Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363938323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363938323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: tykM0YfkM/Qw52eTCpHo3Qe24VM0iM+5fxIAlyZ1adI=
Subject key identifier: 40:B3:0A:E7:60:F9:19:1F:CB:3C:5E:05:7F:EB:D0:3B:D3:AA:A3:B3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4F56E90B2F2DEB12BAAE7BF2B92221B0B53FE48F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363938323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 05:54:02 +0000
ROA not before: Sun 25 May 2025 05:49:02 +0000
ROA not after: Sun 24 May 2026 05:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6982::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 06:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:56:e9:0b:2f:2d:eb:12:ba:ae:7b:f2:b9:22:21:b0:b5:3f:e4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 05:49:02 2025 GMT
Not After : May 24 05:54:02 2026 GMT
Subject: CN=40B30AE760F9191FCB3C5E057FEBD03BD3AAA3B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:a6:ff:73:92:5b:66:12:ee:17:43:75:4e:
cc:83:ce:58:d8:f2:63:72:b2:89:cf:60:ea:be:e8:
72:d5:af:34:e5:e7:17:82:8b:00:94:c3:47:85:81:
c4:78:a3:77:d6:25:ef:67:9e:7c:11:d0:67:38:c7:
a0:6d:6d:d4:b6:43:95:c2:44:08:b8:75:90:46:72:
85:e9:85:00:c9:cc:3d:6a:d6:2b:8f:ca:ef:e5:4e:
b8:df:4f:6f:94:96:81:94:72:a5:f3:27:0a:7c:bd:
6f:7f:0a:0b:51:f9:98:85:55:6a:43:9f:b4:26:97:
dd:63:43:04:4e:64:5c:9e:f6:e3:ca:6f:e0:05:53:
30:7a:3c:85:06:0e:1e:70:45:3b:26:9d:86:36:a1:
b1:fc:4b:9f:73:97:bb:d5:b2:11:16:d5:52:dc:b2:
6a:47:63:b1:b2:7f:e4:ea:49:5e:f0:bb:30:a4:cc:
26:29:fc:3e:cb:a5:fa:f8:64:e1:6a:b2:ad:c7:d8:
54:19:87:6a:dc:ed:96:98:9b:ee:60:ea:23:75:1e:
c6:d7:58:5a:c6:7a:e2:7e:59:88:9e:26:fd:06:77:
28:65:8d:e8:a1:8d:64:78:f8:7c:d5:7d:1f:8a:b5:
46:ff:15:82:33:72:eb:83:e6:b2:d3:2d:06:30:b4:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B3:0A:E7:60:F9:19:1F:CB:3C:5E:05:7F:EB:D0:3B:D3:AA:A3:B3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363938323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6982::/48
Signature Algorithm: sha256WithRSAEncryption
2a:6e:4a:6c:52:56:14:a3:4b:78:cb:83:a1:f1:a4:28:ac:5e:
a1:50:a0:35:71:23:ff:89:04:57:b1:da:0c:6a:42:ae:44:c0:
c1:65:29:0a:36:ca:06:47:22:1d:a6:85:00:2b:25:e9:c1:ea:
16:8d:0b:77:8c:6b:ae:b2:22:28:ac:32:5a:4b:e4:3a:ba:0f:
59:a2:40:d4:6e:91:60:b2:14:85:9c:13:6f:3b:2d:d4:66:9c:
18:98:25:76:e3:99:34:ff:d1:d4:68:0d:fc:65:5b:3c:d0:56:
39:c8:a7:b6:9e:eb:d7:10:24:ea:8b:fe:b9:bd:dc:ef:96:fe:
63:8e:37:3c:c4:d8:56:07:f5:17:df:85:b5:2b:71:29:36:19:
c4:1a:b1:0c:53:59:a0:b3:bb:e2:0e:16:f0:fe:45:68:c5:81:
27:51:20:50:d8:fc:3f:55:5e:ce:2e:20:e2:47:86:ea:60:1e:
51:28:86:5d:32:46:94:10:82:37:cc:cf:c1:8a:91:ec:74:6b:
5b:97:10:e9:91:20:87:b6:92:7b:ce:d4:47:df:46:90:a2:24:
3f:40:43:b0:27:5d:f7:9d:3e:b2:6c:ae:cb:67:95:f0:55:62:
6d:63:98:94:64:25:30:f5:e1:3c:66:17:53:b0:ef:26:8f:41:
b9:22:52:60
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUT1bpCy8t6xK6rnvyuSIhsLU/5I8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUwNTQ5MDJaFw0yNjA1MjQwNTU0MDJaMDMxMTAvBgNV
BAMTKDQwQjMwQUU3NjBGOTE5MUZDQjNDNUUwNTdGRUJEMDNCRDNBQUEzQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeqb/c5JbZhLuF0N1TsyDzljY
8mNysonPYOq+6HLVrzTl5xeCiwCUw0eFgcR4o3fWJe9nnnwR0Gc4x6BtbdS2Q5XC
RAi4dZBGcoXphQDJzD1q1iuPyu/lTrjfT2+UloGUcqXzJwp8vW9/CgtR+ZiFVWpD
n7Qml91jQwROZFye9uPKb+AFUzB6PIUGDh5wRTsmnYY2obH8S59zl7vVshEW1VLc
smpHY7Gyf+TqSV7wuzCkzCYp/D7Lpfr4ZOFqsq3H2FQZh2rc7ZaYm+5g6iN1HsbX
WFrGeuJ+WYieJv0GdyhljeihjWR4+HzVfR+KtUb/FYIzcuuD5rLTLQYwtFL3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUQLMK52D5GR/LPF4Ff+vQO9Oqo7MwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzkzODMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRpgjAN
BgkqhkiG9w0BAQsFAAOCAQEAKm5KbFJWFKNLeMuDofGkKKxeoVCgNXEj/4kEV7Ha
DGpCrkTAwWUpCjbKBkciHaaFACsl6cHqFo0Ld4xrrrIiKKwyWkvkOroPWaJA1G6R
YLIUhZwTbzst1GacGJglduOZNP/R1GgN/GVbPNBWOcintp7r1xAk6ov+ub3c75b+
Y443PMTYVgf1F9+FtStxKTYZxBqxDFNZoLO74g4W8P5FaMWBJ1EgUNj8P1Vezi4g
4keG6mAeUSiGXTJGlBCCN8zPwYqR7HRrW5cQ6ZEgh7aSe87UR99GkKIkP0BDsCdd
950+smyuy2eV8FVibWOYlGQlMPXhPGYXU7DvJo9BuSJSYA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:00 2025 by rpki-client