Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366230633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366230633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: SQAlJNlKGvW98Xra1mCZJDl0mlh+SBqXx8OZdyl7MpM=
Subject key identifier: DD:B6:03:45:1F:38:E9:97:87:44:A6:5A:A0:E8:40:B6:24:3F:8F:EC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7881EA7F4BACC1C2845B6C0F95FB1D3F7EB6211D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366230633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 05:36:02 +0000
ROA not before: Sun 25 May 2025 05:31:02 +0000
ROA not after: Sun 24 May 2026 05:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6b0c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 20:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:81:ea:7f:4b:ac:c1:c2:84:5b:6c:0f:95:fb:1d:3f:7e:b6:21:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 05:31:02 2025 GMT
Not After : May 24 05:36:02 2026 GMT
Subject: CN=DDB603451F38E9978744A65AA0E840B6243F8FEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:f8:fe:6b:7f:d7:39:82:41:67:49:d5:ae:
94:94:84:42:7b:4b:f2:ef:54:85:a7:64:6f:03:15:
32:82:48:e2:58:eb:e9:66:59:cf:85:ee:9f:99:ae:
75:40:20:7d:e8:3c:50:51:25:ae:d3:6a:1b:c1:42:
6b:56:f3:79:60:ef:e4:2f:58:68:82:a4:69:9a:ee:
30:89:4f:90:c5:d2:f3:07:06:5e:68:da:13:d8:21:
f0:32:83:6a:0a:12:bb:45:18:be:9a:4a:b4:bc:24:
cc:ff:6b:2e:a7:71:f2:8d:72:c8:11:e4:c5:44:98:
1a:dc:f3:63:77:b8:a3:23:44:0e:e9:2b:07:a2:b6:
e1:d6:69:eb:99:1c:08:85:e4:c5:9b:ea:68:76:6f:
9a:59:dd:87:f6:9e:ee:88:3a:97:45:42:69:3b:21:
74:1d:44:02:40:f5:f2:c2:f2:2e:d2:46:42:30:dd:
ff:6b:a3:d9:8f:02:db:78:20:35:52:ec:ef:7f:47:
ca:db:61:89:13:85:e0:6c:da:4c:b5:52:22:b4:62:
d0:37:99:69:f0:7e:16:6a:30:0c:09:61:de:c9:35:
cc:20:b1:73:f6:05:95:2e:6c:02:c1:4d:44:2c:2a:
d6:bb:de:e2:e1:1b:87:6e:db:56:83:77:14:7c:c3:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:03:45:1F:38:E9:97:87:44:A6:5A:A0:E8:40:B6:24:3F:8F:EC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366230633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6b0c::/48
Signature Algorithm: sha256WithRSAEncryption
88:e5:ee:7c:4f:2d:f0:51:37:05:f4:77:cb:d1:b8:ac:5c:c8:
d5:c3:56:4b:d2:d3:62:b2:73:e1:2c:c1:0c:0d:b2:02:60:6e:
78:00:8f:16:68:eb:00:4a:cb:ff:0c:c6:9d:0c:7c:17:5d:7a:
19:9c:72:3c:eb:89:6a:f5:41:c4:a2:29:18:44:00:72:96:68:
6c:88:5e:47:b1:8a:e2:64:d3:56:95:30:3e:26:4f:0a:56:96:
fb:6b:9c:53:99:09:f9:24:b0:6d:8a:1d:8b:e1:56:ca:9f:28:
39:53:b5:87:38:f8:6f:ee:84:14:33:f8:25:a2:97:e5:ac:2f:
ea:6f:43:61:ea:fb:f3:0d:4a:da:4d:da:d9:dc:68:b0:fd:de:
e6:65:5a:9a:1c:bd:10:fe:1c:d4:73:bb:f8:69:8c:bc:52:86:
d9:9b:23:6b:53:19:f8:92:b3:8f:0d:32:80:55:70:64:26:08:
21:ba:10:a8:aa:81:cb:20:42:f0:58:25:23:39:9f:7b:11:e8:
eb:d6:16:a8:ba:e5:2e:35:d8:9b:7f:e0:5d:77:92:a9:f6:c7:
61:1c:3b:08:56:81:7f:d1:39:55:0b:53:a8:8f:ff:d2:56:cc:
01:64:63:7d:0c:a8:e6:c0:7d:66:81:99:b2:81:02:8a:12:b0:
b5:8a:5c:61
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUeIHqf0uswcKEW2wPlfsdP362IR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUwNTMxMDJaFw0yNjA1MjQwNTM2MDJaMDMxMTAvBgNV
BAMTKEREQjYwMzQ1MUYzOEU5OTc4NzQ0QTY1QUEwRTg0MEI2MjQzRjhGRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S/j+a3/XOYJBZ0nVrpSUhEJ7
S/LvVIWnZG8DFTKCSOJY6+lmWc+F7p+ZrnVAIH3oPFBRJa7TahvBQmtW83lg7+Qv
WGiCpGma7jCJT5DF0vMHBl5o2hPYIfAyg2oKErtFGL6aSrS8JMz/ay6ncfKNcsgR
5MVEmBrc82N3uKMjRA7pKweituHWaeuZHAiF5MWb6mh2b5pZ3Yf2nu6IOpdFQmk7
IXQdRAJA9fLC8i7SRkIw3f9ro9mPAtt4IDVS7O9/R8rbYYkTheBs2ky1UiK0YtA3
mWnwfhZqMAwJYd7JNcwgsXP2BZUubALBTUQsKta73uLhG4du21aDdxR8w+cbAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU3bYDRR846ZeHRKZaoOhAtiQ/j+wwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjIzMDYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRrDDAN
BgkqhkiG9w0BAQsFAAOCAQEAiOXufE8t8FE3BfR3y9G4rFzI1cNWS9LTYrJz4SzB
DA2yAmBueACPFmjrAErL/wzGnQx8F116GZxyPOuJavVBxKIpGEQAcpZobIheR7GK
4mTTVpUwPiZPClaW+2ucU5kJ+SSwbYodi+FWyp8oOVO1hzj4b+6EFDP4JaKX5awv
6m9DYer78w1K2k3a2dxosP3e5mVamhy9EP4c1HO7+GmMvFKG2Zsja1MZ+JKzjw0y
gFVwZCYIIboQqKqByyBC8FglIzmfexHo69YWqLrlLjXYm3/gXXeSqfbHYRw7CFaB
f9E5VQtTqI//0lbMAWRjfQyo5sB9ZoGZsoECihKwtYpcYQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:58 2025 by rpki-client