Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366263633a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366263633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: YFK/imMj0ZmhsQIhL+AMS4lRTi8rQCgGXotCyvztGWc=
Subject key identifier: F3:92:41:91:5E:C8:FA:BF:8C:D4:DE:10:60:55:93:49:7F:3D:EA:FB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7BB7CC1B9DAF5680BB07E597FFA2432C38AEC277
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366263633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 26 May 2025 07:42:02 +0000
ROA not before: Mon 26 May 2025 07:37:02 +0000
ROA not after: Mon 25 May 2026 07:42:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6bcc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b7:cc:1b:9d:af:56:80:bb:07:e5:97:ff:a2:43:2c:38:ae:c2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 07:37:02 2025 GMT
Not After : May 25 07:42:02 2026 GMT
Subject: CN=F39241915EC8FABF8CD4DE10605593497F3DEAFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bd:fe:92:0b:29:2e:1a:4e:6f:a6:94:c3:be:
f1:8e:0b:e8:3c:9e:04:23:b2:94:d5:2d:e0:64:be:
3c:af:af:22:2b:5d:a6:73:b1:96:cd:37:7d:8d:bc:
89:ba:16:2d:70:66:3f:35:4c:68:a2:3d:79:5b:99:
77:6d:ae:fd:a0:59:2e:42:25:4a:e5:f9:a5:d1:3c:
ac:2a:2c:da:f0:b1:e0:db:a8:bc:27:20:3d:52:81:
d9:32:07:5a:8e:e5:e9:11:69:55:87:3f:78:69:f4:
ad:20:2b:1c:80:de:85:22:cb:38:42:7b:88:b7:17:
61:29:d1:5d:75:9a:5e:b3:3b:24:40:47:6b:1c:ad:
51:cf:9f:79:7e:69:f4:8f:c1:55:c1:e5:89:2c:12:
5c:3a:b7:c3:05:84:09:a9:bc:ba:dd:4d:be:52:f5:
38:09:14:dc:44:7a:9d:d4:bf:5c:ea:e1:3e:9c:84:
09:48:b1:f2:92:c9:ab:0d:b3:62:63:16:09:da:2a:
7e:aa:3b:74:7d:5d:d6:d6:5e:8c:5e:9f:78:80:c7:
37:5a:c9:ef:4f:cc:9d:95:fe:c1:4c:b0:60:94:82:
29:8e:07:cd:06:56:da:a7:f6:17:e0:42:db:ba:a1:
44:8b:4b:3a:8c:2c:6b:61:28:91:eb:2d:45:89:af:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:92:41:91:5E:C8:FA:BF:8C:D4:DE:10:60:55:93:49:7F:3D:EA:FB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366263633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6bcc::/48
Signature Algorithm: sha256WithRSAEncryption
1f:31:5a:41:c2:3e:d7:19:26:96:06:13:e8:0b:bc:c2:d7:1b:
90:3f:70:19:36:98:d1:c2:5e:9f:1d:44:32:f5:81:e5:72:de:
87:90:f9:85:2b:33:58:2b:d5:55:79:dc:39:f5:0f:d0:59:43:
34:95:cd:9d:4d:59:b2:41:6f:9b:65:d7:3b:34:db:3b:a8:a3:
e6:83:dc:01:ab:00:b4:f6:11:d5:de:15:53:d9:24:ec:da:b2:
de:53:69:b4:56:cc:d7:64:2c:ae:a4:26:c4:d2:11:78:9b:0a:
24:35:02:1a:61:4a:0d:20:9d:06:dd:aa:c4:06:17:a9:1c:5a:
2d:d4:7d:ef:e0:3d:88:49:dc:d8:01:de:c3:d2:63:07:29:a3:
f5:86:7f:71:5a:cc:36:45:ef:a4:ab:44:66:02:98:b4:00:2d:
b8:89:b8:38:8a:48:a1:0f:5e:2d:63:04:9f:63:57:2d:9b:f3:
ad:2e:18:2a:96:25:5b:ac:77:a2:9c:ef:da:9b:ef:4d:f2:e9:
8b:08:4e:e8:20:92:62:e8:8c:be:d4:71:f2:c0:03:b7:82:df:
2c:0a:60:28:01:42:cc:3f:3f:02:34:2e:ae:28:bb:ea:6b:a3:
7f:2b:47:10:42:f2:10:a4:cb:b6:ab:fb:f7:f1:e4:bc:ff:65:
74:87:72:0c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUe7fMG52vVoC7B+WX/6JDLDiuwncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjYwNzM3MDJaFw0yNjA1MjUwNzQyMDJaMDMxMTAvBgNV
BAMTKEYzOTI0MTkxNUVDOEZBQkY4Q0Q0REUxMDYwNTU5MzQ5N0YzREVBRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxvf6SCykuGk5vppTDvvGOC+g8
ngQjspTVLeBkvjyvryIrXaZzsZbNN32NvIm6Fi1wZj81TGiiPXlbmXdtrv2gWS5C
JUrl+aXRPKwqLNrwseDbqLwnID1SgdkyB1qO5ekRaVWHP3hp9K0gKxyA3oUiyzhC
e4i3F2Ep0V11ml6zOyRAR2scrVHPn3l+afSPwVXB5YksElw6t8MFhAmpvLrdTb5S
9TgJFNxEep3Uv1zq4T6chAlIsfKSyasNs2JjFgnaKn6qO3R9XdbWXoxen3iAxzda
ye9PzJ2V/sFMsGCUgimOB80GVtqn9hfgQtu6oUSLSzqMLGthKJHrLUWJr8GVAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU85JBkV7I+r+M1N4QYFWTSX896vswHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjI2MzYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGvM
MA0GCSqGSIb3DQEBCwUAA4IBAQAfMVpBwj7XGSaWBhPoC7zC1xuQP3AZNpjRwl6f
HUQy9YHlct6HkPmFKzNYK9VVedw59Q/QWUM0lc2dTVmyQW+bZdc7NNs7qKPmg9wB
qwC09hHV3hVT2STs2rLeU2m0VszXZCyupCbE0hF4mwokNQIaYUoNIJ0G3arEBhep
HFot1H3v4D2ISdzYAd7D0mMHKaP1hn9xWsw2Re+kq0RmApi0AC24ibg4ikihD14t
YwSfY1ctm/OtLhgqliVbrHeinO/am+9N8umLCE7oIJJi6Iy+1HHywAO3gt8sCmAo
AULMPz8CNC6uKLvqa6N/K0cQQvIQpMu2q/v38eS8/2V0h3IM
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:31:31 2025 by rpki-client