Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363938303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363938303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: GWRHnLRkhTAwdl2Q1tHQa3zBAy2Oka6v6tI/BPgcgpI=
Subject key identifier: 8E:31:66:5F:3A:01:50:8E:A4:9D:E5:20:7C:22:B2:1A:B9:AD:29:15
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 60BB04A1F938AC5201A4B09C94C53AAB6B16FCCA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363938303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:27:57 +0000
ROA not before: Fri 24 Jan 2025 11:22:57 +0000
ROA not after: Fri 23 Jan 2026 11:27:57 +0000
asID: 16909
IP address blocks: 2a14:7584:6980::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:bb:04:a1:f9:38:ac:52:01:a4:b0:9c:94:c5:3a:ab:6b:16:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:22:57 2025 GMT
Not After : Jan 23 11:27:57 2026 GMT
Subject: CN=8E31665F3A01508EA49DE5207C22B21AB9AD2915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:06:26:79:38:f2:0b:85:24:f4:3f:22:00:
b2:e6:bf:1f:47:88:29:9f:09:07:2d:06:15:4c:94:
77:78:ce:aa:b5:95:e2:a1:88:d4:1e:a0:5c:7c:15:
8d:68:e0:13:32:68:c4:8a:a4:c9:e9:05:b0:3d:54:
30:93:66:8c:1b:a0:46:b4:cd:2b:2a:4a:c1:30:f6:
dd:52:2a:ce:b5:f8:95:e5:f9:78:d4:84:ef:c5:a0:
a8:67:e7:2a:60:48:ab:9d:c9:1b:ae:0c:d3:3e:d3:
4a:94:6e:ae:90:8c:82:33:65:6c:6a:2c:38:c2:36:
38:27:c7:38:71:1d:a0:53:8c:40:9f:e8:2e:37:91:
22:fc:b8:4c:e1:05:21:27:d4:f0:97:26:15:cd:0a:
b6:6d:66:90:9a:6e:b4:6b:53:55:c6:c7:92:cb:e7:
0c:48:88:30:65:1f:14:fb:00:3c:64:c9:4f:6c:4d:
fd:b9:77:90:22:ba:2e:88:3b:70:38:39:ec:e4:3d:
3c:b1:c7:7e:b3:eb:19:b8:15:fd:94:a6:2d:56:36:
4d:d2:02:66:1b:9d:c6:13:1f:4c:81:af:84:b1:97:
9b:59:cd:41:4f:a1:71:da:5d:de:90:0f:eb:2b:0b:
ed:4c:56:84:f9:66:9b:7d:2c:e0:e4:dc:a0:3e:2e:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:66:5F:3A:01:50:8E:A4:9D:E5:20:7C:22:B2:1A:B9:AD:29:15
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363938303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6980::/48
Signature Algorithm: sha256WithRSAEncryption
4e:bd:6d:10:60:f8:0f:25:65:62:83:51:ae:03:d5:0e:63:21:
42:d7:77:c9:35:10:e2:9c:fb:83:61:82:c2:28:dd:20:0f:a7:
47:7c:10:34:93:43:7f:56:92:82:e9:95:7c:7d:b2:97:6d:91:
78:52:7e:ce:53:42:4a:fd:c5:1c:88:63:c5:bb:37:05:05:b4:
d6:89:06:06:5c:49:b2:c3:45:5b:29:d3:9e:16:38:07:1a:a0:
74:f6:83:9c:0d:c5:f4:c1:fc:cd:94:81:36:fe:4e:e6:05:16:
48:44:40:3c:6c:1d:62:0c:e3:43:8a:c6:5f:2b:48:02:bf:ff:
93:c5:e8:8b:ae:c5:63:38:0e:4f:5e:e6:5d:4a:0e:ed:61:7d:
4a:39:eb:f4:cb:40:6a:70:65:82:2d:4f:d7:7e:d0:11:8d:49:
8f:f6:90:b2:d8:f7:dd:62:44:cd:47:6c:d0:4e:c7:d8:0a:f0:
f8:3e:67:15:82:5f:ce:f5:42:80:95:24:f8:3a:2e:43:9f:07:
a3:b3:51:09:84:92:82:c7:4d:d1:6c:8d:8c:1d:6b:2d:5b:2d:
a0:18:83:36:3a:9f:fc:d1:fc:fd:2f:8f:c1:1d:79:05:b8:13:
8b:55:10:39:85:67:f8:da:4d:86:96:95:fa:29:3f:cb:4f:ec:
81:f4:c2:45
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYLsEofk4rFIBpLCclMU6q2sW/MowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMjQxMTIyNTdaFw0yNjAxMjMxMTI3NTdaMDMxMTAvBgNV
BAMTKDhFMzE2NjVGM0EwMTUwOEVBNDlERTUyMDdDMjJCMjFBQjlBRDI5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQQYmeTjyC4Uk9D8iALLmvx9H
iCmfCQctBhVMlHd4zqq1leKhiNQeoFx8FY1o4BMyaMSKpMnpBbA9VDCTZowboEa0
zSsqSsEw9t1SKs61+JXl+XjUhO/FoKhn5ypgSKudyRuuDNM+00qUbq6QjIIzZWxq
LDjCNjgnxzhxHaBTjECf6C43kSL8uEzhBSEn1PCXJhXNCrZtZpCabrRrU1XGx5LL
5wxIiDBlHxT7ADxkyU9sTf25d5Aiui6IO3A4OezkPTyxx36z6xm4Ff2Upi1WNk3S
AmYbncYTH0yBr4Sxl5tZzUFPoXHaXd6QD+srC+1MVoT5Zpt9LODk3KA+LsCNAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUjjFmXzoBUI6kneUgfCKyGrmtKRUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzkzODMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRpgDAN
BgkqhkiG9w0BAQsFAAOCAQEATr1tEGD4DyVlYoNRrgPVDmMhQtd3yTUQ4pz7g2GC
wijdIA+nR3wQNJNDf1aSgumVfH2yl22ReFJ+zlNCSv3FHIhjxbs3BQW01okGBlxJ
ssNFWynTnhY4BxqgdPaDnA3F9MH8zZSBNv5O5gUWSERAPGwdYgzjQ4rGXytIAr//
k8Xoi67FYzgOT17mXUoO7WF9Sjnr9MtAanBlgi1P137QEY1Jj/aQstj33WJEzUds
0E7H2Arw+D5nFYJfzvVCgJUk+DouQ58Ho7NRCYSSgsdN0WyNjB1rLVstoBiDNjqf
/NH8/S+PwR15BbgTi1UQOYVn+NpNhpaV+ik/y0/sgfTCRQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:41 2025 by rpki-client