Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366663303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366663303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: uzYeb1kzfdPYDpSeeJA+xZcmRmBByFT0tp0zwiINVb0=
Subject key identifier: E0:2C:A8:C6:A7:D8:4C:08:D8:00:65:C9:D6:C4:8E:A5:21:3B:F7:71
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7E382B4573507C6955EA141FE1FC0E2449A49612
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366663303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Feb 2025 15:03:12 +0000
ROA not before: Mon 10 Feb 2025 14:58:12 +0000
ROA not after: Mon 09 Feb 2026 15:03:12 +0000
asID: 16909
IP address blocks: 2a14:7584:6fc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:38:2b:45:73:50:7c:69:55:ea:14:1f:e1:fc:0e:24:49:a4:96:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 10 14:58:12 2025 GMT
Not After : Feb 9 15:03:12 2026 GMT
Subject: CN=E02CA8C6A7D84C08D80065C9D6C48EA5213BF771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:75:79:d7:be:e7:6a:f9:ec:63:1d:86:56:
33:d2:48:49:9b:e3:69:a8:1e:ed:34:8a:7c:84:ef:
c3:88:a0:5b:b8:97:90:30:70:34:7f:4f:a0:59:eb:
3c:46:ae:5b:23:23:2d:54:31:5d:d5:9a:e1:44:3f:
41:b9:19:48:89:6c:2d:1c:a6:31:d2:2f:26:46:ac:
39:da:d6:b0:0a:7c:e6:ed:75:21:dd:03:2a:a4:ae:
44:94:cb:60:86:e5:d6:8d:ca:21:11:b2:64:c4:66:
83:67:70:4f:51:61:5d:06:98:d7:cb:97:8c:73:44:
a3:39:7d:8b:86:8f:ce:25:62:73:ed:89:17:f0:27:
3c:2d:a4:47:82:8b:9c:9f:a2:93:e8:c3:ce:37:4e:
36:22:7d:48:bb:ab:5b:20:ae:49:33:51:d4:2b:94:
dc:8f:c0:d3:59:ed:54:0c:5f:aa:56:80:2b:de:94:
26:22:57:27:1b:71:9d:70:eb:ea:97:6a:bb:68:cf:
d1:a5:a8:0a:a4:d9:3b:77:d3:a8:56:d7:1b:0d:a5:
81:91:c2:73:9a:fe:17:d6:c6:bd:f0:38:4a:cc:67:
ca:15:62:09:84:27:da:54:52:38:7c:3b:fb:ae:db:
07:4f:69:b3:f2:cf:4a:f5:bf:29:be:f9:c6:14:45:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2C:A8:C6:A7:D8:4C:08:D8:00:65:C9:D6:C4:8E:A5:21:3B:F7:71
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366663303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6fc0::/48
Signature Algorithm: sha256WithRSAEncryption
96:68:02:1e:bd:1e:42:f0:47:21:ab:74:bd:6a:29:e3:33:f9:
4b:c7:0f:14:66:87:aa:9a:8b:d2:95:c9:a0:21:d1:43:e7:bd:
32:3b:ad:8d:ff:52:1e:83:19:1c:c6:6c:b1:5f:03:91:cf:33:
0e:c0:f8:48:99:0f:5e:33:0c:e4:20:7b:06:5d:2c:4a:34:b8:
41:c0:a9:de:e3:b7:53:22:b9:13:e4:05:88:7a:b1:53:03:3b:
d7:8c:be:e1:db:96:47:aa:61:e7:43:d3:c5:53:49:38:f1:82:
83:a8:de:c3:c2:84:aa:d7:4d:43:b2:81:ff:62:66:b1:ba:d7:
a3:bf:36:d1:38:70:75:91:c9:d4:36:12:d0:4c:b4:2b:4d:0f:
d9:9f:64:5e:4e:20:73:c3:46:73:c5:0d:d4:cb:08:91:13:31:
20:49:b7:3b:bb:97:14:6a:12:ca:5c:8f:4b:9a:f5:3f:14:32:
5f:1e:2d:5b:50:ff:a9:4a:70:a0:ae:c8:52:01:5c:0d:98:66:
67:fe:71:c8:78:b4:14:6b:ba:e5:bc:e6:9e:4c:38:ae:c8:d3:
af:88:45:aa:40:af:e7:19:ed:c2:69:00:1e:f8:9d:aa:2e:9f:
1f:32:19:70:29:a1:5f:41:8f:8d:08:f5:cf:d5:ec:79:28:7f:
e0:b2:c8:2f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUfjgrRXNQfGlV6hQf4fwOJEmklhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMTAxNDU4MTJaFw0yNjAyMDkxNTAzMTJaMDMxMTAvBgNV
BAMTKEUwMkNBOEM2QTdEODRDMDhEODAwNjVDOUQ2QzQ4RUE1MjEzQkY3NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IXV5177navnsYx2GVjPSSEmb
42moHu00inyE78OIoFu4l5AwcDR/T6BZ6zxGrlsjIy1UMV3VmuFEP0G5GUiJbC0c
pjHSLyZGrDna1rAKfObtdSHdAyqkrkSUy2CG5daNyiERsmTEZoNncE9RYV0GmNfL
l4xzRKM5fYuGj84lYnPtiRfwJzwtpEeCi5yfopPow843TjYifUi7q1sgrkkzUdQr
lNyPwNNZ7VQMX6pWgCvelCYiVycbcZ1w6+qXartoz9GlqAqk2Tt306hW1xsNpYGR
wnOa/hfWxr3wOErMZ8oVYgmEJ9pUUjh8O/uu2wdPabPyz0r1vym++cYURfnxAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU4CyoxqfYTAjYAGXJ1sSOpSE793EwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjY2MzMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRvwDAN
BgkqhkiG9w0BAQsFAAOCAQEAlmgCHr0eQvBHIat0vWop4zP5S8cPFGaHqpqL0pXJ
oCHRQ+e9Mjutjf9SHoMZHMZssV8Dkc8zDsD4SJkPXjMM5CB7Bl0sSjS4QcCp3uO3
UyK5E+QFiHqxUwM714y+4duWR6ph50PTxVNJOPGCg6jew8KEqtdNQ7KB/2JmsbrX
o7820ThwdZHJ1DYS0Ey0K00P2Z9kXk4gc8NGc8UN1MsIkRMxIEm3O7uXFGoSylyP
S5r1PxQyXx4tW1D/qUpwoK7IUgFcDZhmZ/5xyHi0FGu65bzmnkw4rsjTr4hFqkCv
5xntwmkAHvidqi6fHzIZcCmhX0GPjQj1z9XseSh/4LLILw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:41 2025 by rpki-client