Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366536353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366536353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: iVXzjVlWoFRb+Agx2z/AIlZ+A2yzGeauVAISr1AJVds=
Subject key identifier: 47:45:B7:03:65:3C:0B:58:14:04:90:05:A3:60:63:16:CA:93:87:1B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 188AAC572619B49C4019E3A14B9B563C7B0201F6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366536353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 15:54:02 +0000
ROA not before: Sat 24 May 2025 15:49:02 +0000
ROA not after: Sat 23 May 2026 15:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6e65::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 05:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8a:ac:57:26:19:b4:9c:40:19:e3:a1:4b:9b:56:3c:7b:02:01:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 15:49:02 2025 GMT
Not After : May 23 15:54:02 2026 GMT
Subject: CN=4745B703653C0B5814049005A3606316CA93871B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:4c:9e:76:60:24:b2:34:4d:b5:27:bf:40:
1d:ae:07:cd:5a:c0:d6:b0:66:fc:41:d7:17:d0:c5:
18:f7:b0:9b:e3:7d:4f:33:9e:0e:d1:22:cc:2e:78:
d2:93:b5:32:83:b7:03:c4:61:f9:49:ce:ad:db:aa:
7b:c4:f7:09:96:c0:f3:26:4a:86:b8:16:55:42:3f:
a9:ec:08:01:39:1d:8b:b3:fc:e2:0a:89:87:79:50:
1c:ad:4c:98:28:16:0a:96:af:1e:a6:e3:41:88:c3:
26:28:ae:f7:0f:4c:c4:19:e5:28:18:b7:25:63:66:
bd:a0:40:f9:ba:d9:98:1a:5a:7b:87:2d:e3:d2:2e:
3b:00:4b:bb:74:ce:0d:ab:29:aa:ee:c7:bc:c0:5d:
5d:3b:35:30:f4:e8:33:b3:19:1a:99:3f:70:85:c3:
53:b0:57:87:64:76:23:39:77:73:c5:81:27:a2:a4:
72:26:73:68:1e:0b:6b:9c:b2:ad:21:65:b6:19:18:
cc:4a:64:f9:37:54:d0:e9:1c:d5:7a:7f:fe:11:be:
0d:04:2a:7e:f3:f3:4e:e9:c9:93:41:57:fe:cc:b3:
d2:0d:9c:f4:3f:9a:23:26:c4:00:b7:21:a4:1f:94:
e7:51:44:dc:28:8f:09:3a:cc:ee:1e:7e:1f:74:0b:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:45:B7:03:65:3C:0B:58:14:04:90:05:A3:60:63:16:CA:93:87:1B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366536353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e65::/48
Signature Algorithm: sha256WithRSAEncryption
a7:3a:20:2b:20:16:74:bd:22:27:93:d5:0d:a4:9e:49:54:97:
20:ff:72:dd:e7:98:d6:ff:be:c7:e2:6b:09:a9:48:9d:08:a2:
94:07:b2:4b:de:73:34:50:5b:a3:3e:af:ef:10:a4:9e:9d:ed:
83:ca:87:bf:27:6d:db:d2:f0:48:25:c6:2a:66:7f:14:bf:16:
93:f2:a0:3d:81:1d:39:85:40:4b:dd:11:34:46:61:6e:61:d3:
5a:85:04:6e:63:58:24:6c:5e:f1:8a:cf:2e:ec:84:98:fe:9d:
17:16:17:05:c7:55:4d:65:8f:ed:97:49:ba:39:6c:aa:38:2a:
03:4e:a4:39:8e:07:b1:d7:92:5e:c5:15:51:61:71:25:5e:b7:
84:f0:e4:79:30:38:7d:ed:29:38:f0:d9:9b:41:33:5a:9e:6a:
ee:c7:ce:27:ff:0b:d2:34:6b:72:b4:0f:ff:f5:30:cc:fe:57:
a7:ce:4f:47:ff:78:f6:a0:07:c5:bc:83:22:a3:60:04:8b:34:
b2:a8:8c:7c:7b:28:40:82:c2:22:d5:26:98:ef:12:b2:36:75:
4e:cd:64:65:15:79:58:d4:a6:92:1f:c6:3a:51:5f:eb:9c:94:
28:e4:53:68:b2:a2:fe:e1:85:3f:4c:94:94:d5:d3:31:b7:b8:
a6:70:b3:8b
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUGIqsVyYZtJxAGeOhS5tWPHsCAfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjQxNTQ5MDJaFw0yNjA1MjMxNTU0MDJaMDMxMTAvBgNV
BAMTKDQ3NDVCNzAzNjUzQzBCNTgxNDA0OTAwNUEzNjA2MzE2Q0E5Mzg3MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1j0yedmAksjRNtSe/QB2uB81a
wNawZvxB1xfQxRj3sJvjfU8zng7RIswueNKTtTKDtwPEYflJzq3bqnvE9wmWwPMm
Soa4FlVCP6nsCAE5HYuz/OIKiYd5UBytTJgoFgqWrx6m40GIwyYorvcPTMQZ5SgY
tyVjZr2gQPm62ZgaWnuHLePSLjsAS7t0zg2rKarux7zAXV07NTD06DOzGRqZP3CF
w1OwV4dkdiM5d3PFgSeipHImc2geC2ucsq0hZbYZGMxKZPk3VNDpHNV6f/4Rvg0E
Kn7z807pyZNBV/7Ms9INnPQ/miMmxAC3IaQflOdRRNwojwk6zO4efh90CymZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUR0W3A2U8C1gUBJAFo2BjFsqThxswHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjUzNjM1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRuZTAN
BgkqhkiG9w0BAQsFAAOCAQEApzogKyAWdL0iJ5PVDaSeSVSXIP9y3eeY1v++x+Jr
CalInQiilAeyS95zNFBboz6v7xCknp3tg8qHvydt29LwSCXGKmZ/FL8Wk/KgPYEd
OYVAS90RNEZhbmHTWoUEbmNYJGxe8YrPLuyEmP6dFxYXBcdVTWWP7ZdJujlsqjgq
A06kOY4HsdeSXsUVUWFxJV63hPDkeTA4fe0pOPDZm0EzWp5q7sfOJ/8L0jRrcrQP
//UwzP5Xp85PR/949qAHxbyDIqNgBIs0sqiMfHsoQILCItUmmO8SsjZ1Ts1kZRV5
WNSmkh/GOlFf65yUKORTaLKi/uGFP0yUlNXTMbe4pnCziw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:26:08 2025 by rpki-client