Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366536303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366536303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 8EkwudVNpseTEvxLdPbOm/tpvkVTHhoqy4eBHdDUo9Q=
Subject key identifier: B9:00:3B:C2:8E:B9:BA:B0:9E:1C:F0:DA:05:1E:2F:87:4A:E4:A7:DD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2A193BCC6EF40EE09598F5321B25A047F6A61CD0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366536303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:10:58 +0000
ROA not before: Sat 08 Feb 2025 20:05:58 +0000
ROA not after: Sat 07 Feb 2026 20:10:58 +0000
asID: 16909
IP address blocks: 2a14:7584:6e60::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:19:3b:cc:6e:f4:0e:e0:95:98:f5:32:1b:25:a0:47:f6:a6:1c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:05:58 2025 GMT
Not After : Feb 7 20:10:58 2026 GMT
Subject: CN=B9003BC28EB9BAB09E1CF0DA051E2F874AE4A7DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:82:79:67:da:e3:08:04:55:4a:7d:7d:19:
c5:a3:0e:a2:32:83:96:d1:c6:5b:ff:49:6e:65:33:
fa:32:ab:78:58:05:c5:90:6f:47:b0:7b:98:91:62:
32:12:23:6d:a3:d2:6a:0f:7a:e9:ad:f3:2c:2d:91:
a6:5d:0b:8b:be:1c:30:a3:6d:a1:62:86:6a:57:24:
ea:db:51:73:18:27:7f:ef:cc:ad:07:43:09:45:92:
8d:e5:01:9e:91:42:a9:46:86:2e:ed:55:59:f8:6f:
f6:00:9d:b1:68:a7:d5:a3:81:11:80:23:04:ed:15:
df:dd:90:a8:90:ee:38:27:b8:56:c8:94:63:f6:b3:
73:bb:48:28:6d:fe:4b:1e:f3:ec:b8:76:28:06:c5:
34:80:07:d0:d9:f1:aa:71:7e:93:93:e8:50:d8:9c:
9f:16:4c:bc:e1:b2:ff:bf:15:80:58:1f:3c:2b:b6:
98:13:c7:53:25:2d:2b:66:29:ed:5c:42:b3:61:93:
47:ef:0d:03:1f:31:a9:fc:29:0f:5d:fb:95:d2:8a:
db:41:14:27:d7:a6:27:fb:2f:7e:f2:a3:76:ee:89:
25:ee:ef:02:73:1b:0c:0f:f3:5b:23:68:d3:ef:d0:
1b:88:ac:cf:37:b1:8e:da:4a:c5:c3:34:5b:4e:13:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:3B:C2:8E:B9:BA:B0:9E:1C:F0:DA:05:1E:2F:87:4A:E4:A7:DD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366536303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e60::/48
Signature Algorithm: sha256WithRSAEncryption
8f:9d:d6:db:ad:a6:52:02:4a:08:43:6d:f4:30:b1:c6:b4:bc:
6e:29:b3:92:29:63:8e:34:db:cd:8a:7a:b5:53:c0:cb:09:9f:
7e:83:1a:28:0b:9f:21:9f:33:58:18:aa:3f:41:3f:69:4e:3c:
72:e3:cb:1f:5b:76:1d:36:d0:76:56:3b:85:0b:4d:d9:ef:51:
ab:42:18:cc:ce:8a:08:6b:33:9f:7d:a9:c4:0f:20:72:b1:5c:
5f:81:95:08:0a:88:9e:b1:19:c4:2b:46:2d:ad:e6:0b:eb:d6:
ee:82:df:64:cf:08:86:92:a0:9a:98:13:62:83:9c:02:c7:d7:
61:a8:57:b1:7a:28:2a:90:5e:a1:d4:e6:a7:4e:e3:5d:6d:a1:
7a:7f:59:9c:5e:5e:3b:27:f0:67:91:ab:3e:34:6c:8d:26:c9:
2b:f5:1f:d3:bb:71:37:a7:5e:1f:fe:74:42:6a:43:c3:09:c2:
56:94:b0:9b:4a:1d:7d:a6:38:54:93:98:de:56:2b:e3:18:52:
2d:7a:77:22:5b:12:f9:02:4c:cd:d3:4d:86:b0:96:1f:d4:3f:
69:2b:85:d1:41:98:53:c8:32:0c:9b:b3:1e:ae:85:1b:fd:20:
68:9e:be:ce:da:ac:2b:45:c0:37:a8:b6:46:15:54:af:31:da:
67:77:c5:98
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUKhk7zG70DuCVmPUyGyWgR/amHNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMDgyMDA1NThaFw0yNjAyMDcyMDEwNThaMDMxMTAvBgNV
BAMTKEI5MDAzQkMyOEVCOUJBQjA5RTFDRjBEQTA1MUUyRjg3NEFFNEE3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9IJ5Z9rjCARVSn19GcWjDqIy
g5bRxlv/SW5lM/oyq3hYBcWQb0ewe5iRYjISI22j0moPeumt8ywtkaZdC4u+HDCj
baFihmpXJOrbUXMYJ3/vzK0HQwlFko3lAZ6RQqlGhi7tVVn4b/YAnbFop9WjgRGA
IwTtFd/dkKiQ7jgnuFbIlGP2s3O7SCht/kse8+y4digGxTSAB9DZ8apxfpOT6FDY
nJ8WTLzhsv+/FYBYHzwrtpgTx1MlLStmKe1cQrNhk0fvDQMfMan8KQ9d+5XSittB
FCfXpif7L37yo3buiSXu7wJzGwwP81sjaNPv0BuIrM83sY7aSsXDNFtOE5r3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUuQA7wo65urCeHPDaBR4vh0rkp90wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjUzNjMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRuYDAN
BgkqhkiG9w0BAQsFAAOCAQEAj53W262mUgJKCENt9DCxxrS8bimzkiljjjTbzYp6
tVPAywmffoMaKAufIZ8zWBiqP0E/aU48cuPLH1t2HTbQdlY7hQtN2e9Rq0IYzM6K
CGszn32pxA8gcrFcX4GVCAqInrEZxCtGLa3mC+vW7oLfZM8IhpKgmpgTYoOcAsfX
YahXsXooKpBeodTmp07jXW2hen9ZnF5eOyfwZ5GrPjRsjSbJK/Uf07txN6deH/50
QmpDwwnCVpSwm0odfaY4VJOY3lYr4xhSLXp3IlsS+QJMzdNNhrCWH9Q/aSuF0UGY
U8gyDJuzHq6FG/0gaJ6+ztqsK0XAN6i2RhVUrzHaZ3fFmA==
-----END CERTIFICATE-----
Generated at Sat May 10 10:33:29 2025 by rpki-client