Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266383a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363266383a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: cLjUKAt4va6T5unfWrY6dQ8SByck2WEgDbzVWtzDHlc=
Subject key identifier: 06:17:F4:96:12:5B:90:DD:9A:28:18:77:9E:2D:ED:7B:F4:76:3A:90
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 36B3FAC59254DA02F7E47DBD8EAF17706E5B6785
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266383a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 19 May 2025 02:06:01 +0000
ROA not before: Mon 19 May 2025 02:01:01 +0000
ROA not after: Mon 18 May 2026 02:06:01 +0000
asID: 401507
IP address blocks: 2a14:7584:62f8::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 16:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b3:fa:c5:92:54:da:02:f7:e4:7d:bd:8e:af:17:70:6e:5b:67:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 02:01:01 2025 GMT
Not After : May 18 02:06:01 2026 GMT
Subject: CN=0617F496125B90DD9A2818779E2DED7BF4763A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:90:99:15:d1:48:69:74:a3:9d:51:6f:28:
57:b7:2e:56:92:b4:23:cc:56:4f:50:47:e8:ee:9a:
5a:c0:f5:c5:24:ed:e5:61:53:ea:91:63:6c:c3:a7:
74:95:2f:37:0f:ae:46:c4:23:29:a7:f2:66:8e:e1:
01:87:8f:2a:46:6e:c6:00:46:6b:32:33:48:3f:22:
79:81:04:c0:74:b0:a8:7b:f3:9f:56:b9:42:25:01:
b2:a6:aa:cf:ae:c7:b1:88:76:a2:fa:1c:56:a9:f3:
0e:22:96:bf:86:7c:b2:29:ae:46:fa:5a:9f:53:be:
3a:d4:68:a8:25:a0:1d:8e:6f:19:b9:2d:d0:34:5f:
e9:ad:99:3e:e1:b0:42:01:13:22:0b:85:fb:11:1a:
9b:4e:e1:54:3f:63:d7:05:74:2e:75:7e:94:95:46:
c4:70:9b:4c:bf:26:95:26:3b:cc:ad:ae:9a:bd:55:
14:50:e0:5a:0e:69:74:29:54:90:6e:35:e9:71:0b:
f8:cc:b3:83:95:42:cc:33:61:a6:6d:c4:27:9b:18:
b7:0c:75:5b:dc:67:32:03:26:75:97:53:c4:e1:85:
05:c2:30:6e:7a:58:4e:64:f5:df:c7:39:cf:62:95:
61:f8:4b:25:91:56:4b:ee:ab:cc:ba:cd:2b:e5:a1:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:F4:96:12:5B:90:DD:9A:28:18:77:9E:2D:ED:7B:F4:76:3A:90
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266383a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62f8::/48
Signature Algorithm: sha256WithRSAEncryption
1b:c0:24:49:80:ef:1c:55:12:57:97:6d:f6:dc:0e:66:61:54:
9e:f3:9d:df:52:ca:67:8d:17:e7:57:91:dc:5f:f7:16:1e:fe:
81:72:9d:bd:fc:0d:89:05:34:58:18:d9:ac:f7:04:a8:c9:a9:
2b:66:b2:55:63:8d:b2:42:f3:bc:b5:db:01:ea:60:0a:e7:a6:
f2:e8:e9:fa:24:ac:64:34:39:2e:f7:22:f4:34:cf:3e:ad:37:
22:ff:d6:41:52:42:aa:58:6e:bd:ef:63:f2:d0:46:65:6f:32:
83:a0:2e:44:38:33:a8:5a:67:67:8c:70:34:36:cc:eb:46:26:
11:68:63:d6:fd:8a:0e:b9:de:d0:36:f3:5b:44:b8:3b:3c:66:
2b:3e:f3:88:91:07:01:e3:89:a0:20:5e:41:89:d6:a4:a8:d9:
2e:7f:c7:de:28:e5:95:52:b1:e5:34:98:76:e2:91:35:f8:12:
15:05:9f:b4:12:cf:c9:f7:bb:07:34:f0:54:c6:0b:dd:e5:c4:
af:a7:c0:46:a6:29:47:6e:4c:b4:eb:bd:99:24:45:b2:43:f9:
c9:2d:89:c8:89:71:67:ef:00:3d:61:4f:a2:80:35:b8:df:54:
23:dd:f9:f0:1e:d1:f2:7d:95:37:e8:ed:47:ed:a6:e5:1e:58:
82:3d:b2:ed
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNrP6xZJU2gL35H29jq8XcG5bZ4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTkwMjAxMDFaFw0yNjA1MTgwMjA2MDFaMDMxMTAvBgNV
BAMTKDA2MTdGNDk2MTI1QjkwREQ5QTI4MTg3NzlFMkRFRDdCRjQ3NjNBOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvpCZFdFIaXSjnVFvKFe3LlaS
tCPMVk9QR+jumlrA9cUk7eVhU+qRY2zDp3SVLzcPrkbEIymn8maO4QGHjypGbsYA
RmsyM0g/InmBBMB0sKh7859WuUIlAbKmqs+ux7GIdqL6HFap8w4ilr+GfLIprkb6
Wp9TvjrUaKgloB2Obxm5LdA0X+mtmT7hsEIBEyILhfsRGptO4VQ/Y9cFdC51fpSV
RsRwm0y/JpUmO8ytrpq9VRRQ4FoOaXQpVJBuNelxC/jMs4OVQswzYaZtxCebGLcM
dVvcZzIDJnWXU8ThhQXCMG56WE5k9d/HOc9ilWH4SyWRVkvuq8y6zSvloQ0nAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUBhf0lhJbkN2aKBh3ni3te/R2OpAwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2NjM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGL4
MA0GCSqGSIb3DQEBCwUAA4IBAQAbwCRJgO8cVRJXl2323A5mYVSe853fUspnjRfn
V5HcX/cWHv6Bcp29/A2JBTRYGNms9wSoyakrZrJVY42yQvO8tdsB6mAK56by6On6
JKxkNDku9yL0NM8+rTci/9ZBUkKqWG6972Py0EZlbzKDoC5EODOoWmdnjHA0Nszr
RiYRaGPW/YoOud7QNvNbRLg7PGYrPvOIkQcB44mgIF5BidakqNkuf8feKOWVUrHl
NJh24pE1+BIVBZ+0Es/J97sHNPBUxgvd5cSvp8BGpilHbky0672ZJEWyQ/nJLYnI
iXFn7wA9YU+igDW431Qj3fnwHtHyfZU36O1H7ablHliCPbLt
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:55:17 2025 by rpki-client