Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366362343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366362343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5+2EST/04sx/b4HGgQn536tVDlZpBpG2f0ApbzvFUjU=
Subject key identifier: EE:FD:63:30:ED:C6:73:61:8E:52:49:09:0C:EE:62:EC:5B:B0:4E:C2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 50A9F54A4B337859F1AE2BC2C6DA01B4BD277591
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366362343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 02:54:02 +0000
ROA not before: Sun 25 May 2025 02:49:02 +0000
ROA not after: Sun 24 May 2026 02:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6cb4::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a9:f5:4a:4b:33:78:59:f1:ae:2b:c2:c6:da:01:b4:bd:27:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 02:49:02 2025 GMT
Not After : May 24 02:54:02 2026 GMT
Subject: CN=EEFD6330EDC673618E5249090CEE62EC5BB04EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:66:81:c4:d8:03:17:38:6b:ac:e2:d7:ba:
25:3a:19:33:1f:14:8b:93:89:8a:86:b9:47:26:0f:
43:af:d7:ac:f3:99:c4:b2:2b:7c:96:bd:10:3c:49:
1d:6c:b7:12:c4:6c:62:f6:31:f4:95:58:6b:f4:39:
68:32:6e:e0:eb:78:85:53:5e:30:c6:b7:a7:fb:43:
59:76:12:a4:df:3c:9d:5c:c3:70:d1:28:7b:02:f6:
c4:8e:f6:e7:28:b0:59:4a:55:de:fd:1a:00:a4:96:
5b:1b:1f:8e:7b:56:a1:e0:59:7d:d8:7c:8c:39:e7:
61:c0:56:e2:80:ee:cb:2c:bf:ed:29:ae:77:fc:db:
cd:6c:2a:31:2e:90:d9:7a:d9:14:e2:67:fa:9e:83:
64:5e:7c:cf:6f:7f:c5:7d:60:fb:c2:78:73:e8:17:
b4:25:c8:84:a6:9c:e3:d4:18:b3:0b:1e:ee:e1:af:
7e:2c:36:94:cd:1c:c5:e4:42:1b:10:70:68:c8:2f:
e0:94:2f:6b:5d:9c:4a:a6:30:ec:86:f7:b2:ac:b1:
2a:35:ac:48:4a:a4:2d:2c:3b:4d:f7:52:27:7b:b1:
18:d5:06:52:ab:98:da:d6:49:d3:b8:06:b8:58:3c:
9b:b7:99:14:93:6c:5a:fb:cf:e1:d5:dc:42:49:f9:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:63:30:ED:C6:73:61:8E:52:49:09:0C:EE:62:EC:5B:B0:4E:C2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366362343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6cb4::/48
Signature Algorithm: sha256WithRSAEncryption
1c:a8:d0:ab:2a:b0:67:f2:ac:b6:13:ec:ec:af:47:8d:6a:a4:
1b:67:92:8f:98:15:9f:af:f1:b2:3b:ba:e9:02:e4:7a:7b:62:
0e:69:fb:6e:c9:2d:02:9d:80:6e:22:19:ef:7d:c6:3c:b5:02:
03:8c:97:1a:63:61:e3:89:fd:22:f6:97:2b:f4:3b:32:9e:ca:
b4:e8:f0:94:f3:25:a8:08:5b:81:17:8e:10:45:ed:bc:b5:ca:
f1:ba:f3:a1:79:b8:ea:c2:1e:67:db:bb:b8:c3:95:31:ac:52:
69:e2:c9:1e:93:c3:22:5c:51:a9:75:84:67:a2:f2:6c:a6:02:
59:19:85:e1:8a:b0:f5:34:1a:b1:04:40:4a:63:2f:1c:e7:05:
fa:65:6c:13:ba:a6:c2:f4:a2:7d:3e:f2:fd:b5:75:fc:c9:1a:
49:00:27:a8:21:c1:37:8f:92:97:f1:2b:a6:27:6e:75:1a:4a:
c3:c6:73:f1:b4:44:0a:df:e0:97:33:9f:3c:ee:54:45:d3:17:
77:d5:51:35:fc:ff:27:95:4c:11:ca:fe:48:d4:77:b8:72:2c:
da:75:75:90:58:e2:42:09:6d:02:27:cc:05:81:91:a1:57:3a:
e6:c7:3a:0a:5a:6d:2d:b2:ea:f5:1e:68:5b:3a:2e:98:c7:d0:
45:2f:15:3b
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUUKn1SkszeFnxrivCxtoBtL0ndZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUwMjQ5MDJaFw0yNjA1MjQwMjU0MDJaMDMxMTAvBgNV
BAMTKEVFRkQ2MzMwRURDNjczNjE4RTUyNDkwOTBDRUU2MkVDNUJCMDRFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXWaBxNgDFzhrrOLXuiU6GTMf
FIuTiYqGuUcmD0Ov16zzmcSyK3yWvRA8SR1stxLEbGL2MfSVWGv0OWgybuDreIVT
XjDGt6f7Q1l2EqTfPJ1cw3DRKHsC9sSO9ucosFlKVd79GgCkllsbH457VqHgWX3Y
fIw552HAVuKA7sssv+0prnf8281sKjEukNl62RTiZ/qeg2RefM9vf8V9YPvCeHPo
F7QlyISmnOPUGLMLHu7hr34sNpTNHMXkQhsQcGjIL+CUL2tdnEqmMOyG97KssSo1
rEhKpC0sO033Uid7sRjVBlKrmNrWSdO4BrhYPJu3mRSTbFr7z+HV3EJJ+cWRAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU7v1jMO3Gc2GOUkkJDO5i7FuwTsIwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjM2MjM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRstDAN
BgkqhkiG9w0BAQsFAAOCAQEAHKjQqyqwZ/KsthPs7K9HjWqkG2eSj5gVn6/xsju6
6QLkentiDmn7bsktAp2AbiIZ733GPLUCA4yXGmNh44n9IvaXK/Q7Mp7KtOjwlPMl
qAhbgReOEEXtvLXK8brzoXm46sIeZ9u7uMOVMaxSaeLJHpPDIlxRqXWEZ6LybKYC
WRmF4Yqw9TQasQRASmMvHOcF+mVsE7qmwvSifT7y/bV1/MkaSQAnqCHBN4+Sl/Er
pidudRpKw8Zz8bRECt/glzOfPO5URdMXd9VRNfz/J5VMEcr+SNR3uHIs2nV1kFji
QgltAifMBYGRoVc65sc6ClptLbLq9R5oWzoumMfQRS8VOw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:01 2025 by rpki-client