Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363932643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363932643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mABX7AMdRJHZuM4FcmAh7J7OnuwkHO3mKYw7Ey5bxBI=
Subject key identifier: 94:72:1B:6A:61:7D:0F:00:89:47:41:F0:3C:D0:67:8E:2D:93:9B:25
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 28EE9AF722333DB69E56B681FDF4EC7B348A22F3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363932643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 14:13:46 +0000
ROA not before: Sat 31 May 2025 14:08:46 +0000
ROA not after: Sat 30 May 2026 14:13:46 +0000
asID: 16909
IP address blocks: 2a14:7584:692d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ee:9a:f7:22:33:3d:b6:9e:56:b6:81:fd:f4:ec:7b:34:8a:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 14:08:46 2025 GMT
Not After : May 30 14:13:46 2026 GMT
Subject: CN=94721B6A617D0F00894741F03CD0678E2D939B25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:78:60:8f:15:e6:b2:76:1c:46:ae:36:33:
8a:b5:eb:61:91:7f:41:f6:0c:90:f9:c2:27:ec:4b:
80:0e:31:ca:cd:2d:9b:d4:39:c2:84:60:36:07:1e:
bb:86:1e:18:0d:dc:a4:af:0b:e1:08:7e:e0:1e:b0:
7c:3b:60:ac:64:d6:c7:4c:76:c4:69:ba:b2:b5:f2:
bc:c5:20:49:21:6e:84:ee:31:d5:8f:86:6c:df:4d:
25:bc:d4:ec:02:d0:34:bd:39:df:22:6e:36:c8:48:
c2:6f:51:b0:50:bc:a7:88:b9:d7:42:6a:68:22:08:
54:be:62:c0:db:62:1f:2a:d9:59:68:85:05:eb:39:
9a:ab:c5:19:4c:7b:f3:18:61:d6:a1:7b:1e:fd:ad:
f9:08:e4:16:9f:79:26:dc:61:a8:b1:cc:7e:a4:66:
90:df:72:d3:15:6f:6a:e5:68:79:9d:c0:ff:04:98:
08:b6:18:c9:14:e5:99:62:5d:51:b4:1f:3b:ca:0f:
a4:bb:6b:e1:93:a6:6b:b9:92:f5:5e:9f:b4:c7:9c:
61:f2:87:b4:1d:03:d5:77:ee:71:b5:f5:9a:44:03:
88:27:1c:bf:c5:fa:b8:f1:dd:e8:64:57:76:19:43:
17:2a:24:21:46:5d:e0:29:6c:39:e6:22:06:7c:14:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:72:1B:6A:61:7D:0F:00:89:47:41:F0:3C:D0:67:8E:2D:93:9B:25
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363932643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:692d::/48
Signature Algorithm: sha256WithRSAEncryption
55:3c:90:bc:a7:45:a8:75:bb:8f:6d:a8:45:77:8e:4a:7d:b2:
22:3c:ed:31:a6:c0:ac:60:6d:62:c3:0a:8d:0d:55:8c:40:3c:
47:e0:07:8a:12:d5:90:11:e5:13:b4:54:c6:fc:60:08:c5:4f:
6e:86:65:4a:30:87:4a:db:30:a0:96:df:e4:11:85:3a:50:60:
0c:0d:43:33:e4:bf:c2:c4:d2:1e:0a:0d:79:86:32:2c:8a:5f:
12:9b:e0:15:a1:4b:5a:c1:78:ca:aa:83:bf:6d:9b:e4:5a:df:
1f:19:52:f6:af:10:e8:73:18:b8:50:4a:59:fc:90:8d:ba:2f:
39:ea:ce:25:95:05:a5:d5:98:78:f9:5d:30:0b:94:e6:12:1d:
f1:3d:ff:86:dd:c9:9a:b5:10:85:7d:7c:a1:1d:2c:c8:eb:e7:
af:ca:b6:a7:21:40:f2:b2:00:a6:c6:98:f5:1a:ad:59:9e:75:
d1:f2:12:b7:09:72:63:23:9d:4d:f1:61:2e:14:14:3e:d4:56:
01:31:d2:3c:19:77:20:f8:55:f9:7b:2c:9e:ce:da:53:4b:cb:
71:60:ee:d9:e9:b4:91:b5:fe:e5:09:82:2f:17:7c:d7:24:ac:
21:30:f6:c3:e3:57:c8:8d:20:d6:29:e7:d0:3a:8c:7a:e6:cf:
e1:b4:a4:19
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUKO6a9yIzPbaeVraB/fTsezSKIvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MzExNDA4NDZaFw0yNjA1MzAxNDEzNDZaMDMxMTAvBgNV
BAMTKDk0NzIxQjZBNjE3RDBGMDA4OTQ3NDFGMDNDRDA2NzhFMkQ5MzlCMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWHnhgjxXmsnYcRq42M4q162GR
f0H2DJD5wifsS4AOMcrNLZvUOcKEYDYHHruGHhgN3KSvC+EIfuAesHw7YKxk1sdM
dsRpurK18rzFIEkhboTuMdWPhmzfTSW81OwC0DS9Od8ibjbISMJvUbBQvKeIuddC
amgiCFS+YsDbYh8q2VlohQXrOZqrxRlMe/MYYdahex79rfkI5BafeSbcYaixzH6k
ZpDfctMVb2rlaHmdwP8EmAi2GMkU5ZliXVG0HzvKD6S7a+GTpmu5kvVen7THnGHy
h7QdA9V37nG19ZpEA4gnHL/F+rjx3ehkV3YZQxcqJCFGXeApbDnmIgZ8FHBxAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUlHIbamF9DwCJR0HwPNBnji2TmyUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzkzMjY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRpLTAN
BgkqhkiG9w0BAQsFAAOCAQEAVTyQvKdFqHW7j22oRXeOSn2yIjztMabArGBtYsMK
jQ1VjEA8R+AHihLVkBHlE7RUxvxgCMVPboZlSjCHStswoJbf5BGFOlBgDA1DM+S/
wsTSHgoNeYYyLIpfEpvgFaFLWsF4yqqDv22b5FrfHxlS9q8Q6HMYuFBKWfyQjbov
OerOJZUFpdWYePldMAuU5hId8T3/ht3JmrUQhX18oR0syOvnr8q2pyFA8rIApsaY
9RqtWZ510fIStwlyYyOdTfFhLhQUPtRWATHSPBl3IPhV+Xssns7aU0vLcWDu2em0
kbX+5QmCLxd81ySsITD2w+NXyI0g1inn0DqMeubP4bSkGQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:42:08 2025 by rpki-client