Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363938393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363938393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: xclzeb9xdyfI7Tt6CjRHXDkpvhEC0vu85EaDAvvU7CA=
Subject key identifier: D7:04:84:3E:B0:CF:BA:A1:01:CA:E0:F7:06:A3:D0:E4:EE:B6:08:BA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 54001C65782C86F1D6FF11523457D8E56ECF3C30
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363938393a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 05:12:02 +0000
ROA not before: Thu 29 May 2025 05:07:02 +0000
ROA not after: Thu 28 May 2026 05:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6989::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:00:1c:65:78:2c:86:f1:d6:ff:11:52:34:57:d8:e5:6e:cf:3c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 05:07:02 2025 GMT
Not After : May 28 05:12:02 2026 GMT
Subject: CN=D704843EB0CFBAA101CAE0F706A3D0E4EEB608BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:6c:4f:44:a8:19:dd:29:65:77:47:e8:10:
e1:2b:f5:50:0b:5e:7b:c7:2d:01:31:6a:99:46:ea:
87:e0:df:e0:a8:d8:c3:b0:85:88:91:c7:3b:6b:61:
45:d9:f4:d8:fc:ca:6b:11:81:53:b4:ec:71:d9:74:
a9:53:56:c2:52:50:18:7f:24:c4:c0:56:cd:62:19:
9d:63:68:14:fd:6f:9b:6b:75:d7:99:f5:01:54:08:
d2:bc:fc:a3:2a:f6:dc:ec:3a:8b:5d:93:3f:47:33:
f6:36:3b:92:3c:86:85:40:16:1a:3d:21:ed:ba:d9:
d3:4c:be:41:ad:c6:8f:40:89:26:4c:90:07:03:02:
29:ce:d7:c5:18:72:9e:ad:d3:24:ad:f7:15:ca:19:
ce:90:48:c0:17:71:ad:18:f7:1e:ec:b6:c5:1a:5e:
a3:86:7f:b8:a1:ee:a8:f8:f9:68:7e:b1:5a:a2:70:
be:96:d6:84:46:50:b5:33:99:91:2d:c2:68:51:3a:
ef:44:46:d4:ef:c3:67:5e:6e:f8:b1:f2:b9:c3:ee:
bd:ec:ec:32:61:42:4b:08:a6:86:02:90:7a:3a:1d:
6e:b8:d6:37:36:26:25:24:ca:bd:ee:5b:36:e6:88:
1c:65:38:7b:0c:8b:b5:c4:c5:cf:a6:67:f1:7d:8b:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:04:84:3E:B0:CF:BA:A1:01:CA:E0:F7:06:A3:D0:E4:EE:B6:08:BA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363938393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6989::/48
Signature Algorithm: sha256WithRSAEncryption
19:b9:f0:0e:a9:d5:00:47:51:1c:69:30:00:35:63:0c:71:92:
8b:c0:32:62:d3:01:fe:d7:0a:fa:e0:5f:a5:68:86:9e:6d:96:
80:e4:9d:34:c3:51:4a:08:da:b3:7d:65:9a:48:97:0f:eb:4c:
63:ad:ce:0c:f6:ce:ac:91:15:a3:10:29:c6:50:8d:08:65:62:
f2:70:12:6b:13:1a:28:9e:b1:04:87:b6:cb:1b:dc:0c:0e:18:
bf:14:c8:b5:b8:2c:3b:a4:f1:1c:09:81:08:0f:dc:dd:fa:c2:
47:4c:c6:49:36:34:53:cd:db:03:1e:02:bf:b1:57:91:38:ed:
eb:4c:6d:7e:8b:95:92:45:1c:d2:9c:bd:24:60:63:3d:16:7b:
3b:bc:62:5e:d9:03:ac:35:81:13:bf:ad:df:3a:ba:32:45:b9:
d7:58:0b:6d:56:0d:5b:5d:3c:68:e5:be:fa:f2:5b:dc:53:d2:
a6:e2:da:4b:9e:a5:a2:15:1a:df:f8:11:83:60:d5:81:b3:5b:
8a:cd:2b:b1:ec:c7:a7:a8:ee:1c:d3:be:ff:c8:72:3a:17:d3:
96:08:ec:32:5a:79:0e:a1:c9:bb:1a:df:a5:71:d7:04:eb:ed:
db:b3:5f:6e:cc:eb:c2:cc:a7:e1:64:42:c7:62:3f:e6:4b:49:
5c:8a:23:6e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUVAAcZXgshvHW/xFSNFfY5W7PPDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjkwNTA3MDJaFw0yNjA1MjgwNTEyMDJaMDMxMTAvBgNV
BAMTKEQ3MDQ4NDNFQjBDRkJBQTEwMUNBRTBGNzA2QTNEMEU0RUVCNjA4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhPmxPRKgZ3Slld0foEOEr9VAL
XnvHLQExaplG6ofg3+Co2MOwhYiRxztrYUXZ9Nj8ymsRgVO07HHZdKlTVsJSUBh/
JMTAVs1iGZ1jaBT9b5trddeZ9QFUCNK8/KMq9tzsOotdkz9HM/Y2O5I8hoVAFho9
Ie262dNMvkGtxo9AiSZMkAcDAinO18UYcp6t0ySt9xXKGc6QSMAXca0Y9x7stsUa
XqOGf7ih7qj4+Wh+sVqicL6W1oRGULUzmZEtwmhROu9ERtTvw2debvix8rnD7r3s
7DJhQksIpoYCkHo6HW641jc2JiUkyr3uWzbmiBxlOHsMi7XExc+mZ/F9i1jxAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU1wSEPrDPuqEByuD3BqPQ5O62CLowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzkzODM5M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRpiTAN
BgkqhkiG9w0BAQsFAAOCAQEAGbnwDqnVAEdRHGkwADVjDHGSi8AyYtMB/tcK+uBf
pWiGnm2WgOSdNMNRSgjas31lmkiXD+tMY63ODPbOrJEVoxApxlCNCGVi8nASaxMa
KJ6xBIe2yxvcDA4YvxTItbgsO6TxHAmBCA/c3frCR0zGSTY0U83bAx4Cv7FXkTjt
60xtfouVkkUc0py9JGBjPRZ7O7xiXtkDrDWBE7+t3zq6MkW511gLbVYNW108aOW+
+vJb3FPSpuLaS56lohUa3/gRg2DVgbNbis0rsezHp6juHNO+/8hyOhfTlgjsMlp5
DqHJuxrfpXHXBOvt27Nfbszrwsyn4WRCx2I/5ktJXIojbg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:22 2025 by rpki-client