Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366363643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366363643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CUJHMUPZqWG09CLn9E5fvOWB4QZ0OX+5Giz+Z/tG2Fw=
Subject key identifier: A7:87:D9:64:B7:79:FE:09:D4:F5:87:37:00:6E:49:16:32:69:F0:69
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 60F819DC5F18AA2AFA4F588514F442B10FD2FBC1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366363643a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 28 May 2025 21:00:02 +0000
ROA not before: Wed 28 May 2025 20:55:02 +0000
ROA not after: Wed 27 May 2026 21:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ccd::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f8:19:dc:5f:18:aa:2a:fa:4f:58:85:14:f4:42:b1:0f:d2:fb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 20:55:02 2025 GMT
Not After : May 27 21:00:02 2026 GMT
Subject: CN=A787D964B779FE09D4F58737006E49163269F069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:03:cd:20:dc:90:fb:39:12:46:71:ef:aa:
3a:3c:90:08:95:27:ee:53:56:c2:34:93:2c:56:ca:
2a:47:61:97:f0:3c:16:84:37:28:21:f9:c2:be:00:
ea:53:70:1d:8e:18:0c:4d:9e:83:81:00:88:05:1b:
8d:9d:d4:4f:33:56:0e:0f:a8:b0:f6:c5:1c:dc:c4:
ba:e7:e6:81:65:28:96:40:53:d7:cd:5e:4a:35:8e:
6f:65:b2:03:46:93:2b:4d:d8:b9:61:31:c5:93:d1:
4c:26:11:74:a6:0f:04:91:34:38:38:19:48:ee:db:
2a:c8:e4:cb:d1:5e:55:5e:22:1f:fa:18:91:c6:78:
a2:43:00:d9:77:13:1b:18:c2:2e:33:31:dc:2f:b8:
0c:83:4a:93:bc:45:05:27:b6:5d:0c:0d:18:5e:af:
f0:ab:5b:76:21:13:5f:be:42:9b:c6:fe:89:ee:d6:
71:52:a8:d2:ac:54:eb:cf:2c:ec:d8:df:fe:0e:14:
56:c3:51:b2:c5:5a:70:e9:ef:d4:8e:3b:ca:a3:d1:
1e:60:d3:ed:bd:ad:59:8d:ca:42:35:30:ca:25:ac:
23:3c:8b:80:96:ed:ef:35:9f:64:6e:64:dc:68:0e:
2f:fa:f8:1c:29:c8:fc:c0:aa:6c:ea:f0:d3:8a:fb:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:87:D9:64:B7:79:FE:09:D4:F5:87:37:00:6E:49:16:32:69:F0:69
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366363643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ccd::/48
Signature Algorithm: sha256WithRSAEncryption
27:86:ab:44:76:2d:f0:85:77:2f:70:46:d9:72:6d:cf:c2:17:
41:e9:0d:c4:99:ff:e0:af:9f:eb:a4:e9:b8:57:36:51:b6:bd:
0c:71:6e:0b:81:0d:0d:95:78:f8:33:94:dd:14:a0:cf:c0:d7:
75:4c:c1:e6:57:f4:30:96:c6:23:8e:08:ae:d8:a6:10:69:2f:
7c:58:11:72:9e:82:55:c7:19:e9:7d:c9:63:47:d3:e1:f7:d3:
56:4b:80:1e:0a:c8:5e:cc:c3:27:18:6d:bb:2e:83:69:39:4b:
71:2b:6a:fd:05:ff:b9:ad:fd:43:60:70:8a:d5:b8:cf:eb:75:
be:e1:63:69:e8:24:51:87:ff:c4:ca:f6:1f:81:06:38:be:ef:
05:a0:c5:54:89:43:dd:74:60:b6:39:b7:5e:89:88:cf:26:ed:
e3:46:e1:62:9d:8a:f4:b6:dc:f7:98:0c:29:5c:15:3d:f4:3d:
02:49:da:e1:b5:b9:d0:d5:a8:11:61:e4:50:1f:05:fb:6c:b6:
00:4a:1c:1b:e0:6a:78:ba:1e:38:d8:e9:38:33:28:a7:c1:8e:
3f:37:01:7b:7e:be:9c:e6:a1:36:bf:3f:80:38:aa:6e:f7:1e:
8d:16:f7:0d:61:7d:c4:1c:08:af:7b:95:a4:f8:2f:6a:9f:3d:
7b:40:cf:69
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYPgZ3F8Yqir6T1iFFPRCsQ/S+8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjgyMDU1MDJaFw0yNjA1MjcyMTAwMDJaMDMxMTAvBgNV
BAMTKEE3ODdEOTY0Qjc3OUZFMDlENEY1ODczNzAwNkU0OTE2MzI2OUYwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkagPNINyQ+zkSRnHvqjo8kAiV
J+5TVsI0kyxWyipHYZfwPBaENygh+cK+AOpTcB2OGAxNnoOBAIgFG42d1E8zVg4P
qLD2xRzcxLrn5oFlKJZAU9fNXko1jm9lsgNGkytN2LlhMcWT0UwmEXSmDwSRNDg4
GUju2yrI5MvRXlVeIh/6GJHGeKJDANl3ExsYwi4zMdwvuAyDSpO8RQUntl0MDRhe
r/CrW3YhE1++QpvG/onu1nFSqNKsVOvPLOzY3/4OFFbDUbLFWnDp79SOO8qj0R5g
0+29rVmNykI1MMolrCM8i4CW7e81n2RuZNxoDi/6+BwpyPzAqmzq8NOK+5QZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUp4fZZLd5/gnU9Yc3AG5JFjJp8GkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjM2MzY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRszTAN
BgkqhkiG9w0BAQsFAAOCAQEAJ4arRHYt8IV3L3BG2XJtz8IXQekNxJn/4K+f66Tp
uFc2Uba9DHFuC4ENDZV4+DOU3RSgz8DXdUzB5lf0MJbGI44IrtimEGkvfFgRcp6C
VccZ6X3JY0fT4ffTVkuAHgrIXszDJxhtuy6DaTlLcStq/QX/ua39Q2BwitW4z+t1
vuFjaegkUYf/xMr2H4EGOL7vBaDFVIlD3XRgtjm3XomIzybt40bhYp2K9Lbc95gM
KVwVPfQ9Akna4bW50NWoEWHkUB8F+2y2AEocG+BqeLoeONjpODMop8GOPzcBe36+
nOahNr8/gDiqbvcejRb3DWF9xBwIr3uVpPgvap89e0DPaQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:01:38 2025 by rpki-client