Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234343a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363234343a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: hnsTn1D6P2qI/gA1sybXPv35arpLDelhhebCNy2Mxk0=
Subject key identifier: 88:42:0A:5F:02:91:6F:3E:5D:E7:70:BB:14:D4:40:C4:F6:05:79:CF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0F61C6B3B07C422E5F512AF340156A123960618A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234343a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:06 +0000
ROA not before: Mon 12 May 2025 16:13:06 +0000
ROA not after: Mon 11 May 2026 16:18:06 +0000
asID: 401507
IP address blocks: 2a14:7584:6244::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 20:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:61:c6:b3:b0:7c:42:2e:5f:51:2a:f3:40:15:6a:12:39:60:61:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:06 2025 GMT
Not After : May 11 16:18:06 2026 GMT
Subject: CN=88420A5F02916F3E5DE770BB14D440C4F60579CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:dd:0f:fb:73:89:e3:6f:ec:35:a7:a3:36:
62:3d:8d:f2:10:20:ed:cc:de:bb:b8:85:41:d1:0a:
25:ef:c2:ea:57:fb:1b:7e:82:90:e9:05:b8:fc:53:
90:d3:e4:50:e0:99:60:7c:ba:b1:ce:e8:80:f8:ae:
0d:fb:cf:1c:59:de:8a:e6:09:ce:9c:c9:39:6f:6c:
1c:7c:83:28:a4:18:ba:8c:6f:e5:13:e7:e7:17:42:
51:8a:95:88:60:ce:91:96:b3:d2:99:9b:f4:1f:02:
3c:db:00:cf:2d:71:41:df:fd:45:14:6a:be:76:bb:
43:56:dd:66:65:25:a3:8d:4f:d8:36:fa:17:55:2f:
2c:a1:8f:9c:bd:7e:8e:cd:85:37:18:e9:83:90:ab:
f8:4f:4c:81:3d:d9:c1:70:57:93:1a:71:5c:3c:cc:
fa:99:8f:e0:ad:40:96:4a:be:1c:f1:6d:40:a6:b1:
07:c3:d5:b4:97:ff:91:97:01:d4:76:8a:03:a3:35:
e9:c4:7c:5b:2a:b1:3f:73:88:b4:3d:05:49:31:65:
49:80:d9:ea:58:05:d2:f2:99:80:c8:d0:bb:24:4d:
be:33:1c:5e:a6:34:97:eb:cb:d9:65:20:8f:f1:a0:
9c:0f:e8:b4:7c:82:05:9a:7c:72:40:1a:25:52:af:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:42:0A:5F:02:91:6F:3E:5D:E7:70:BB:14:D4:40:C4:F6:05:79:CF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234343a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6244::/48
Signature Algorithm: sha256WithRSAEncryption
56:89:e2:9e:f3:44:20:15:9c:57:23:86:d4:56:ff:9e:e7:55:
55:0a:d0:a4:5b:3b:f9:cb:80:7b:ac:44:a9:41:29:7d:2a:72:
be:65:fd:e4:ab:27:3f:db:8c:6e:30:75:4a:bc:8f:07:f1:10:
18:a2:d0:1f:82:53:58:62:73:19:d4:02:ee:26:7f:9b:05:c7:
eb:1d:e9:08:e8:29:73:e9:50:3a:92:80:89:26:b6:74:bb:f0:
52:d6:36:d2:78:2b:69:f0:9b:7d:15:47:c7:b6:29:29:ce:5c:
83:2e:27:1c:8c:cc:14:40:6a:b6:76:8f:16:85:4c:04:77:e8:
1e:cd:17:83:b1:cd:5f:f1:56:93:56:14:06:b4:41:02:92:40:
74:0d:37:94:97:29:01:77:20:27:06:3b:38:2b:22:95:33:c9:
34:1e:56:ef:79:64:ef:a5:02:28:61:8f:97:56:0d:cc:5d:54:
89:9f:47:a1:f9:68:f6:5c:b6:9f:2e:47:5a:84:62:33:a7:1c:
ea:c8:6f:54:a0:52:e2:95:76:75:a5:d1:cc:ba:13:89:ff:7b:
ab:28:4f:85:85:a6:c0:dd:d8:3a:84:ce:26:89:15:70:a3:c0:
74:b5:2f:21:2c:fa:4f:db:66:09:03:35:48:e0:4f:b5:b4:53:
aa:1a:76:a9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUD2HGs7B8Qi5fUSrzQBVqEjlgYYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDZaFw0yNjA1MTExNjE4MDZaMDMxMTAvBgNV
BAMTKDg4NDIwQTVGMDI5MTZGM0U1REU3NzBCQjE0RDQ0MEM0RjYwNTc5Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmBN0P+3OJ42/sNaejNmI9jfIQ
IO3M3ru4hUHRCiXvwupX+xt+gpDpBbj8U5DT5FDgmWB8urHO6ID4rg37zxxZ3orm
Cc6cyTlvbBx8gyikGLqMb+UT5+cXQlGKlYhgzpGWs9KZm/QfAjzbAM8tcUHf/UUU
ar52u0NW3WZlJaONT9g2+hdVLyyhj5y9fo7NhTcY6YOQq/hPTIE92cFwV5MacVw8
zPqZj+CtQJZKvhzxbUCmsQfD1bSX/5GXAdR2igOjNenEfFsqsT9ziLQ9BUkxZUmA
2epYBdLymYDI0LskTb4zHF6mNJfry9llII/xoJwP6LR8ggWafHJAGiVSr4tVAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUiEIKXwKRbz5d53C7FNRAxPYFec8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNDM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGJE
MA0GCSqGSIb3DQEBCwUAA4IBAQBWieKe80QgFZxXI4bUVv+e51VVCtCkWzv5y4B7
rESpQSl9KnK+Zf3kqyc/24xuMHVKvI8H8RAYotAfglNYYnMZ1ALuJn+bBcfrHekI
6Clz6VA6koCJJrZ0u/BS1jbSeCtp8Jt9FUfHtikpzlyDLiccjMwUQGq2do8WhUwE
d+gezReDsc1f8VaTVhQGtEECkkB0DTeUlykBdyAnBjs4KyKVM8k0HlbveWTvpQIo
YY+XVg3MXVSJn0eh+Wj2XLafLkdahGIzpxzqyG9UoFLilXZ1pdHMuhOJ/3urKE+F
habA3dg6hM4miRVwo8B0tS8hLPpP22YJAzVI4E+1tFOqGnap
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:14 2025 by rpki-client