Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366163373a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366163373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 49A6sXIMUdyi3M58Jz4fD1n3EfMGgdB8kz300MCx4L4=
Subject key identifier: 61:B9:5E:7C:2D:4B:24:48:7E:EC:71:D7:90:6D:77:2C:0E:BF:EC:9E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 31DDA68431EF0B175A967974518E79FA011BC3C2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366163373a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 25 May 2025 21:18:02 +0000
ROA not before: Sun 25 May 2025 21:13:02 +0000
ROA not after: Sun 24 May 2026 21:18:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6ac7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 00:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:dd:a6:84:31:ef:0b:17:5a:96:79:74:51:8e:79:fa:01:1b:c3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 21:13:02 2025 GMT
Not After : May 24 21:18:02 2026 GMT
Subject: CN=61B95E7C2D4B24487EEC71D7906D772C0EBFEC9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:cb:43:b2:62:8a:b2:b4:94:2f:04:28:04:
f6:76:b5:89:7c:fb:c5:e8:ad:a5:73:4b:8b:e3:f5:
49:b8:e9:44:34:2b:89:b3:7e:70:28:1f:f6:04:05:
b9:9e:ee:cf:a5:e2:0c:47:fa:47:34:ff:7f:60:d8:
63:14:b6:33:19:47:4a:c5:64:d2:4f:83:1c:1f:79:
b2:76:bd:30:70:55:92:35:0a:55:46:db:03:d5:31:
1a:da:42:be:40:b6:e2:77:32:6e:32:7c:3e:96:14:
61:2b:27:43:3c:36:9f:96:6e:eb:c7:81:25:83:32:
9d:2a:41:3f:c4:9e:a2:0d:0a:bc:a3:00:1a:b4:82:
0c:91:5a:46:24:44:93:4c:9b:7f:9a:37:6c:c2:2a:
5f:a3:c6:b4:5f:0d:3d:2b:6b:5d:5b:08:2a:17:70:
6a:25:37:83:a9:4b:76:e4:fd:5e:cc:e5:ce:a1:61:
15:7e:5b:54:6f:53:e6:bb:1b:81:06:b4:ae:d4:0b:
0d:43:e5:e7:30:94:7d:d0:42:03:c3:e9:1a:f0:aa:
68:3d:ef:68:c6:67:27:25:f8:ad:41:2a:2d:d0:09:
c9:8b:8e:93:d4:27:0e:d5:db:5d:4c:5e:33:0b:f1:
06:95:c9:20:96:81:b3:e1:c5:fb:37:d4:38:4c:33:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B9:5E:7C:2D:4B:24:48:7E:EC:71:D7:90:6D:77:2C:0E:BF:EC:9E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366163373a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ac7::/48
Signature Algorithm: sha256WithRSAEncryption
03:93:08:c1:f1:98:78:fb:6c:04:9b:93:08:dd:dd:5e:62:01:
35:27:c2:1a:23:6f:19:4d:c8:10:4f:b2:6f:4f:52:4b:23:0f:
a8:27:ae:d5:ae:6e:a3:5f:a0:55:dd:cf:57:e7:66:98:ad:10:
a8:e7:16:49:04:1a:ce:a1:c5:d4:18:12:8d:3f:b0:af:2e:5c:
55:03:b9:a4:84:56:ce:b8:bd:93:09:be:6e:92:a7:6e:ce:c4:
27:45:55:f7:c7:68:4c:ac:78:f3:9f:9b:37:fc:69:f6:03:f7:
6f:d5:66:a3:31:59:5f:79:f4:11:44:f0:8c:72:37:a4:09:f1:
98:08:09:c6:83:09:10:be:0e:24:40:44:28:1d:ea:3d:94:45:
4f:ac:06:88:a6:be:af:62:f6:84:a9:74:12:6d:df:70:31:98:
3f:73:a2:58:d3:ca:7b:a2:e8:97:ad:1c:86:be:b2:b0:44:4e:
6a:59:f5:10:e0:47:53:93:e1:c1:69:b1:44:cb:a9:ad:d5:48:
56:66:2e:23:6e:95:d6:b7:aa:0a:ba:76:90:dc:5b:06:23:fc:
ee:06:5c:dc:f4:fc:d7:c4:27:ec:48:3d:37:ae:e0:da:91:79:
01:88:67:c6:85:11:58:2b:dd:7c:6f:be:eb:b6:a9:9d:2d:de:
73:10:c0:da
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMd2mhDHvCxdalnl0UY55+gEbw8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUyMTEzMDJaFw0yNjA1MjQyMTE4MDJaMDMxMTAvBgNV
BAMTKDYxQjk1RTdDMkQ0QjI0NDg3RUVDNzFENzkwNkQ3NzJDMEVCRkVDOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmctDsmKKsrSULwQoBPZ2tYl8
+8XoraVzS4vj9Um46UQ0K4mzfnAoH/YEBbme7s+l4gxH+kc0/39g2GMUtjMZR0rF
ZNJPgxwfebJ2vTBwVZI1ClVG2wPVMRraQr5AtuJ3Mm4yfD6WFGErJ0M8Np+WbuvH
gSWDMp0qQT/EnqINCryjABq0ggyRWkYkRJNMm3+aN2zCKl+jxrRfDT0ra11bCCoX
cGolN4OpS3bk/V7M5c6hYRV+W1RvU+a7G4EGtK7UCw1D5ecwlH3QQgPD6Rrwqmg9
72jGZycl+K1BKi3QCcmLjpPUJw7V211MXjML8QaVySCWgbPhxfs31DhMM6rjAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUYblefC1LJEh+7HHXkG13LA6/7J4wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjE2MzM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGrH
MA0GCSqGSIb3DQEBCwUAA4IBAQADkwjB8Zh4+2wEm5MI3d1eYgE1J8IaI28ZTcgQ
T7JvT1JLIw+oJ67Vrm6jX6BV3c9X52aYrRCo5xZJBBrOocXUGBKNP7CvLlxVA7mk
hFbOuL2TCb5ukqduzsQnRVX3x2hMrHjzn5s3/Gn2A/dv1WajMVlfefQRRPCMcjek
CfGYCAnGgwkQvg4kQEQoHeo9lEVPrAaIpr6vYvaEqXQSbd9wMZg/c6JY08p7ouiX
rRyGvrKwRE5qWfUQ4EdTk+HBabFEy6mt1UhWZi4jbpXWt6oKunaQ3FsGI/zuBlzc
9PzXxCfsSD03ruDakXkBiGfGhRFYK918b77rtqmdLd5zEMDa
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:41:25 2025 by rpki-client