Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366161653a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366161653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: E8E+Qz0IALnMUxU2Qg0XRnnNhQE1HfbqxMTsogRdu6c=
Subject key identifier: C2:9C:94:A7:57:75:A2:B5:07:66:52:86:43:4D:85:DB:CE:85:89:4F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2CDECB9861F7D0DA43B85B1CCAB21847B9C3CC5E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366161653a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 20:50:59 +0000
ROA not before: Fri 23 May 2025 20:45:59 +0000
ROA not after: Fri 22 May 2026 20:50:59 +0000
asID: 401507
IP address blocks: 2a14:7584:6aae::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 00:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:de:cb:98:61:f7:d0:da:43:b8:5b:1c:ca:b2:18:47:b9:c3:cc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:45:59 2025 GMT
Not After : May 22 20:50:59 2026 GMT
Subject: CN=C29C94A75775A2B507665286434D85DBCE85894F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:fc:73:70:3f:d1:fc:86:45:23:e2:08:d8:
37:53:9c:72:6c:57:5c:12:b0:a3:d9:77:04:5f:19:
b0:b3:a7:7b:b9:7c:5d:98:ba:35:e6:36:03:d9:c4:
4b:f9:59:4a:8a:5a:61:35:6c:7b:11:85:f6:90:a7:
97:36:34:62:83:a9:71:fc:42:62:49:cf:63:56:46:
99:e4:b0:fa:5e:20:4a:73:7c:5b:80:56:5b:38:aa:
c7:22:3a:0a:3e:14:83:f1:ff:af:69:98:58:a1:2b:
c0:d4:70:81:a3:b9:f7:ef:bb:3f:09:2c:e1:a5:bc:
2c:3c:72:ef:3a:a7:44:2e:18:f8:5b:38:66:34:bd:
90:4f:76:2e:a9:05:62:09:85:ac:65:c7:a5:c4:42:
99:24:b1:78:6f:05:e3:de:8a:8b:4b:89:e2:5a:d8:
62:c8:82:73:9a:e7:e7:84:c1:8d:d5:5b:ed:89:3b:
8b:5d:24:e0:0c:da:11:6d:fb:2f:df:de:02:3c:06:
43:de:4b:81:d5:1b:b6:93:73:08:bc:a9:1a:be:30:
90:d6:9a:05:2a:65:61:c5:fe:37:84:18:61:38:ff:
52:89:5c:f8:c1:17:41:eb:e3:e7:56:3e:53:4b:75:
a3:1f:cd:e4:c4:d6:6c:a9:56:96:c8:88:d8:9c:d6:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:94:A7:57:75:A2:B5:07:66:52:86:43:4D:85:DB:CE:85:89:4F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366161653a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6aae::/48
Signature Algorithm: sha256WithRSAEncryption
0e:f6:79:51:b9:25:6e:3f:74:ba:66:36:5e:a7:c5:99:c3:3c:
ee:80:9d:26:b6:74:cc:7c:79:4d:a3:9d:01:f9:b6:a9:cf:5b:
0b:61:a1:50:7e:c2:01:14:5d:15:dd:72:58:de:8d:5f:2c:e9:
84:21:36:ae:ff:30:14:a7:2a:d6:ee:80:c3:b5:52:a8:30:7f:
5d:cd:19:a5:f6:b9:67:59:99:2f:e9:ba:bc:9b:93:8f:1b:42:
a4:2c:bc:4d:17:e6:82:62:87:27:f1:b5:c7:df:78:cc:bd:73:
e2:95:5f:37:48:b4:07:79:59:f5:4b:6c:14:22:bf:ec:f5:63:
ca:d5:e3:65:31:d9:bc:38:ed:17:0d:b6:1f:6d:23:68:07:e4:
02:f4:af:8e:35:82:1c:46:19:91:7f:e2:9f:bb:7e:ce:86:0b:
9c:64:40:9b:79:90:ee:c9:6c:4d:9b:a2:f4:04:06:2f:6e:ab:
26:fc:fd:74:74:3c:4b:89:41:44:7a:48:ed:1f:aa:c9:33:3b:
45:4c:f0:cf:e2:56:18:60:56:8d:ec:1d:13:41:6a:3b:a9:00:
fb:f0:00:b6:3b:2b:aa:02:0c:07:54:93:38:9c:9e:22:4b:a2:
66:a4:0f:09:17:0d:5b:3b:ec:7e:e5:47:ae:96:9b:82:07:30:
7f:d8:c2:f6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULN7LmGH30NpDuFscyrIYR7nDzF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjMyMDQ1NTlaFw0yNjA1MjIyMDUwNTlaMDMxMTAvBgNV
BAMTKEMyOUM5NEE3NTc3NUEyQjUwNzY2NTI4NjQzNEQ4NURCQ0U4NTg5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOEPxzcD/R/IZFI+II2DdTnHJs
V1wSsKPZdwRfGbCzp3u5fF2YujXmNgPZxEv5WUqKWmE1bHsRhfaQp5c2NGKDqXH8
QmJJz2NWRpnksPpeIEpzfFuAVls4qsciOgo+FIPx/69pmFihK8DUcIGjuffvuz8J
LOGlvCw8cu86p0QuGPhbOGY0vZBPdi6pBWIJhaxlx6XEQpkksXhvBePeiotLieJa
2GLIgnOa5+eEwY3VW+2JO4tdJOAM2hFt+y/f3gI8BkPeS4HVG7aTcwi8qRq+MJDW
mgUqZWHF/jeEGGE4/1KJXPjBF0Hr4+dWPlNLdaMfzeTE1mypVpbIiNic1lKvAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUwpyUp1d1orUHZlKGQ02F286FiU8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjE2MTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGqu
MA0GCSqGSIb3DQEBCwUAA4IBAQAO9nlRuSVuP3S6ZjZep8WZwzzugJ0mtnTMfHlN
o50B+bapz1sLYaFQfsIBFF0V3XJY3o1fLOmEITau/zAUpyrW7oDDtVKoMH9dzRml
9rlnWZkv6bq8m5OPG0KkLLxNF+aCYocn8bXH33jMvXPilV83SLQHeVn1S2wUIr/s
9WPK1eNlMdm8OO0XDbYfbSNoB+QC9K+ONYIcRhmRf+Kfu37OhgucZECbeZDuyWxN
m6L0BAYvbqsm/P10dDxLiUFEekjtH6rJMztFTPDP4lYYYFaN7B0TQWo7qQD78AC2
OyuqAgwHVJM4nJ4iS6JmpA8JFw1bO+x+5UeulpuCBzB/2ML2
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:24 2025 by rpki-client