Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363963393a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363963393a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: hOcxPnNwG9a92f0vqBB7dY2E/TszEjiWTlOCZ/RK9rQ=
Subject key identifier: 63:8E:0D:AF:D7:45:72:80:EF:C3:80:70:D3:19:CD:35:BC:58:46:BE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 78BE72BF4755294ECE12FAC74C24F76952AC870B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363963393a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 25 May 2025 00:12:02 +0000
ROA not before: Sun 25 May 2025 00:07:02 +0000
ROA not after: Sun 24 May 2026 00:12:02 +0000
asID: 401507
IP address blocks: 2a14:7584:69c9::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 May 2025 03:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:be:72:bf:47:55:29:4e:ce:12:fa:c7:4c:24:f7:69:52:ac:87:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 00:07:02 2025 GMT
Not After : May 24 00:12:02 2026 GMT
Subject: CN=638E0DAFD7457280EFC38070D319CD35BC5846BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:56:b6:db:78:ae:9f:9e:71:6e:80:ba:00:
7d:5e:ed:46:0a:75:b5:47:01:32:2c:90:2d:a3:ae:
a2:35:9b:73:5d:ec:33:36:bb:08:3d:d6:fe:94:73:
fa:b9:c0:c8:0d:87:02:74:6c:97:2c:5b:22:fd:38:
fd:cc:58:42:a9:74:f4:80:50:c3:96:15:00:4c:3c:
37:40:e4:84:ba:74:a8:24:73:d7:8e:60:75:db:43:
13:b1:06:bd:79:a7:f5:fa:5c:ae:c7:08:2b:b6:6d:
b7:1f:a6:ee:eb:67:66:d8:5c:ac:8f:ca:11:37:7e:
8a:1d:c0:dc:b8:b1:61:6f:07:ab:51:ff:97:06:98:
a3:97:78:c2:5c:b2:a9:4f:f0:62:61:55:a8:c2:83:
17:c4:75:74:0c:b4:ee:5c:3f:bb:e0:03:1b:b2:2b:
11:e3:99:e4:62:9d:fa:07:c0:bb:ea:19:74:d2:cb:
d5:93:ec:43:19:ce:ed:fa:4c:7c:dd:77:50:f9:58:
01:9b:fd:48:d5:89:ed:79:bb:c0:05:48:e2:6e:11:
28:f9:e0:21:97:20:93:c5:9b:02:f2:bb:4f:4d:87:
7e:3f:2c:c7:46:08:06:80:d3:5a:51:e8:ff:71:df:
77:07:3e:b5:1f:53:52:52:52:03:a3:bf:a3:93:33:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8E:0D:AF:D7:45:72:80:EF:C3:80:70:D3:19:CD:35:BC:58:46:BE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363963393a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:69c9::/48
Signature Algorithm: sha256WithRSAEncryption
2e:3d:87:27:00:3c:36:a1:5a:65:0b:98:63:47:c9:5d:7a:f9:
18:12:a8:d4:0b:e7:aa:e7:27:78:5f:ee:41:0c:54:60:10:2a:
1d:d1:b5:55:02:cd:f4:19:2f:67:85:c5:d0:cf:aa:af:d7:5f:
5f:08:71:5c:16:0f:33:e2:d0:e0:c6:50:db:ba:3b:cb:72:dc:
c0:a7:55:1d:a5:bc:8d:5d:76:b5:c6:6b:31:c9:20:a5:8e:a2:
a0:d7:b2:03:8f:04:73:ab:1d:cf:4c:1f:59:14:51:0d:18:90:
fa:5b:e7:3c:2a:27:08:03:c5:cc:d0:d6:91:9d:7c:6d:f0:be:
69:5c:71:5f:86:9f:7f:05:a6:9b:32:2d:13:3c:7e:e9:52:e4:
f6:71:cc:08:11:ca:df:3b:ce:e0:a1:8e:12:cf:1d:e2:9b:2f:
7b:ea:ab:95:de:59:e6:d4:35:ac:49:41:99:8e:37:aa:07:90:
3f:39:ba:25:62:7a:9f:04:c0:bc:bc:e3:63:90:9f:54:3f:ac:
e2:b6:ea:d7:7b:25:ef:d1:1a:ca:6b:7e:e4:7c:51:ea:a8:63:
00:4d:5b:2c:e9:92:20:1a:03:08:b5:ac:d2:e8:c2:fa:49:bc:
d4:18:df:94:3c:a8:94:4b:01:ed:36:6c:bd:ef:ed:57:9c:2c:
1b:72:ba:2f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeL5yv0dVKU7OEvrHTCT3aVKshwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUwMDA3MDJaFw0yNjA1MjQwMDEyMDJaMDMxMTAvBgNV
BAMTKDYzOEUwREFGRDc0NTcyODBFRkMzODA3MEQzMTlDRDM1QkM1ODQ2QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrFa223iun55xboC6AH1e7UYK
dbVHATIskC2jrqI1m3Nd7DM2uwg91v6Uc/q5wMgNhwJ0bJcsWyL9OP3MWEKpdPSA
UMOWFQBMPDdA5IS6dKgkc9eOYHXbQxOxBr15p/X6XK7HCCu2bbcfpu7rZ2bYXKyP
yhE3foodwNy4sWFvB6tR/5cGmKOXeMJcsqlP8GJhVajCgxfEdXQMtO5cP7vgAxuy
KxHjmeRinfoHwLvqGXTSy9WT7EMZzu36THzdd1D5WAGb/UjVie15u8AFSOJuESj5
4CGXIJPFmwLyu09Nh34/LMdGCAaA01pR6P9x33cHPrUfU1JSUgOjv6OTM5kbAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUY44Nr9dFcoDvw4Bw0xnNNbxYRr4wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2Mzk2MzM5M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGnJ
MA0GCSqGSIb3DQEBCwUAA4IBAQAuPYcnADw2oVplC5hjR8ldevkYEqjUC+eq5yd4
X+5BDFRgECod0bVVAs30GS9nhcXQz6qv119fCHFcFg8z4tDgxlDbujvLctzAp1Ud
pbyNXXa1xmsxySCljqKg17IDjwRzqx3PTB9ZFFENGJD6W+c8KicIA8XM0NaRnXxt
8L5pXHFfhp9/BaabMi0TPH7pUuT2ccwIEcrfO87goY4Szx3imy976quV3lnm1DWs
SUGZjjeqB5A/ObolYnqfBMC8vONjkJ9UP6ziturXeyXv0RrKa37kfFHqqGMATVss
6ZIgGgMItazS6ML6SbzUGN+UPKiUSwHtNmy97+1XnCwbcrov
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:33 2025 by rpki-client