Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366530303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366530303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 1qMISUYMHFnynrUFBCIKyDbWUVniiiawB7WNNMBn5ow=
Subject key identifier: CA:F5:71:33:ED:82:64:42:97:1A:51:47:21:66:4D:3A:AB:38:C3:C1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4F926FBB9E9A88649687D99305E042A15B0BD79B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366530303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:10:30 +0000
ROA not before: Sat 08 Feb 2025 20:05:30 +0000
ROA not after: Sat 07 Feb 2026 20:10:30 +0000
asID: 16909
IP address blocks: 2a14:7584:6e00::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:92:6f:bb:9e:9a:88:64:96:87:d9:93:05:e0:42:a1:5b:0b:d7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:05:30 2025 GMT
Not After : Feb 7 20:10:30 2026 GMT
Subject: CN=CAF57133ED826442971A514721664D3AAB38C3C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:ce:b7:27:c0:94:d4:6e:60:ae:14:02:ba:
a0:6c:70:c6:2b:44:ae:b3:40:3f:bb:db:e9:80:6f:
bd:dd:d1:c9:b2:e1:78:fc:f7:85:c4:7c:ab:90:f7:
9f:81:3c:54:50:e4:50:22:2d:44:de:33:2b:66:d4:
74:d6:37:ec:fa:35:bb:b5:f0:99:40:3e:68:a8:a4:
87:a4:8d:eb:f0:d9:c1:e4:82:63:71:93:8e:c0:4a:
b1:56:cb:ea:5a:52:3a:d2:41:ec:6a:7b:fe:a7:6a:
db:da:54:6d:ce:31:83:71:64:a6:90:6a:5c:30:23:
78:4a:d5:5b:bb:31:89:8d:85:e9:65:a6:00:38:98:
06:ac:b3:e7:08:f3:06:ce:a5:b3:ad:37:6b:d9:bc:
ac:e8:56:71:84:35:13:d8:57:b4:33:36:9c:85:c6:
ac:5d:7e:81:fc:c1:0c:bb:08:99:21:00:15:df:f7:
cd:09:ed:ff:52:eb:06:04:f9:c0:52:94:fe:94:b1:
e8:42:00:88:b3:92:4d:11:0e:e2:8a:b5:4b:25:5f:
36:f1:b2:27:44:18:37:a5:03:99:3e:40:f1:95:f5:
eb:b0:78:92:e7:41:9c:ea:66:27:b6:d0:98:db:42:
e4:bd:78:13:7a:65:3a:29:9b:b5:a9:73:b5:a4:e7:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:71:33:ED:82:64:42:97:1A:51:47:21:66:4D:3A:AB:38:C3:C1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366530303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e00::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ea:87:65:f7:fb:f1:c3:c0:ab:23:d4:72:5d:fc:4a:6a:e2:
cf:38:f9:58:70:60:52:63:3f:2c:07:ee:c0:49:7a:89:6f:34:
8f:f0:30:08:dc:4e:af:eb:b8:5a:eb:20:08:77:cb:5f:53:c3:
ea:48:8a:54:15:0b:2c:7d:3e:14:0d:b8:01:9e:b1:3a:5d:fa:
52:ee:31:ca:1b:99:db:ff:58:ba:60:10:9c:6a:be:83:2e:53:
7f:b7:37:4d:d7:c7:5e:fd:82:c2:bf:9a:6a:e9:3a:ea:9d:be:
56:f3:bb:cc:de:90:39:71:e2:b5:65:a0:f4:7c:be:db:4e:26:
70:dd:c8:e9:2e:2a:8d:94:17:85:7a:c5:93:74:62:74:08:a9:
19:34:44:c7:bf:cf:9a:b5:83:5c:ec:09:79:b4:c0:b9:ad:47:
7f:e2:e0:92:44:72:b4:99:11:d3:79:9d:72:ec:f6:12:5e:0d:
81:ee:32:14:80:6c:c7:79:94:15:3c:19:f3:b7:cd:97:22:68:
01:e8:e0:8a:88:97:dd:61:6e:be:a6:15:91:27:db:53:e8:37:
c6:9e:65:d1:64:2e:cb:f0:07:4f:80:45:aa:ea:1a:fd:8c:36:
a0:59:85:c6:82:ec:b6:fc:92:81:f8:42:04:bd:4d:bf:0a:9b:
67:0b:d7:34
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUT5Jvu56aiGSWh9mTBeBCoVsL15swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMDgyMDA1MzBaFw0yNjAyMDcyMDEwMzBaMDMxMTAvBgNV
BAMTKENBRjU3MTMzRUQ4MjY0NDI5NzFBNTE0NzIxNjY0RDNBQUIzOEMzQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGj863J8CU1G5grhQCuqBscMYr
RK6zQD+72+mAb73d0cmy4Xj894XEfKuQ95+BPFRQ5FAiLUTeMytm1HTWN+z6Nbu1
8JlAPmiopIekjevw2cHkgmNxk47ASrFWy+paUjrSQexqe/6natvaVG3OMYNxZKaQ
alwwI3hK1Vu7MYmNhellpgA4mAass+cI8wbOpbOtN2vZvKzoVnGENRPYV7QzNpyF
xqxdfoH8wQy7CJkhABXf980J7f9S6wYE+cBSlP6UsehCAIizkk0RDuKKtUslXzbx
sidEGDelA5k+QPGV9euweJLnQZzqZie20JjbQuS9eBN6ZTopm7Wpc7Wk55K/AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUyvVxM+2CZEKXGlFHIWZNOqs4w8EwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjUzMDMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRuADAN
BgkqhkiG9w0BAQsFAAOCAQEAm+qHZff78cPAqyPUcl38Smrizzj5WHBgUmM/LAfu
wEl6iW80j/AwCNxOr+u4WusgCHfLX1PD6kiKVBULLH0+FA24AZ6xOl36Uu4xyhuZ
2/9YumAQnGq+gy5Tf7c3TdfHXv2Cwr+aauk66p2+VvO7zN6QOXHitWWg9Hy+204m
cN3I6S4qjZQXhXrFk3RidAipGTREx7/PmrWDXOwJebTAua1Hf+LgkkRytJkR03md
cuz2El4Nge4yFIBsx3mUFTwZ87fNlyJoAejgioiX3WFuvqYVkSfbU+g3xp5l0WQu
y/AHT4BFquoa/Yw2oFmFxoLstvySgfhCBL1NvwqbZwvXNA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:41 2025 by rpki-client