Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 9YS7RRUKw0w86XAzz8AMdSo9rpKyHlbF737077IBgDI=
Subject key identifier: BD:93:8F:BA:6A:B6:A5:58:C6:AD:9A:85:10:70:29:DE:78:C7:BB:84
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3F742B3164848395349EEA8AC88256679600172B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238333a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 21:42:02 +0000
ROA not before: Wed 14 May 2025 21:37:02 +0000
ROA not after: Wed 13 May 2026 21:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6283::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 04:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:74:2b:31:64:84:83:95:34:9e:ea:8a:c8:82:56:67:96:00:17:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 21:37:02 2025 GMT
Not After : May 13 21:42:02 2026 GMT
Subject: CN=BD938FBA6AB6A558C6AD9A85107029DE78C7BB84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:e8:3a:02:f7:c9:48:39:f7:8f:81:64:dc:
00:17:e0:75:61:14:f5:b0:57:d9:49:73:98:8a:2c:
5e:62:d6:99:a4:8d:63:99:f1:4e:70:b7:88:1b:f0:
e6:14:07:7c:33:70:96:53:2d:8d:56:44:0c:95:03:
78:0a:6e:eb:f8:b8:58:5a:fc:12:59:d4:87:e2:07:
db:7a:69:4f:72:b7:50:77:6a:76:5f:e1:58:41:a2:
29:50:d2:04:85:90:f0:62:af:44:b0:69:2e:ee:18:
29:1f:76:53:fa:c6:f3:f0:9f:3d:2c:0c:60:4e:c4:
a8:ad:3d:f5:4b:b2:dd:72:75:3f:a7:eb:fb:8d:f9:
dd:3b:51:df:32:90:2f:b4:ef:89:bb:42:20:b2:b8:
b5:d8:ce:e4:0e:c2:c1:a4:cc:80:bb:b8:1a:be:fc:
5d:79:bb:5d:eb:7c:a5:03:8e:5d:2d:cb:75:af:af:
f6:8e:5e:f9:08:ad:65:5c:29:57:33:46:26:b1:42:
16:73:ff:11:0b:43:4b:da:a5:57:a8:14:a8:ae:d1:
ce:aa:00:28:4a:83:3c:31:e7:3c:35:4e:67:8e:15:
8b:92:77:22:61:00:a7:1e:79:74:5a:52:97:c4:52:
4d:23:1f:61:11:83:c0:cf:03:5e:b5:35:b2:5c:96:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:93:8F:BA:6A:B6:A5:58:C6:AD:9A:85:10:70:29:DE:78:C7:BB:84
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6283::/48
Signature Algorithm: sha256WithRSAEncryption
34:97:cc:7d:b5:a6:36:f8:4f:cb:d1:66:a3:a9:c6:31:51:27:
06:26:18:2a:2f:9c:7b:e3:65:ec:2a:0c:6f:82:16:a2:90:46:
12:01:28:a2:76:50:ee:c6:7d:7e:96:7c:e6:ec:c7:fa:67:66:
33:53:36:3f:07:3c:13:a8:87:95:3d:e6:b4:8d:9a:2d:9a:d4:
3e:03:b8:57:11:f1:cb:da:c7:c1:08:20:fd:c5:3a:8f:8d:f1:
05:53:35:97:d1:d9:66:1d:83:60:94:7b:d6:8e:6d:aa:73:e9:
08:51:4c:06:aa:25:ff:d3:82:03:d4:d3:cf:99:9f:30:2a:41:
76:a1:8c:27:16:65:fa:b5:82:2e:62:0e:22:88:97:23:34:7d:
72:c3:5c:da:fd:37:87:b9:c9:ea:2e:4d:1b:a1:70:db:f4:46:
da:9b:b8:c1:f5:65:bd:13:0a:3f:1c:bf:2c:27:6f:81:82:d1:
d2:86:54:67:64:b3:01:10:19:df:b4:f9:80:e7:aa:2b:37:24:
00:b9:2d:e2:d3:76:eb:64:f1:11:81:1a:c6:ea:3c:a8:e0:9f:
c5:67:5b:0d:54:34:61:0e:86:b4:a4:61:b1:c8:9d:07:d9:69:
ba:86:28:ab:e2:59:25:ff:88:44:fe:91:6f:c1:f1:03:8e:86:
34:7f:86:37
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUP3QrMWSEg5U0nuqKyIJWZ5YAFyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTQyMTM3MDJaFw0yNjA1MTMyMTQyMDJaMDMxMTAvBgNV
BAMTKEJEOTM4RkJBNkFCNkE1NThDNkFEOUE4NTEwNzAyOURFNzhDN0JCODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNeg6AvfJSDn3j4Fk3AAX4HVh
FPWwV9lJc5iKLF5i1pmkjWOZ8U5wt4gb8OYUB3wzcJZTLY1WRAyVA3gKbuv4uFha
/BJZ1IfiB9t6aU9yt1B3anZf4VhBoilQ0gSFkPBir0SwaS7uGCkfdlP6xvPwnz0s
DGBOxKitPfVLst1ydT+n6/uN+d07Ud8ykC+074m7QiCyuLXYzuQOwsGkzIC7uBq+
/F15u13rfKUDjl0ty3Wvr/aOXvkIrWVcKVczRiaxQhZz/xELQ0vapVeoFKiu0c6q
AChKgzwx5zw1TmeOFYuSdyJhAKceeXRaUpfEUk0jH2ERg8DPA161NbJclpbHAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUvZOPumq2pVjGrZqFEHAp3njHu4QwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzODMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRigzAN
BgkqhkiG9w0BAQsFAAOCAQEANJfMfbWmNvhPy9Fmo6nGMVEnBiYYKi+ce+Nl7CoM
b4IWopBGEgEoonZQ7sZ9fpZ85uzH+mdmM1M2Pwc8E6iHlT3mtI2aLZrUPgO4VxHx
y9rHwQgg/cU6j43xBVM1l9HZZh2DYJR71o5tqnPpCFFMBqol/9OCA9TTz5mfMCpB
dqGMJxZl+rWCLmIOIoiXIzR9csNc2v03h7nJ6i5NG6Fw2/RG2pu4wfVlvRMKPxy/
LCdvgYLR0oZUZ2SzARAZ37T5gOeqKzckALkt4tN262TxEYEaxuo8qOCfxWdbDVQ0
YQ6GtKRhscidB9lpuoYoq+JZJf+IRP6Rb8HxA46GNH+GNw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:16 2025 by rpki-client