Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363961323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363961323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: yfS5p8GT9hzI6N734GXKg9/2r1M65MBkeiJAvAE9feM=
Subject key identifier: EE:62:A3:97:A2:DC:8A:B4:C0:CE:19:0C:0F:CF:EA:3F:2D:3A:62:33
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 32395A7F9540D4C1001B2EF9158D91BF8826B530
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363961323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 05:36:02 +0000
ROA not before: Sun 25 May 2025 05:31:02 +0000
ROA not after: Sun 24 May 2026 05:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:69a2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 20:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:39:5a:7f:95:40:d4:c1:00:1b:2e:f9:15:8d:91:bf:88:26:b5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 05:31:02 2025 GMT
Not After : May 24 05:36:02 2026 GMT
Subject: CN=EE62A397A2DC8AB4C0CE190C0FCFEA3F2D3A6233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:54:4a:03:30:9a:4a:82:b4:b5:2d:cc:71:
fa:b3:ee:79:be:8b:c3:f7:ba:3e:18:e2:e6:0c:fc:
1e:06:c3:8d:b7:85:31:4c:a7:55:46:0c:01:0d:ef:
62:0c:f9:ba:b1:4f:f3:0e:de:0f:a2:a8:79:9c:0e:
b7:0c:39:36:0f:d5:32:68:a0:e4:0a:3e:36:3b:94:
9a:97:57:e7:e5:9d:d5:72:c8:d2:57:d4:8e:77:68:
f5:80:24:4c:96:ed:5a:69:6a:d6:cb:df:e3:ea:8e:
d1:63:8f:9f:de:12:12:d9:d1:19:37:5a:b5:99:2b:
c6:dc:99:99:a3:f6:51:06:81:e1:4a:11:53:e7:2e:
c0:5e:f0:4c:78:87:99:cd:70:0c:9c:f6:60:91:9a:
3b:98:b5:de:b2:e8:07:a3:9e:9f:5c:4f:1e:68:0c:
f8:ca:01:e4:6b:8c:e6:49:37:2f:47:7f:00:eb:56:
2f:65:cf:31:55:de:7e:75:d6:0c:f9:cf:d4:e6:fc:
86:84:4f:6a:65:d6:a8:32:13:c8:f5:df:fd:4b:37:
5c:eb:e6:32:bf:42:56:39:52:55:78:f3:f8:fe:ac:
db:b6:fc:78:a9:cd:1a:11:5e:ca:82:53:99:93:94:
3d:e2:c9:af:1d:9f:6f:42:ae:02:8a:22:42:d8:43:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:62:A3:97:A2:DC:8A:B4:C0:CE:19:0C:0F:CF:EA:3F:2D:3A:62:33
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363961323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:69a2::/48
Signature Algorithm: sha256WithRSAEncryption
55:13:42:c3:13:b1:94:6b:67:fc:ac:57:4e:e1:c1:01:d3:cc:
1d:14:a7:70:a3:44:bb:df:c6:5c:80:ea:57:d7:12:c6:90:36:
ae:8a:34:93:2e:8d:24:db:26:4b:7a:15:86:22:03:32:a2:1f:
76:ce:1e:90:93:04:f9:1a:36:cd:f1:db:cc:ab:54:72:05:61:
58:46:ff:8b:05:2c:30:b1:32:c6:57:1e:f5:51:16:6e:b7:c5:
7d:51:62:f3:74:75:9e:d1:4a:32:02:28:3d:66:50:79:83:b3:
73:34:cf:0e:0a:61:2b:0b:d0:7b:85:91:1c:b7:88:64:c8:3c:
30:70:cc:c6:81:59:a9:da:fe:38:0f:0a:14:45:2d:fc:01:57:
e8:8a:f1:2e:59:12:53:4b:37:98:73:35:6e:15:29:ac:22:06:
a7:39:d7:13:0b:f4:8f:32:7b:94:1c:0c:7d:f3:bc:70:0b:29:
6f:c3:24:07:57:19:08:e1:02:9e:a9:23:2f:4a:37:59:ac:1e:
29:9f:3f:06:2a:f5:18:3d:a0:d4:e9:bf:1d:2b:1f:61:15:34:
8b:c7:0b:a8:e0:c3:ad:47:c6:9f:28:32:3e:21:12:c0:01:31:
50:8d:00:ac:0a:37:06:2a:f3:4e:42:e5:15:18:7a:97:a4:85:
cd:97:6b:ca
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUMjlaf5VA1MEAGy75FY2Rv4gmtTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUwNTMxMDJaFw0yNjA1MjQwNTM2MDJaMDMxMTAvBgNV
BAMTKEVFNjJBMzk3QTJEQzhBQjRDMENFMTkwQzBGQ0ZFQTNGMkQzQTYyMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rlRKAzCaSoK0tS3Mcfqz7nm+
i8P3uj4Y4uYM/B4Gw423hTFMp1VGDAEN72IM+bqxT/MO3g+iqHmcDrcMOTYP1TJo
oOQKPjY7lJqXV+flndVyyNJX1I53aPWAJEyW7VppatbL3+PqjtFjj5/eEhLZ0Rk3
WrWZK8bcmZmj9lEGgeFKEVPnLsBe8Ex4h5nNcAyc9mCRmjuYtd6y6Aejnp9cTx5o
DPjKAeRrjOZJNy9HfwDrVi9lzzFV3n511gz5z9Tm/IaET2pl1qgyE8j13/1LN1zr
5jK/QlY5UlV48/j+rNu2/HipzRoRXsqCU5mTlD3iya8dn29CrgKKIkLYQ7WFAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU7mKjl6LcirTAzhkMD8/qPy06YjMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2Mzk2MTMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRpojAN
BgkqhkiG9w0BAQsFAAOCAQEAVRNCwxOxlGtn/KxXTuHBAdPMHRSncKNEu9/GXIDq
V9cSxpA2roo0ky6NJNsmS3oVhiIDMqIfds4ekJME+Ro2zfHbzKtUcgVhWEb/iwUs
MLEyxlce9VEWbrfFfVFi83R1ntFKMgIoPWZQeYOzczTPDgphKwvQe4WRHLeIZMg8
MHDMxoFZqdr+OA8KFEUt/AFX6IrxLlkSU0s3mHM1bhUprCIGpznXEwv0jzJ7lBwM
ffO8cAspb8MkB1cZCOECnqkjL0o3WaweKZ8/Bir1GD2g1Om/HSsfYRU0i8cLqODD
rUfGnygyPiESwAExUI0ArAo3BirzTkLlFRh6l6SFzZdryg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:08:46 2025 by rpki-client