Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366436633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366436633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: HjVTLXAAoYlKC4Go7b5e5BQ8X+/E8/LVWpKlwHibBw4=
Subject key identifier: A5:D6:43:40:C3:19:06:DD:81:C2:C3:98:DD:8C:0A:AE:68:7C:F4:CF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 587E528D31DF6BF4509CA47BEF511B31FA5F73AD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366436633a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 28 May 2025 20:48:01 +0000
ROA not before: Wed 28 May 2025 20:43:01 +0000
ROA not after: Wed 27 May 2026 20:48:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6d6c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 14:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7e:52:8d:31:df:6b:f4:50:9c:a4:7b:ef:51:1b:31:fa:5f:73:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 20:43:01 2025 GMT
Not After : May 27 20:48:01 2026 GMT
Subject: CN=A5D64340C31906DD81C2C398DD8C0AAE687CF4CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:2c:01:75:60:9b:14:6a:05:48:ba:45:8a:
16:9f:e5:99:38:5a:27:34:63:5d:ef:c2:1b:9e:4b:
a5:1f:9d:e8:61:0f:a1:9b:9c:ad:3a:a0:c1:e6:be:
e2:d8:30:66:7e:7b:9c:e5:f3:64:3d:0b:a6:71:cf:
81:66:3a:e8:7a:67:92:e0:b2:dd:ac:d0:23:b6:b1:
d1:e0:15:a7:8b:a4:91:ef:61:06:3c:b6:26:f4:d1:
e6:69:82:6d:bf:c1:96:be:67:f3:10:3f:4b:9f:a0:
73:f2:6b:fe:67:ef:f9:c6:d6:9e:8f:15:49:02:f4:
f8:6c:7a:bc:f6:fc:a9:eb:46:81:5a:98:9f:c0:3e:
0b:ff:7c:81:e7:21:60:61:c4:d8:c8:c3:c8:4d:6a:
81:7f:19:8c:7b:a5:ca:2c:55:1e:68:ec:82:a9:77:
d3:d9:5f:d3:60:dd:74:c0:e1:ee:03:75:4d:59:df:
2a:c0:48:64:c5:6d:b1:cb:b0:da:2f:f8:d7:20:d2:
88:6f:79:2f:38:38:26:a1:4f:eb:bd:25:7e:df:61:
d5:58:bc:e3:3d:16:58:5b:88:c4:4f:9d:ae:29:a4:
25:d7:8c:ab:58:90:ab:c5:73:09:63:48:e3:dd:8e:
ec:56:f0:27:43:da:60:37:0e:9f:9c:73:f8:6a:04:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D6:43:40:C3:19:06:DD:81:C2:C3:98:DD:8C:0A:AE:68:7C:F4:CF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366436633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d6c::/48
Signature Algorithm: sha256WithRSAEncryption
56:be:cb:3d:37:4a:fe:ef:27:5e:68:3d:d4:80:ce:92:c2:ea:
4e:43:19:c4:37:fe:3d:5b:74:a4:fd:a3:43:b3:99:67:e7:e8:
fb:1d:47:88:9d:06:50:b6:87:a1:57:c0:c5:db:b8:31:6c:df:
68:e6:88:99:64:1c:99:3c:96:02:51:75:10:ea:5d:8d:0c:db:
4c:42:8b:35:74:5f:2f:5a:81:9f:2f:d8:c9:36:f1:c7:06:f6:
9a:94:cc:02:45:e2:cd:74:2c:cc:7f:c3:19:52:6e:fe:af:4f:
e4:28:1a:33:0e:2c:c8:c0:47:72:f1:f1:bd:33:3d:47:44:e7:
a3:32:7c:a8:e6:89:1f:9e:07:42:63:73:0e:b0:6b:d5:cd:d1:
ea:4f:ac:12:b8:b3:ad:10:74:58:56:66:5f:da:01:1e:d8:72:
c1:b0:75:59:8b:b6:f9:61:bf:91:6d:4f:a9:a0:66:f4:69:eb:
ce:15:1f:32:56:b4:c3:0f:32:85:dc:c8:78:a7:2d:05:4a:5f:
06:5b:2e:28:3e:f4:5a:7f:fc:b5:d9:c5:24:2f:d0:be:18:47:
6d:1b:b5:ff:1e:2e:a9:76:69:2c:b2:3c:ca:39:99:19:d4:b3:
16:6d:39:9a:a9:0d:10:df:aa:3d:75:48:82:5f:1f:e9:d2:80:
4f:97:61:f8
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUWH5SjTHfa/RQnKR771EbMfpfc60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjgyMDQzMDFaFw0yNjA1MjcyMDQ4MDFaMDMxMTAvBgNV
BAMTKEE1RDY0MzQwQzMxOTA2REQ4MUMyQzM5OEREOEMwQUFFNjg3Q0Y0Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51CwBdWCbFGoFSLpFihaf5Zk4
Wic0Y13vwhueS6UfnehhD6GbnK06oMHmvuLYMGZ+e5zl82Q9C6Zxz4FmOuh6Z5Lg
st2s0CO2sdHgFaeLpJHvYQY8tib00eZpgm2/wZa+Z/MQP0ufoHPya/5n7/nG1p6P
FUkC9Phserz2/KnrRoFamJ/APgv/fIHnIWBhxNjIw8hNaoF/GYx7pcosVR5o7IKp
d9PZX9Ng3XTA4e4DdU1Z3yrASGTFbbHLsNov+Ncg0ohveS84OCahT+u9JX7fYdVY
vOM9FlhbiMRPna4ppCXXjKtYkKvFcwljSOPdjuxW8CdD2mA3Dp+cc/hqBFS7AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUpdZDQMMZBt2BwsOY3YwKrmh89M8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjQzNjYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAVr7LPTdK/u8nXmg91IDOksLqTkMZxDf+PVt0pP2j
Q7OZZ+fo+x1HiJ0GULaHoVfAxdu4MWzfaOaImWQcmTyWAlF1EOpdjQzbTEKLNXRf
L1qBny/YyTbxxwb2mpTMAkXizXQszH/DGVJu/q9P5CgaMw4syMBHcvHxvTM9R0Tn
ozJ8qOaJH54HQmNzDrBr1c3R6k+sErizrRB0WFZmX9oBHthywbB1WYu2+WG/kW1P
qaBm9GnrzhUfMla0ww8yhdzIeKctBUpfBlsuKD70Wn/8tdnFJC/QvhhHbRu1/x4u
qXZpLLI8yjmZGdSzFm05mqkNEN+qPXVIgl8f6dKAT5dh+A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:30:36 2025 by rpki-client