Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /WMtPXXfdWOj/GZ2sK5qh7dtZurLWiN3PXttny5Tfcc=
Subject key identifier: 6B:D5:83:D5:CD:67:C6:30:49:2D:B5:7C:3A:E9:33:81:7E:4E:41:A7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6D85FEC221D9256C960859E5A8CFB70D9CD054E3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037623a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:35 +0000
ROA not before: Mon 10 Mar 2025 11:49:35 +0000
ROA not after: Mon 09 Mar 2026 11:54:35 +0000
asID: 16909
IP address blocks: 2a14:7584:607b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:85:fe:c2:21:d9:25:6c:96:08:59:e5:a8:cf:b7:0d:9c:d0:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:35 2025 GMT
Not After : Mar 9 11:54:35 2026 GMT
Subject: CN=6BD583D5CD67C630492DB57C3AE933817E4E41A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:0b:b0:a0:87:7e:0b:26:6c:42:33:02:fe:
0e:2c:c6:5c:7a:b6:29:2c:ce:f2:0e:48:ba:aa:61:
21:66:5a:91:24:02:88:94:19:3a:77:32:15:54:77:
0b:cb:03:e4:8f:91:fc:f1:e9:e9:60:72:94:c6:f5:
ba:fb:59:71:4d:25:dc:9f:06:05:f3:d1:68:88:0e:
89:a9:ac:61:a1:29:0c:58:c3:8d:1b:97:f8:bb:86:
e6:8a:80:6f:7a:c9:70:4a:1d:cd:dd:19:39:68:9b:
84:a2:b8:0d:66:a4:a0:2c:a2:3e:ff:af:57:60:44:
fb:eb:ab:80:17:a2:b6:96:6d:69:c7:e2:90:bd:77:
35:6c:71:72:be:6b:c6:b4:73:4d:49:06:e6:68:41:
20:bd:80:cc:da:19:00:66:de:77:50:93:43:fe:15:
c1:6f:8d:c0:8b:7e:25:2c:ed:c8:bf:76:b7:c8:0d:
ef:5b:08:eb:cd:87:c2:0c:78:7c:3a:97:76:24:9d:
e7:ab:fb:5e:39:0f:13:04:80:bf:67:71:06:65:25:
52:fb:e2:73:d3:15:e5:01:f3:c1:bd:4c:3a:3d:3b:
ba:26:a0:e6:13:5b:e7:fb:9a:74:3d:50:3c:70:0b:
a1:5c:c3:a4:98:45:23:70:38:4b:2c:2a:47:e0:ce:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D5:83:D5:CD:67:C6:30:49:2D:B5:7C:3A:E9:33:81:7E:4E:41:A7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:607b::/48
Signature Algorithm: sha256WithRSAEncryption
5b:4b:09:70:c1:5f:5c:eb:ef:14:7a:3c:15:80:d0:a7:5f:62:
ef:5f:00:6f:9f:32:13:3b:7a:8f:7c:b8:ae:d8:53:0a:24:ac:
da:cb:32:c4:92:e1:a3:c0:85:fb:98:54:b1:57:69:e2:96:6d:
59:a7:a8:c5:2d:15:91:33:b3:7d:14:4b:43:3c:90:de:d7:d4:
07:00:64:8c:ea:28:a4:25:65:4d:78:df:90:e7:10:45:6a:8b:
cf:fe:7a:cd:65:72:f7:cd:38:dc:06:b8:3a:c6:b9:27:1c:75:
d3:cc:3c:fb:88:a6:0c:68:0b:90:c0:57:47:62:19:33:f6:d6:
01:0e:8d:ab:2b:4f:a1:b9:77:d2:ec:22:0e:5d:ec:8b:41:b6:
1c:f0:44:b7:68:32:c3:cc:3a:d0:d6:13:71:00:4c:cc:25:dc:
2a:82:85:95:4e:c0:0f:0a:dc:ca:19:56:34:d7:36:8c:b2:1c:
92:0a:59:5a:c0:9e:84:fb:12:f7:3a:73:3f:42:d2:87:ad:6e:
a6:ca:86:01:0e:49:92:db:3b:06:17:92:9a:f8:a5:4a:71:06:
5f:5a:d9:5c:3a:f0:f8:09:a9:41:f2:be:a9:3f:77:7a:05:ae:
9a:55:04:7f:d9:ee:7f:69:f3:f2:52:bd:0a:44:c8:ee:2d:51:
c9:d0:ff:b1
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUbYX+wiHZJWyWCFnlqM+3DZzQVOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTQ5MzVaFw0yNjAzMDkxMTU0MzVaMDMxMTAvBgNV
BAMTKDZCRDU4M0Q1Q0Q2N0M2MzA0OTJEQjU3QzNBRTkzMzgxN0U0RTQxQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOQuwoId+CyZsQjMC/g4sxlx6
tikszvIOSLqqYSFmWpEkAoiUGTp3MhVUdwvLA+SPkfzx6elgcpTG9br7WXFNJdyf
BgXz0WiIDomprGGhKQxYw40bl/i7huaKgG96yXBKHc3dGTlom4SiuA1mpKAsoj7/
r1dgRPvrq4AXoraWbWnH4pC9dzVscXK+a8a0c01JBuZoQSC9gMzaGQBm3ndQk0P+
FcFvjcCLfiUs7ci/drfIDe9bCOvNh8IMeHw6l3Ykneer+145DxMEgL9ncQZlJVL7
4nPTFeUB88G9TDo9O7omoOYTW+f7mnQ9UDxwC6Fcw6SYRSNwOEssKkfgztILAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUa9WD1c1nxjBJLbV8OukzgX5OQacwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNzYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgezAN
BgkqhkiG9w0BAQsFAAOCAQEAW0sJcMFfXOvvFHo8FYDQp19i718Ab58yEzt6j3y4
rthTCiSs2ssyxJLho8CF+5hUsVdp4pZtWaeoxS0VkTOzfRRLQzyQ3tfUBwBkjOoo
pCVlTXjfkOcQRWqLz/56zWVy98043Aa4Osa5Jxx108w8+4imDGgLkMBXR2IZM/bW
AQ6NqytPobl30uwiDl3si0G2HPBEt2gyw8w60NYTcQBMzCXcKoKFlU7ADwrcyhlW
NNc2jLIckgpZWsCehPsS9zpzP0LSh61upsqGAQ5Jkts7BheSmvilSnEGX1rZXDrw
+AmpQfK+qT93egWumlUEf9nuf2nz8lK9CkTI7i1RydD/sQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:14 2025 by rpki-client