Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333536313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /vT9+0XtHhBFfGXNNuiOAcG2I0LKdNgEmBAQoV7gJQw=
Subject key identifier: 0C:67:45:B2:00:BE:A3:FD:06:CD:89:E8:4C:1F:ED:CB:90:6F:56:B5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 04A6E4ACF3F6FD9509C77362B1DD3B496B2C40D3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536313a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:30:34 +0000
ROA not before: Fri 20 Jun 2025 06:25:34 +0000
ROA not after: Fri 19 Jun 2026 06:30:34 +0000
asID: 16909
IP address blocks: 2a14:7581:3561::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a6:e4:ac:f3:f6:fd:95:09:c7:73:62:b1:dd:3b:49:6b:2c:40:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:25:34 2025 GMT
Not After : Jun 19 06:30:34 2026 GMT
Subject: CN=0C6745B200BEA3FD06CD89E84C1FEDCB906F56B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:c1:09:94:03:6f:45:da:f9:33:d3:8e:af:
29:0b:ad:98:1e:e1:0a:6f:fe:97:4a:1b:47:93:5e:
cc:d1:32:1c:f8:41:3a:c7:29:20:2b:61:bb:1a:7e:
30:ed:c3:d4:76:96:bc:6a:3e:4f:2e:6c:17:8b:e7:
5e:2b:93:e1:90:59:e1:57:88:84:c2:ff:6a:22:df:
6c:24:4d:88:20:79:72:96:c8:83:19:a9:0e:6c:16:
3f:b4:a1:c0:f7:a1:14:79:e2:19:03:6b:c7:d5:2c:
4d:3d:6f:83:0b:68:dc:55:a2:e1:85:77:27:78:87:
1e:34:97:be:3d:fb:0e:b0:55:20:83:94:ab:ab:76:
ce:86:50:70:44:4c:c7:a6:c1:c0:94:43:48:b2:04:
6b:d9:66:56:44:16:b9:3c:19:a4:29:ad:ca:14:a2:
fd:89:03:60:41:6f:d4:bb:71:b3:ec:aa:1d:ea:97:
21:56:cb:61:0d:b7:d1:3f:c2:d9:cf:2c:f1:67:c9:
07:f4:29:71:fe:4b:62:6a:2e:c4:5d:99:c4:6b:26:
ef:bf:24:11:6d:6f:51:89:fb:ad:b2:bd:13:5c:d9:
79:14:28:b4:9a:00:ee:db:1e:f4:5f:dc:37:d1:29:
da:38:c5:c1:ec:5d:ff:ae:b8:fd:fc:30:de:f5:c1:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:67:45:B2:00:BE:A3:FD:06:CD:89:E8:4C:1F:ED:CB:90:6F:56:B5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3561::/48
Signature Algorithm: sha256WithRSAEncryption
3b:5d:4e:98:f8:b6:04:01:ac:a8:e5:b2:d4:11:8b:c0:93:3e:
d1:22:a3:cc:aa:4d:6e:e6:96:dd:b8:3b:7a:bf:09:a7:2c:f1:
98:06:73:79:b5:d7:7a:f2:0d:0f:d1:0b:ce:38:d1:a5:ed:42:
50:59:5b:f6:db:0c:75:d8:d9:44:d1:55:26:97:94:a9:35:c2:
c2:37:18:60:23:25:b4:42:35:06:f5:88:5a:32:d0:d1:47:2a:
6e:0e:b1:bf:05:7e:b0:cf:57:bf:89:c3:f2:bd:fc:48:fe:ec:
13:65:ce:77:2a:af:b4:18:8e:d8:15:73:fb:ba:6d:b7:bf:26:
a6:bc:b5:83:5d:72:c8:bf:de:7a:63:93:e4:8b:b5:c4:28:bd:
d8:9a:b2:39:e4:81:17:22:96:b5:72:44:4b:72:67:a0:68:d9:
9b:fa:b7:a3:94:1c:b1:ad:63:2d:c7:be:27:82:e9:44:38:87:
92:a0:48:b3:0b:45:ff:e8:a0:3b:a9:f5:a6:80:72:3d:62:ef:
0f:ef:98:b7:61:21:50:ed:9a:c7:a2:59:b7:3a:2e:2d:f2:9e:
fe:68:71:64:90:09:27:33:5b:07:31:26:f6:44:a9:7d:ce:50:
cc:59:0a:5d:f1:39:96:b4:38:56:3f:67:d2:8b:a9:15:41:06:
32:fa:ab:72
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUBKbkrPP2/ZUJx3Nisd07SWssQNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjI1MzRaFw0yNjA2MTkwNjMwMzRaMDMxMTAvBgNV
BAMTKDBDNjc0NUIyMDBCRUEzRkQwNkNEODlFODRDMUZFRENCOTA2RjU2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+MEJlANvRdr5M9OOrykLrZge
4Qpv/pdKG0eTXszRMhz4QTrHKSArYbsafjDtw9R2lrxqPk8ubBeL514rk+GQWeFX
iITC/2oi32wkTYggeXKWyIMZqQ5sFj+0ocD3oRR54hkDa8fVLE09b4MLaNxVouGF
dyd4hx40l749+w6wVSCDlKurds6GUHBETMemwcCUQ0iyBGvZZlZEFrk8GaQprcoU
ov2JA2BBb9S7cbPsqh3qlyFWy2ENt9E/wtnPLPFnyQf0KXH+S2JqLsRdmcRrJu+/
JBFtb1GJ+62yvRNc2XkUKLSaAO7bHvRf3DfRKdo4xcHsXf+uuP38MN71wQeFAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUDGdFsgC+o/0GzYnoTB/ty5BvVrUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzNjMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYE1YTAN
BgkqhkiG9w0BAQsFAAOCAQEAO11OmPi2BAGsqOWy1BGLwJM+0SKjzKpNbuaW3bg7
er8JpyzxmAZzebXXevIND9ELzjjRpe1CUFlb9tsMddjZRNFVJpeUqTXCwjcYYCMl
tEI1BvWIWjLQ0Ucqbg6xvwV+sM9Xv4nD8r38SP7sE2XOdyqvtBiO2BVz+7ptt78m
pry1g11yyL/eemOT5Iu1xCi92JqyOeSBFyKWtXJES3JnoGjZm/q3o5Qcsa1jLce+
J4LpRDiHkqBIswtF/+igO6n1poByPWLvD++Yt2EhUO2ax6JZtzouLfKe/mhxZJAJ
JzNbBzEm9kSpfc5QzFkKXfE5lrQ4Vj9n0oupFUEGMvqrcg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:16 2025 by rpki-client