Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363837303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363837303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: hEPBBVaWjHf026YEvMSghgTLlbf9nBEm13quQsyrIcg=
Subject key identifier: DC:0B:6F:6B:DC:49:37:5A:00:7B:4A:69:D2:E0:8A:4A:D7:2C:3E:EC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6C9D9F40009F9E454B1920A21A62216BC8E0D03D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363837303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 22 Jan 2025 12:27:09 +0000
ROA not before: Wed 22 Jan 2025 12:22:09 +0000
ROA not after: Wed 21 Jan 2026 12:27:09 +0000
asID: 16909
IP address blocks: 2a14:7584:6870::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:9d:9f:40:00:9f:9e:45:4b:19:20:a2:1a:62:21:6b:c8:e0:d0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 22 12:22:09 2025 GMT
Not After : Jan 21 12:27:09 2026 GMT
Subject: CN=DC0B6F6BDC49375A007B4A69D2E08A4AD72C3EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:c9:63:a2:4b:55:29:75:92:2c:e8:32:6c:
9a:49:15:43:74:12:ad:b2:79:e5:86:74:e5:66:3a:
3b:89:f7:da:d2:d6:0d:7e:89:8b:43:74:db:d3:44:
40:35:42:3e:a0:a1:d6:40:c9:c4:3b:a1:4b:bc:71:
d8:81:1a:4c:80:7d:6d:5a:11:b7:fd:c5:53:15:30:
8d:87:4f:6a:4b:aa:65:40:7a:7d:37:a7:66:35:b4:
9d:4e:17:38:ab:40:bc:4c:7a:e9:a8:b9:13:e7:e5:
95:d1:78:af:09:27:fd:9f:e7:69:1e:07:57:4b:c6:
c1:36:ae:80:a7:60:b0:80:77:73:59:7d:08:5f:08:
04:7d:e4:fa:89:ad:5f:bc:7c:51:19:34:aa:c6:9d:
a2:08:e9:0a:59:fa:65:cb:66:51:19:1e:48:0d:40:
c4:0c:43:a9:a4:6c:d0:16:6d:83:5e:07:53:93:6a:
3d:cc:46:f6:38:af:84:fc:61:49:ef:26:6d:d2:be:
0f:cd:11:73:1a:57:b0:03:d9:22:71:7b:f4:fb:bb:
14:f8:3e:27:95:9a:8e:27:28:cd:c7:a9:df:07:2a:
bf:d1:75:ee:be:52:be:35:3a:71:fe:90:31:55:c3:
da:93:24:56:7d:ee:bb:b7:81:bb:e6:6c:0e:7a:98:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0B:6F:6B:DC:49:37:5A:00:7B:4A:69:D2:E0:8A:4A:D7:2C:3E:EC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363837303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6870::/48
Signature Algorithm: sha256WithRSAEncryption
92:01:f3:cc:81:de:25:7c:30:8c:ed:d5:13:05:31:06:62:60:
a3:1a:35:39:85:3b:5b:93:e7:ab:54:1a:5c:c2:f6:0e:d0:8f:
fd:ff:02:a3:bd:b1:05:3c:fa:a3:9f:63:7a:fb:18:d4:84:e5:
d0:28:98:e7:22:3d:57:5a:86:09:4c:52:2e:5f:4a:82:63:55:
6d:27:d5:28:57:17:f6:87:bc:39:47:a2:4d:31:ba:7f:2d:04:
9b:70:a1:3c:5b:3f:d8:a4:6e:a9:15:7b:68:11:26:f0:73:6b:
e9:1b:90:3f:0f:76:4e:d6:c3:81:26:dd:23:d9:00:3a:e0:3d:
3f:76:1b:d5:50:c1:c9:92:9a:9c:64:a1:19:60:02:0b:f0:65:
0a:7b:1d:b7:e0:d8:94:6d:83:7b:25:80:27:bb:03:27:ed:a5:
46:55:cc:ca:ad:5d:f5:13:a8:70:d9:c0:df:ae:a0:06:c0:47:
9c:4a:9c:75:83:49:5a:5f:e7:3c:43:f5:20:db:aa:fe:8d:59:
da:9c:d1:62:28:fd:3a:05:3c:80:72:22:36:64:74:f7:01:09:
da:54:23:ab:42:b6:4f:55:ce:c6:03:78:37:5a:9c:10:9d:dd:
a6:3f:5d:3b:a3:82:0f:c8:72:e2:f3:1c:90:21:2e:12:2d:52:
56:05:4c:9c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUbJ2fQACfnkVLGSCiGmIha8jg0D0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMjIxMjIyMDlaFw0yNjAxMjExMjI3MDlaMDMxMTAvBgNV
BAMTKERDMEI2RjZCREM0OTM3NUEwMDdCNEE2OUQyRTA4QTRBRDcyQzNFRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0MljoktVKXWSLOgybJpJFUN0
Eq2yeeWGdOVmOjuJ99rS1g1+iYtDdNvTREA1Qj6godZAycQ7oUu8cdiBGkyAfW1a
Ebf9xVMVMI2HT2pLqmVAen03p2Y1tJ1OFzirQLxMeumouRPn5ZXReK8JJ/2f52ke
B1dLxsE2roCnYLCAd3NZfQhfCAR95PqJrV+8fFEZNKrGnaII6QpZ+mXLZlEZHkgN
QMQMQ6mkbNAWbYNeB1OTaj3MRvY4r4T8YUnvJm3Svg/NEXMaV7AD2SJxe/T7uxT4
PieVmo4nKM3Hqd8HKr/Rde6+Ur41OnH+kDFVw9qTJFZ97ru3gbvmbA56mBLnAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU3Atva9xJN1oAe0pp0uCKStcsPuwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzgzNzMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRocDAN
BgkqhkiG9w0BAQsFAAOCAQEAkgHzzIHeJXwwjO3VEwUxBmJgoxo1OYU7W5Pnq1Qa
XML2DtCP/f8Co72xBTz6o59jevsY1ITl0CiY5yI9V1qGCUxSLl9KgmNVbSfVKFcX
9oe8OUeiTTG6fy0Em3ChPFs/2KRuqRV7aBEm8HNr6RuQPw92TtbDgSbdI9kAOuA9
P3Yb1VDByZKanGShGWACC/BlCnsdt+DYlG2DeyWAJ7sDJ+2lRlXMyq1d9ROocNnA
366gBsBHnEqcdYNJWl/nPEP1INuq/o1Z2pzRYij9OgU8gHIiNmR09wEJ2lQjq0K2
T1XOxgN4N1qcEJ3dpj9dO6OCD8hy4vMckCEuEi1SVgVMnA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:38 2025 by rpki-client