ZBuLzVeKK8VJhfd6FYRMNHVgpO3zZLxBKxtcLZVpVbo=
Subject key identifier: 18:DF:04:7D:B3:B4:0C:6D:03:31:67:6A:54:23:08:BA:E2:28:EE:CA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 47AE6D54D135479B52022C88971EFF333FC6437F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363765633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 03:18:01 +0000
ROA not before: Sun 25 May 2025 03:13:01 +0000
ROA not after: Sun 24 May 2026 03:18:01 +0000
asID: 16909
IP address blocks: 2a14:7584:67ec::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 May 2025 17:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ae:6d:54:d1:35:47:9b:52:02:2c:88:97:1e:ff:33:3f:c6:43:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 03:13:01 2025 GMT
Not After : May 24 03:18:01 2026 GMT
Subject: CN=18DF047DB3B40C6D0331676A542308BAE228EECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:bd:8c:12:07:f6:bf:df:15:a2:54:72:e1:
7e:6b:de:b7:ca:81:10:80:c3:7f:b5:01:92:6d:15:
a8:83:f6:49:2d:82:6f:71:56:79:92:9f:0c:2f:b5:
c8:cd:03:17:c3:07:51:da:5f:03:60:d8:ff:b2:70:
bb:0f:25:67:f4:aa:66:7c:60:36:b2:e4:79:f7:f8:
86:90:86:d7:ae:10:99:67:0a:67:18:89:ba:3b:f2:
2d:61:b3:2b:4f:82:7c:4f:64:36:1d:e0:13:90:ee:
f6:ed:64:98:6e:61:44:12:e4:db:03:0e:70:74:8b:
ea:5e:fb:1b:e8:22:38:d0:50:f9:61:f3:aa:12:62:
7d:e4:77:f9:d8:c2:4b:00:b0:c7:a3:f0:2d:7e:56:
b3:1b:ab:86:c9:0f:63:45:4f:dd:85:a0:b8:55:c8:
50:f3:02:cc:25:ab:e0:9d:4b:56:eb:be:a3:e4:2b:
84:32:73:a6:61:30:0f:ea:1c:ec:b6:8f:c0:81:0a:
4a:18:a7:38:41:8f:53:42:e0:d0:61:cc:ef:85:05:
c3:f1:19:7d:12:34:31:24:e0:33:51:e6:95:9b:80:
9d:f7:0a:6e:b8:98:45:0b:c7:5a:37:52:83:55:5a:
4c:b0:b4:9e:a7:d2:be:b8:20:70:1d:64:5f:f3:01:
f4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DF:04:7D:B3:B4:0C:6D:03:31:67:6A:54:23:08:BA:E2:28:EE:CA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363765633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:67ec::/48
Signature Algorithm: sha256WithRSAEncryption
8a:32:6a:2a:2a:d0:98:e7:40:a2:f9:cf:c8:8b:6a:ac:09:b9:
1f:ac:2d:f9:11:48:fc:eb:18:5f:b8:b3:e4:88:f8:b1:60:02:
06:79:d9:29:11:d6:a8:3e:ca:cf:26:0a:4d:f3:96:ff:5f:a7:
bc:ca:96:0e:44:e3:49:18:76:3e:12:b9:c9:b7:fd:52:89:9e:
93:3a:4e:1a:81:b6:61:36:97:dd:8c:b8:c2:f6:a2:b4:6f:0a:
a4:6d:f8:4f:a3:dc:ba:d2:7c:e4:47:58:0a:1b:e7:3c:98:8d:
ae:7f:5d:18:09:ce:e6:52:a4:b0:41:22:59:30:40:c4:7d:c7:
13:68:97:31:04:8f:cc:64:f6:c4:a8:85:ee:cb:73:77:69:99:
29:c7:5a:27:4d:33:80:b9:8b:9e:91:d4:25:10:b0:dc:47:92:
56:d2:f1:25:1d:46:3c:1a:e2:d4:d0:72:0b:54:03:1e:24:e2:
21:8b:43:20:b5:c4:e8:48:e0:59:81:8f:2c:ba:cf:be:60:8f:
b4:c1:46:ac:bc:1b:18:fa:65:e7:5b:3c:36:10:a4:77:5d:01:
d2:a0:55:94:8d:dc:de:38:af:0d:c9:d0:e5:f8:f6:6e:b1:85:
cf:c1:c1:44:bd:38:6c:65:2d:25:5a:4c:8c:36:ae:c7:f2:9e:
3e:20:ad:df
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUR65tVNE1R5tSAiyIlx7/Mz/GQ38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUwMzEzMDFaFw0yNjA1MjQwMzE4MDFaMDMxMTAvBgNV
BAMTKDE4REYwNDdEQjNCNDBDNkQwMzMxNjc2QTU0MjMwOEJBRTIyOEVFQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxI72MEgf2v98VolRy4X5r3rfK
gRCAw3+1AZJtFaiD9kktgm9xVnmSnwwvtcjNAxfDB1HaXwNg2P+ycLsPJWf0qmZ8
YDay5Hn3+IaQhteuEJlnCmcYibo78i1hsytPgnxPZDYd4BOQ7vbtZJhuYUQS5NsD
DnB0i+pe+xvoIjjQUPlh86oSYn3kd/nYwksAsMej8C1+VrMbq4bJD2NFT92FoLhV
yFDzAswlq+CdS1brvqPkK4Qyc6ZhMA/qHOy2j8CBCkoYpzhBj1NC4NBhzO+FBcPx
GX0SNDEk4DNR5pWbgJ33Cm64mEULx1o3UoNVWkywtJ6n0r64IHAdZF/zAfTjAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUGN8EfbO0DG0DMWdqVCMIuuIo7sowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2Mzc2NTYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRn7DAN
BgkqhkiG9w0BAQsFAAOCAQEAijJqKirQmOdAovnPyItqrAm5H6wt+RFI/OsYX7iz
5Ij4sWACBnnZKRHWqD7KzyYKTfOW/1+nvMqWDkTjSRh2PhK5ybf9UomekzpOGoG2
YTaX3Yy4wvaitG8KpG34T6PcutJ85EdYChvnPJiNrn9dGAnO5lKksEEiWTBAxH3H
E2iXMQSPzGT2xKiF7stzd2mZKcdaJ00zgLmLnpHUJRCw3EeSVtLxJR1GPBri1NBy
C1QDHiTiIYtDILXE6EjgWYGPLLrPvmCPtMFGrLwbGPpl51s8NhCkd10B0qBVlI3c
3jivDcnQ5fj2brGFz8HBRL04bGUtJVpMjDaux/KePiCt3w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:24:22 2025 by rpki-client