Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ZFAcGR+JuCP6J/LTQwmHhFnLJg4umezYwfTdR3tHGcE=
Subject key identifier: DD:26:DF:DE:CF:BA:0C:83:6A:55:27:74:10:01:B4:03:58:57:6E:73
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5B8502BC9FC4E6AE851CF6412EB6148728B0C080
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037313a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:53:57 +0000
ROA not before: Mon 10 Mar 2025 11:48:57 +0000
ROA not after: Mon 09 Mar 2026 11:53:57 +0000
asID: 16909
IP address blocks: 2a14:7584:6071::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:85:02:bc:9f:c4:e6:ae:85:1c:f6:41:2e:b6:14:87:28:b0:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:48:57 2025 GMT
Not After : Mar 9 11:53:57 2026 GMT
Subject: CN=DD26DFDECFBA0C836A5527741001B40358576E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:b5:15:9e:be:a6:b4:76:ae:8b:52:fe:24:
5d:00:5d:15:2c:d4:f2:f2:5c:74:48:9e:f0:b5:8b:
6f:5b:01:1f:d9:fa:5d:7d:56:de:ce:23:a6:9b:35:
d1:b1:b9:57:e5:89:4e:27:8f:30:df:e6:ec:a9:c5:
c9:0b:a2:25:4d:0a:f1:fc:0c:9b:7e:e8:da:7d:c8:
91:0d:46:1b:b7:32:4d:69:a3:b1:f5:1d:27:f7:f5:
31:5a:34:e7:fc:60:0c:bf:87:52:12:e0:43:35:a3:
0e:2f:1c:e3:ae:6c:65:46:cd:b1:d0:05:67:5a:25:
68:9d:8a:7e:66:d0:36:dc:45:e7:fe:6a:f8:da:f3:
3a:df:71:ba:83:27:99:4e:57:74:54:f3:53:e8:b1:
8c:6a:d1:0b:ee:d6:f6:ee:78:c1:12:41:dd:3e:bd:
5c:5d:a5:8c:90:cd:63:ca:20:1b:19:49:3e:17:d3:
23:df:d7:87:83:ae:6b:a4:4b:72:2f:13:0f:62:ab:
78:78:e1:bf:2d:d2:71:f9:c2:21:e8:61:d5:bf:5f:
66:73:b7:74:80:64:73:13:d6:cd:a4:6e:a3:57:5a:
ea:60:a5:19:f4:23:d5:14:c2:44:d4:f1:dd:2f:3f:
18:d7:e5:e4:4f:8e:09:30:ba:80:d4:1e:2d:ee:14:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:DF:DE:CF:BA:0C:83:6A:55:27:74:10:01:B4:03:58:57:6E:73
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6071::/48
Signature Algorithm: sha256WithRSAEncryption
1b:41:2d:87:d1:0b:41:8a:34:d1:fa:4a:5e:a3:c9:5f:22:42:
50:e5:bf:37:c9:b6:5c:71:a4:cc:6b:72:cf:8e:14:c3:d7:a3:
e5:0c:d3:3e:40:cd:bb:ad:ec:a8:6f:9b:91:22:7f:6d:35:0b:
26:2c:89:11:c5:11:0a:d2:a1:67:46:0f:65:07:6e:f1:8f:5a:
ee:68:02:17:a6:f9:2c:1b:a8:4b:97:a0:38:a0:ed:55:6e:dd:
fd:f0:f0:ad:6f:e1:f9:db:37:41:1e:be:9d:7a:01:c4:bf:d7:
c7:8d:a7:b5:1c:39:b8:34:96:c1:fc:73:36:1c:51:50:80:13:
6f:28:e6:75:fa:12:5a:61:6c:00:fe:ce:da:94:92:0b:c6:dd:
fe:bc:f2:5e:ef:df:9f:5a:4b:9d:b6:32:57:c5:37:70:47:d1:
fb:fb:2d:52:4b:8f:89:94:c8:47:ad:80:34:ca:ad:32:72:6d:
2e:00:2f:d8:95:62:32:cb:01:65:d2:2f:ec:17:c4:19:f9:01:
49:36:6b:10:9a:db:75:ce:74:3c:9e:c5:66:7e:76:d4:8b:15:
e0:c6:4b:a8:ff:e2:7f:77:86:bb:8e:95:37:48:60:19:c7:91:
f9:6a:40:cb:58:b0:d4:c3:92:af:61:32:a8:a7:3d:93:55:ed:
c5:c7:30:9e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUW4UCvJ/E5q6FHPZBLrYUhyiwwIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTQ4NTdaFw0yNjAzMDkxMTUzNTdaMDMxMTAvBgNV
BAMTKEREMjZERkRFQ0ZCQTBDODM2QTU1Mjc3NDEwMDFCNDAzNTg1NzZFNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yLUVnr6mtHaui1L+JF0AXRUs
1PLyXHRInvC1i29bAR/Z+l19Vt7OI6abNdGxuVfliU4njzDf5uypxckLoiVNCvH8
DJt+6Np9yJENRhu3Mk1po7H1HSf39TFaNOf8YAy/h1IS4EM1ow4vHOOubGVGzbHQ
BWdaJWidin5m0DbcRef+avja8zrfcbqDJ5lOV3RU81PosYxq0Qvu1vbueMESQd0+
vVxdpYyQzWPKIBsZST4X0yPf14eDrmukS3IvEw9iq3h44b8t0nH5wiHoYdW/X2Zz
t3SAZHMT1s2kbqNXWupgpRn0I9UUwkTU8d0vPxjX5eRPjgkwuoDUHi3uFFWVAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU3Sbf3s+6DINqVSd0EAG0A1hXbnMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNzMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgcTAN
BgkqhkiG9w0BAQsFAAOCAQEAG0Eth9ELQYo00fpKXqPJXyJCUOW/N8m2XHGkzGty
z44Uw9ej5QzTPkDNu63sqG+bkSJ/bTULJiyJEcURCtKhZ0YPZQdu8Y9a7mgCF6b5
LBuoS5egOKDtVW7d/fDwrW/h+ds3QR6+nXoBxL/Xx42ntRw5uDSWwfxzNhxRUIAT
byjmdfoSWmFsAP7O2pSSC8bd/rzyXu/fn1pLnbYyV8U3cEfR+/stUkuPiZTIR62A
NMqtMnJtLgAv2JViMssBZdIv7BfEGfkBSTZrEJrbdc50PJ7FZn521IsV4MZLqP/i
f3eGu46VN0hgGceR+WpAy1iw1MOSr2EyqKc9k1Xtxccwng==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:17 2025 by rpki-client