Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538383a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538313a333538383a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: jXGGvZ2giQbFon1BOV73E/u3gvQOvvWukpdvPvr5wAw=
Subject key identifier: 4E:4B:61:D3:16:D2:B2:CC:B0:E3:D6:A7:41:22:33:FE:9C:5B:DB:D0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 33F0ABDAD891C150C6521D66688F738A5DBF99B2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538383a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 20 Jun 2025 06:24:52 +0000
ROA not before: Fri 20 Jun 2025 06:19:52 +0000
ROA not after: Fri 19 Jun 2026 06:24:52 +0000
asID: 401507
IP address blocks: 2a14:7581:3588::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f0:ab:da:d8:91:c1:50:c6:52:1d:66:68:8f:73:8a:5d:bf:99:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:52 2025 GMT
Not After : Jun 19 06:24:52 2026 GMT
Subject: CN=4E4B61D316D2B2CCB0E3D6A7412233FE9C5BDBD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:50:ef:6d:b4:f2:3c:04:d0:68:3d:6b:93:
be:31:4a:18:3a:85:b4:5d:c5:b5:31:a7:5d:a4:a2:
9f:ab:65:09:5e:0d:99:da:3a:c2:de:2c:36:01:a7:
ef:21:15:5f:14:7a:de:26:01:c3:b3:21:8e:c6:e4:
29:72:d8:ea:b2:f7:13:99:4e:d1:9b:11:b9:22:f8:
eb:39:1c:e3:e8:fa:cd:78:85:d1:ef:00:17:78:40:
44:80:57:8b:2a:43:7c:12:90:10:86:77:b4:c3:ac:
3f:1e:16:3c:32:20:fc:4b:19:6c:46:76:bd:e7:99:
f7:c2:19:17:dd:99:bf:95:78:c0:5f:55:ca:0d:57:
b9:a7:d9:e1:46:ae:40:52:49:be:b5:ba:06:c1:6f:
ef:51:7a:b8:e0:3f:7a:5c:c9:98:d6:e3:d7:04:66:
0c:fa:00:56:ad:35:c4:52:7a:d1:14:91:8e:d6:f9:
08:e0:f0:3a:34:74:d5:ed:6f:25:bb:87:88:fa:94:
8f:d1:9d:68:6a:2d:cc:9a:01:06:27:48:e2:c3:56:
ba:cf:c8:48:35:3b:13:2d:54:00:95:41:ac:4e:8f:
0a:4e:54:9e:42:2c:a3:93:96:23:6c:7b:26:ca:2e:
ce:fe:bb:74:e1:2f:c3:9f:7d:e2:db:5c:8d:3e:2a:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4B:61:D3:16:D2:B2:CC:B0:E3:D6:A7:41:22:33:FE:9C:5B:DB:D0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538383a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3588::/48
Signature Algorithm: sha256WithRSAEncryption
41:be:de:a4:92:4d:30:10:88:ca:e7:0e:be:ca:4e:c8:c6:0a:
5b:0d:1d:ee:d7:68:51:b6:5f:00:7f:16:5d:ce:16:42:f2:7e:
17:ba:52:2a:b1:76:68:10:3a:44:e7:9b:94:6e:5e:7d:9d:9f:
c4:90:de:73:14:e4:26:3b:c6:02:db:58:7e:45:5e:c0:52:bb:
4a:58:b3:a8:ab:2a:b5:67:70:fa:93:81:c8:f4:1d:1b:56:40:
13:4b:43:3f:62:2d:89:68:69:73:12:c6:3e:07:d4:d0:eb:a3:
ed:5e:38:69:cb:de:0d:3d:f7:b8:ba:4c:47:96:32:bd:55:45:
bf:d9:b7:40:09:a3:0e:1f:5d:4f:67:8d:cd:3e:a6:1e:6a:19:
9b:33:00:8b:69:26:41:f9:75:6d:d2:5d:93:de:ec:42:d7:1a:
d0:c4:e5:d4:72:79:bb:91:b1:b2:fc:7d:03:4d:b5:66:57:db:
5b:64:b4:f3:1c:ee:49:53:7f:a1:0e:02:68:79:d8:8c:fa:d4:
ca:cd:9a:ab:12:fa:7f:13:91:b2:dd:4c:d0:88:a6:17:cc:fd:
39:ac:cc:92:f7:1b:19:a9:c8:df:3d:30:3b:33:00:a4:8e:ff:
31:47:b7:91:50:1d:21:76:56:a1:d8:ed:21:b2:45:dc:3d:02:
1e:74:3d:1d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUM/Cr2tiRwVDGUh1maI9zil2/mbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjE5NTJaFw0yNjA2MTkwNjI0NTJaMDMxMTAvBgNV
BAMTKDRFNEI2MUQzMTZEMkIyQ0NCMEUzRDZBNzQxMjIzM0ZFOUM1QkRCRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OlDvbbTyPATQaD1rk74xShg6
hbRdxbUxp12kop+rZQleDZnaOsLeLDYBp+8hFV8Uet4mAcOzIY7G5Cly2Oqy9xOZ
TtGbEbki+Os5HOPo+s14hdHvABd4QESAV4sqQ3wSkBCGd7TDrD8eFjwyIPxLGWxG
dr3nmffCGRfdmb+VeMBfVcoNV7mn2eFGrkBSSb61ugbBb+9RerjgP3pcyZjW49cE
Zgz6AFatNcRSetEUkY7W+Qjg8Do0dNXtbyW7h4j6lI/RnWhqLcyaAQYnSOLDVrrP
yEg1OxMtVACVQaxOjwpOVJ5CLKOTliNseybKLs7+u3ThL8OffeLbXI0+KmrnAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUTkth0xbSssyw49anQSIz/pxb29AwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzODM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTWI
MA0GCSqGSIb3DQEBCwUAA4IBAQBBvt6kkk0wEIjK5w6+yk7IxgpbDR3u12hRtl8A
fxZdzhZC8n4XulIqsXZoEDpE55uUbl59nZ/EkN5zFOQmO8YC21h+RV7AUrtKWLOo
qyq1Z3D6k4HI9B0bVkATS0M/Yi2JaGlzEsY+B9TQ66PtXjhpy94NPfe4ukxHljK9
VUW/2bdACaMOH11PZ43NPqYeahmbMwCLaSZB+XVt0l2T3uxC1xrQxOXUcnm7kbGy
/H0DTbVmV9tbZLTzHO5JU3+hDgJoediM+tTKzZqrEvp/E5Gy3UzQiKYXzP05rMyS
9xsZqcjfPTA7MwCkjv8xR7eRUB0hdlah2O0hskXcPQIedD0d
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:55:15 2025 by rpki-client