Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363865303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: E7jA+JNAtacoBh83mTgouLQh4WmFK0XmA06pGzAn9oY=
Subject key identifier: 0E:6F:C9:B2:CA:15:C7:D4:7A:51:53:D5:AB:3E:7E:30:8D:48:8B:19
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 06882D573A83EBA6BB65574E5A3408D2F5B37D1A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:27:19 +0000
ROA not before: Fri 24 Jan 2025 11:22:19 +0000
ROA not after: Fri 23 Jan 2026 11:27:19 +0000
asID: 16909
IP address blocks: 2a14:7584:68e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:88:2d:57:3a:83:eb:a6:bb:65:57:4e:5a:34:08:d2:f5:b3:7d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:22:19 2025 GMT
Not After : Jan 23 11:27:19 2026 GMT
Subject: CN=0E6FC9B2CA15C7D47A5153D5AB3E7E308D488B19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:7c:5b:38:0f:02:48:8f:75:ff:16:51:6c:
18:d4:f3:52:eb:aa:c7:ec:35:13:6a:06:60:8c:b8:
9c:ce:ee:2e:0f:36:8b:ee:26:61:0d:b5:43:61:77:
eb:d1:3e:7c:ff:61:7d:23:95:74:e1:ee:46:9c:69:
ec:42:b0:e3:69:5d:b4:db:3c:d5:88:ed:20:75:56:
da:d1:47:19:3c:71:d1:14:c2:73:bd:06:44:8f:2e:
74:2d:71:7e:5a:ab:1b:e9:3d:49:7a:5f:87:b0:95:
16:b4:e5:ea:2c:e2:15:7e:f1:c4:27:9f:ba:3c:a6:
65:de:5d:7b:15:df:3e:6f:d5:7a:f6:8f:83:40:3c:
f3:1b:fb:3b:62:d4:d5:5f:1d:85:c1:4d:ce:80:ca:
41:20:1d:94:1e:50:65:9f:3d:bc:71:85:08:19:60:
0c:af:ac:9f:ca:10:9b:36:58:fb:82:51:df:5f:1b:
1e:a1:b3:81:ce:a2:9b:85:fd:9a:e5:6e:e0:28:a9:
a5:d4:4a:cb:1d:e6:37:7c:e0:20:13:ad:67:1e:2b:
0f:19:62:e0:76:0a:1e:35:c3:1d:7a:4e:29:ae:60:
3b:e1:24:5b:1f:1e:ef:f2:1e:b6:11:96:2e:0d:41:
3c:af:79:32:61:b6:d0:ed:c0:fb:dc:e2:28:42:ef:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:C9:B2:CA:15:C7:D4:7A:51:53:D5:AB:3E:7E:30:8D:48:8B:19
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68e0::/48
Signature Algorithm: sha256WithRSAEncryption
2e:12:01:8e:c9:29:e1:2b:1c:fa:d2:e1:87:67:87:ba:f9:33:
d6:df:8a:c1:cf:36:26:14:b6:d6:32:1e:00:a0:e6:d9:23:ca:
d0:31:a9:ad:6b:eb:2e:c2:66:7c:0f:ad:e2:eb:5d:ea:cb:5e:
dc:b1:6e:10:b0:9b:4c:4e:9b:33:5f:f5:ef:cf:5d:f9:8b:f3:
d1:73:83:c4:ff:50:49:e5:07:ba:55:02:7e:43:20:98:2c:8d:
66:86:54:89:4a:cd:8b:83:16:eb:44:f8:bb:f4:01:32:e4:d6:
1c:35:e9:87:cc:73:ec:06:ad:cd:15:d1:35:b3:cc:42:0e:8a:
0c:b8:6c:67:df:ad:e0:32:5e:e6:f5:1b:86:bb:84:46:b8:7f:
6b:f3:98:aa:6f:45:d3:c2:d2:76:31:bc:71:88:ad:4b:54:12:
8e:a1:ac:7d:9b:02:b3:bc:25:d6:0a:ca:12:11:2f:f0:3d:77:
48:45:1e:83:b3:0d:36:be:38:6e:c6:3f:d2:6f:14:a5:a8:ba:
ad:3f:7d:1c:bd:2f:b8:34:ea:f2:d3:05:c7:25:50:81:a9:b9:
38:e2:8b:cc:95:de:08:2a:ab:d9:42:5e:b4:61:47:7f:9f:47:
bb:84:60:49:0e:45:ae:54:36:96:c9:92:f6:d6:f3:76:78:b2:
35:3e:40:83
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUBogtVzqD66a7ZVdOWjQI0vWzfRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMjQxMTIyMTlaFw0yNjAxMjMxMTI3MTlaMDMxMTAvBgNV
BAMTKDBFNkZDOUIyQ0ExNUM3RDQ3QTUxNTNENUFCM0U3RTMwOEQ0ODhCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjr3xbOA8CSI91/xZRbBjU81Lr
qsfsNRNqBmCMuJzO7i4PNovuJmENtUNhd+vRPnz/YX0jlXTh7kacaexCsONpXbTb
PNWI7SB1VtrRRxk8cdEUwnO9BkSPLnQtcX5aqxvpPUl6X4ewlRa05eos4hV+8cQn
n7o8pmXeXXsV3z5v1Xr2j4NAPPMb+zti1NVfHYXBTc6AykEgHZQeUGWfPbxxhQgZ
YAyvrJ/KEJs2WPuCUd9fGx6hs4HOopuF/ZrlbuAoqaXUSssd5jd84CATrWceKw8Z
YuB2Ch41wx16TimuYDvhJFsfHu/yHrYRli4NQTyveTJhttDtwPvc4ihC726HAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUDm/JssoVx9R6UVPVqz5+MI1IixkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2Mzg2NTMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRo4DAN
BgkqhkiG9w0BAQsFAAOCAQEALhIBjskp4Ssc+tLhh2eHuvkz1t+Kwc82JhS21jIe
AKDm2SPK0DGprWvrLsJmfA+t4utd6ste3LFuELCbTE6bM1/1789d+Yvz0XODxP9Q
SeUHulUCfkMgmCyNZoZUiUrNi4MW60T4u/QBMuTWHDXph8xz7AatzRXRNbPMQg6K
DLhsZ9+t4DJe5vUbhruERrh/a/OYqm9F08LSdjG8cYitS1QSjqGsfZsCs7wl1grK
EhEv8D13SEUeg7MNNr44bsY/0m8Upai6rT99HL0vuDTq8tMFxyVQgam5OOKLzJXe
CCqr2UJetGFHf59Hu4RgSQ5FrlQ2lsmS9tbzdniyNT5Agw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:24 2025 by rpki-client