Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363832303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363832303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: TWST8LFZ4DUOL45Zd8qC2metXG1eUUUAvkLvMZEGmWs=
Subject key identifier: B3:94:1A:88:E1:DE:5A:98:F1:11:04:35:66:3D:3F:12:4A:14:11:07
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3DD083FE96FA46B7D5F7029C6772508FD8A33F1C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363832303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 22 Jan 2025 12:27:07 +0000
ROA not before: Wed 22 Jan 2025 12:22:07 +0000
ROA not after: Wed 21 Jan 2026 12:27:07 +0000
asID: 16909
IP address blocks: 2a14:7584:6820::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d0:83:fe:96:fa:46:b7:d5:f7:02:9c:67:72:50:8f:d8:a3:3f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 22 12:22:07 2025 GMT
Not After : Jan 21 12:27:07 2026 GMT
Subject: CN=B3941A88E1DE5A98F1110435663D3F124A141107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:56:8b:d3:80:c1:a2:b7:fc:95:af:8a:17:
07:6a:71:41:f9:e2:de:1b:ec:89:99:5c:d2:1f:32:
15:a3:c3:14:83:3f:10:5c:f2:fe:99:21:ff:09:91:
8c:81:3f:91:4f:65:f0:33:0c:a1:c4:ae:47:59:08:
d9:47:26:41:83:b1:1c:db:6a:a2:cd:0c:89:82:e3:
16:cc:e9:88:b2:3b:70:be:f4:35:e0:69:ab:06:41:
ca:39:bc:ec:76:42:fe:5e:cf:fa:6f:3d:d9:f1:52:
ff:23:6f:cc:bd:47:00:87:e4:8b:b5:b4:db:f3:43:
de:47:9a:a8:e5:d5:52:39:21:78:60:8f:77:83:77:
a9:78:bf:a0:1d:4d:9f:b4:fc:7f:88:48:fe:d3:03:
d6:f7:8b:d1:d2:71:37:dd:69:81:fb:fe:5e:eb:8d:
74:ea:1f:7a:6b:9a:83:3c:57:96:05:94:26:33:97:
20:83:c5:60:b4:d9:59:5f:76:40:59:1c:e3:ca:48:
0e:d6:9b:5e:de:9c:8c:58:d8:1f:b5:c4:65:eb:24:
a8:e8:ea:3d:c1:2d:15:fa:6d:92:ef:ff:38:8a:5d:
42:1b:64:2f:21:a9:39:a0:d1:b8:28:a5:65:60:9f:
35:b4:38:5d:9d:f7:04:24:77:df:b5:83:7a:6e:ea:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:1A:88:E1:DE:5A:98:F1:11:04:35:66:3D:3F:12:4A:14:11:07
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363832303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6820::/48
Signature Algorithm: sha256WithRSAEncryption
55:1c:f3:a4:5c:cf:27:6a:93:e4:92:95:e2:60:08:74:7c:17:
73:91:a5:4a:57:74:45:0d:46:5a:57:31:cd:a4:14:d3:0c:e5:
1d:1f:86:85:30:a6:c2:51:59:df:dd:73:bb:41:39:b9:16:84:
ce:87:8d:82:45:3b:6f:ee:00:2f:58:09:2f:a6:9c:63:ca:35:
79:7c:2e:39:d1:53:71:f8:ef:a4:bd:40:15:2e:bf:19:df:61:
37:61:d9:cf:3f:29:67:39:41:a0:7d:b0:f1:66:87:b2:4e:d7:
2a:fb:e9:8a:19:88:d1:be:d9:a3:34:8a:ed:76:e5:03:3e:ac:
f1:5a:52:9f:25:4b:72:89:bb:f7:e1:6b:ed:a4:2b:b3:04:09:
46:1a:69:7c:88:eb:77:cb:92:37:d0:53:84:0a:ab:67:8d:9c:
cb:5d:1c:01:6c:8d:d7:47:73:a6:7c:86:1d:d9:c2:48:0f:35:
3e:19:aa:f3:68:db:f6:2f:c4:8e:72:90:b0:00:e2:0d:a6:1e:
88:22:ec:71:8c:7c:d0:a8:28:79:e0:05:82:10:dc:f9:88:64:
3a:64:0e:d5:86:99:bd:90:50:5e:ae:77:3c:2a:ba:57:4c:0b:
5b:ad:2b:4d:76:ac:21:89:4b:a7:7a:10:9d:d6:ab:27:16:de:
fc:c6:75:cd
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPdCD/pb6RrfV9wKcZ3JQj9ijPxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMjIxMjIyMDdaFw0yNjAxMjExMjI3MDdaMDMxMTAvBgNV
BAMTKEIzOTQxQTg4RTFERTVBOThGMTExMDQzNTY2M0QzRjEyNEExNDExMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3T1aL04DBorf8la+KFwdqcUH5
4t4b7ImZXNIfMhWjwxSDPxBc8v6ZIf8JkYyBP5FPZfAzDKHErkdZCNlHJkGDsRzb
aqLNDImC4xbM6YiyO3C+9DXgaasGQco5vOx2Qv5ez/pvPdnxUv8jb8y9RwCH5Iu1
tNvzQ95Hmqjl1VI5IXhgj3eDd6l4v6AdTZ+0/H+ISP7TA9b3i9HScTfdaYH7/l7r
jXTqH3prmoM8V5YFlCYzlyCDxWC02VlfdkBZHOPKSA7Wm17enIxY2B+1xGXrJKjo
6j3BLRX6bZLv/ziKXUIbZC8hqTmg0bgopWVgnzW0OF2d9wQkd9+1g3pu6sCJAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUs5QaiOHeWpjxEQQ1Zj0/EkoUEQcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzgzMjMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRoIDAN
BgkqhkiG9w0BAQsFAAOCAQEAVRzzpFzPJ2qT5JKV4mAIdHwXc5GlSld0RQ1GWlcx
zaQU0wzlHR+GhTCmwlFZ391zu0E5uRaEzoeNgkU7b+4AL1gJL6acY8o1eXwuOdFT
cfjvpL1AFS6/Gd9hN2HZzz8pZzlBoH2w8WaHsk7XKvvpihmI0b7ZozSK7XblAz6s
8VpSnyVLcom79+Fr7aQrswQJRhppfIjrd8uSN9BThAqrZ42cy10cAWyN10dzpnyG
HdnCSA81Phmq82jb9i/EjnKQsADiDaYeiCLscYx80KgoeeAFghDc+YhkOmQO1YaZ
vZBQXq53PCq6V0wLW60rTXasIYlLp3oQndarJxbe/MZ1zQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:30 2025 by rpki-client