Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366239643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366239643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 6pLPphcj28iTT+sB4yROz0j296E1/RRlPAC203xHmy8=
Subject key identifier: 5D:12:37:F8:69:1C:91:E8:2E:85:63:B0:EC:88:62:E2:7E:85:6C:BB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5DD79BEB8548ADFED66C022BFB5B397783C98613
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366239643a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 27 May 2025 06:36:02 +0000
ROA not before: Tue 27 May 2025 06:31:02 +0000
ROA not after: Tue 26 May 2026 06:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6b9d::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 May 2025 00:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d7:9b:eb:85:48:ad:fe:d6:6c:02:2b:fb:5b:39:77:83:c9:86:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 06:31:02 2025 GMT
Not After : May 26 06:36:02 2026 GMT
Subject: CN=5D1237F8691C91E82E8563B0EC8862E27E856CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:5e:94:9d:b3:d2:8b:4e:0e:b9:bc:cf:65:
67:62:55:43:52:2f:f7:a3:32:f7:c9:72:45:57:07:
63:9d:33:5d:10:84:2b:9f:62:a6:a2:99:a2:71:2e:
8a:d0:e1:88:69:76:96:68:f5:90:9c:7e:29:8b:36:
dc:7f:29:ef:9a:a2:e9:d2:f5:8c:13:75:c9:64:51:
0e:b3:77:a2:e1:7b:66:10:f7:c1:d0:b0:99:15:d3:
e2:e4:10:58:34:b2:fb:1b:dd:57:bf:db:66:c4:19:
44:17:50:22:23:09:3a:8f:f5:98:8e:e5:1f:0b:3f:
2a:7b:14:bd:10:ee:f0:d6:68:0e:ad:42:0d:0f:db:
a7:73:2a:1d:96:81:af:8d:6c:10:50:75:55:40:38:
5f:55:f2:fb:9f:ae:b1:72:dc:5d:d7:a9:32:74:d3:
29:0d:13:26:c5:6e:70:fa:d7:de:40:7b:e4:4b:19:
75:4b:f8:3b:89:df:2a:bc:b4:5b:c3:44:c7:e6:74:
a3:1c:77:c3:b9:6d:32:34:5f:83:ef:7f:f2:8a:a8:
65:b2:8c:3b:51:59:86:28:75:33:5f:ac:f3:7f:fe:
cd:c3:2d:75:28:a4:a0:52:a6:ca:af:05:36:24:1b:
d2:6c:9d:a9:e6:a9:be:5c:15:98:e7:05:27:ba:dd:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:37:F8:69:1C:91:E8:2E:85:63:B0:EC:88:62:E2:7E:85:6C:BB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366239643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6b9d::/48
Signature Algorithm: sha256WithRSAEncryption
18:77:ac:84:f7:8f:07:4d:74:44:18:69:67:a7:54:b5:c8:22:
fd:1e:37:58:ba:2e:d2:2a:95:8d:4b:53:7e:1c:fb:17:e2:f1:
f4:90:3c:ac:25:43:49:36:b1:2e:57:00:c4:bb:9c:9c:02:b6:
e2:4c:b8:2d:04:bd:ec:38:a8:21:36:02:2f:5d:2f:93:b4:17:
d9:80:9e:b7:38:e9:8a:ae:7e:ea:5d:6d:d3:64:ad:38:ee:0d:
84:89:cd:74:01:37:ab:f6:fe:5c:cc:59:a1:bd:a9:9c:48:c0:
e6:78:9e:74:34:2c:99:3e:af:cd:d7:81:69:a4:0c:58:8e:4b:
b6:b0:2e:aa:fc:98:e9:09:05:f0:0b:b5:4e:47:c6:ba:bc:64:
86:33:b0:84:74:39:b8:46:15:35:ef:8e:dc:1d:97:bc:a7:c0:
93:2e:49:54:38:84:2d:50:7c:0c:06:bb:35:1e:d9:3f:b4:b7:
0f:8c:0c:3e:8b:0e:47:c1:30:14:e9:56:19:9a:a5:da:b2:82:
b4:47:c4:55:56:cc:8f:4a:9b:d4:a0:6f:11:09:f7:9d:0f:d6:
eb:fc:4f:90:57:da:0d:64:c2:fe:83:f3:c4:a1:cc:f4:d2:34:
f7:e3:d8:3e:28:7a:97:58:2e:dc:0f:47:b2:50:8d:25:99:7d:
93:12:22:9e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUXdeb64VIrf7WbAIr+1s5d4PJhhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjcwNjMxMDJaFw0yNjA1MjYwNjM2MDJaMDMxMTAvBgNV
BAMTKDVEMTIzN0Y4NjkxQzkxRTgyRTg1NjNCMEVDODg2MkUyN0U4NTZDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/16UnbPSi04OubzPZWdiVUNS
L/ejMvfJckVXB2OdM10QhCufYqaimaJxLorQ4YhpdpZo9ZCcfimLNtx/Ke+aounS
9YwTdclkUQ6zd6Lhe2YQ98HQsJkV0+LkEFg0svsb3Ve/22bEGUQXUCIjCTqP9ZiO
5R8LPyp7FL0Q7vDWaA6tQg0P26dzKh2Wga+NbBBQdVVAOF9V8vufrrFy3F3XqTJ0
0ykNEybFbnD6195Ae+RLGXVL+DuJ3yq8tFvDRMfmdKMcd8O5bTI0X4Pvf/KKqGWy
jDtRWYYodTNfrPN//s3DLXUopKBSpsqvBTYkG9Jsnanmqb5cFZjnBSe63az3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUXRI3+GkckeguhWOw7Ihi4n6FbLswHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjIzOTY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRrnTAN
BgkqhkiG9w0BAQsFAAOCAQEAGHeshPePB010RBhpZ6dUtcgi/R43WLou0iqVjUtT
fhz7F+Lx9JA8rCVDSTaxLlcAxLucnAK24ky4LQS97DioITYCL10vk7QX2YCetzjp
iq5+6l1t02StOO4NhInNdAE3q/b+XMxZob2pnEjA5niedDQsmT6vzdeBaaQMWI5L
trAuqvyY6QkF8Au1TkfGurxkhjOwhHQ5uEYVNe+O3B2XvKfAky5JVDiELVB8DAa7
NR7ZP7S3D4wMPosOR8EwFOlWGZql2rKCtEfEVVbMj0qb1KBvEQn3nQ/W6/xPkFfa
DWTC/oPzxKHM9NI09+PYPih6l1gu3A9HslCNJZl9kxIing==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:41 2025 by rpki-client