Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062663a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363062663a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: rMCjNJ4MXh0GYz+LYDhHGhjhd6ZpyLFELwfuVD9/ZA0=
Subject key identifier: 5D:67:33:6F:44:45:8E:D1:56:33:CF:E9:72:27:52:8B:5F:C5:56:EA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0345CA0F7D7A4B0EC59883DFC41D99181EB3ECC8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062663a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 22 Mar 2025 15:21:21 +0000
ROA not before: Sat 22 Mar 2025 15:16:21 +0000
ROA not after: Sat 21 Mar 2026 15:21:21 +0000
asID: 401507
IP address blocks: 2a14:7584:60bf::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:45:ca:0f:7d:7a:4b:0e:c5:98:83:df:c4:1d:99:18:1e:b3:ec:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:16:21 2025 GMT
Not After : Mar 21 15:21:21 2026 GMT
Subject: CN=5D67336F44458ED15633CFE97227528B5FC556EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:84:f8:25:df:a3:a1:3b:74:22:66:0e:40:
fb:94:0c:d2:1b:81:ac:53:cf:df:d8:df:79:fc:af:
e5:ce:c8:ec:e2:a1:c3:73:77:dd:6f:7d:7e:76:a3:
23:d0:20:1e:5d:dd:e2:c6:b7:c1:2a:0f:68:20:32:
02:84:40:5d:67:b0:88:6a:af:af:f1:1d:05:79:a1:
08:c9:8a:7d:55:25:01:0a:99:39:ff:6c:12:6e:75:
9a:7b:9a:dd:e8:6c:21:54:48:65:fc:71:c3:e2:31:
2e:5c:7c:5b:27:7b:21:4e:93:ec:a3:78:4d:f1:7f:
15:d5:f1:3a:7c:96:bf:8e:b1:c4:12:34:d8:3a:59:
cf:1e:6a:0d:ae:1a:ee:b7:91:17:f6:43:d6:94:32:
31:ff:11:96:de:b9:55:52:ba:a0:17:e9:05:1e:e8:
8a:c8:29:25:55:99:0c:18:b9:32:4e:09:fe:d2:c1:
c9:bc:75:0d:9b:a4:da:fe:70:e3:51:d3:06:94:ae:
5f:43:5e:be:d8:51:40:91:6e:0e:63:2b:6e:19:32:
29:11:70:33:a9:dd:9b:2d:dd:2e:3e:f3:7c:66:da:
c8:4e:6a:5e:47:6b:27:80:a8:35:9c:d6:23:fe:0e:
45:d1:01:b8:7f:e2:b2:f4:c8:ad:8b:0a:20:cc:11:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:67:33:6F:44:45:8E:D1:56:33:CF:E9:72:27:52:8B:5F:C5:56:EA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062663a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60bf::/48
Signature Algorithm: sha256WithRSAEncryption
42:6f:24:21:6e:0e:56:8a:15:7e:37:86:f3:36:5f:60:a9:82:
f4:d2:19:bf:0d:a5:f2:d1:69:68:21:4f:91:8e:24:d0:3a:91:
56:0c:96:cb:e9:98:cb:76:fb:8b:63:2d:77:7d:42:f1:bd:08:
c1:65:f5:2c:4c:46:77:44:97:23:aa:a1:93:c4:5b:be:9c:41:
4a:b2:ff:95:3e:84:f2:b9:26:97:b6:e5:58:24:66:5c:74:9e:
86:17:ae:ad:b7:c4:37:8f:6b:5a:be:eb:a5:b3:e8:1f:3e:0e:
19:da:40:0d:a1:4a:1a:e9:9a:e1:80:dd:b5:36:c5:c2:1b:bd:
2c:06:76:c8:c0:b7:9d:91:87:88:16:91:a4:c1:9c:df:4e:fc:
67:a4:98:7f:3d:00:1b:db:2b:77:78:d0:35:ea:33:6f:a6:4a:
a0:58:57:f3:19:61:be:33:65:18:06:9c:1f:f7:b4:15:ee:19:
79:73:23:92:ef:20:1c:47:00:19:20:27:25:33:12:a8:39:c1:
5f:92:e1:48:66:de:1d:51:f4:b2:dc:30:cd:20:c3:3a:8c:18:
c2:71:f0:1f:67:c0:b6:89:5b:47:22:40:b6:59:2b:f4:64:5f:
1b:2d:4e:09:24:42:f8:43:ea:c8:52:8c:10:5d:57:cf:84:3c:
c0:14:8e:61
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUA0XKD316Sw7FmIPfxB2ZGB6z7MgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMjIxNTE2MjFaFw0yNjAzMjExNTIxMjFaMDMxMTAvBgNV
BAMTKDVENjczMzZGNDQ0NThFRDE1NjMzQ0ZFOTcyMjc1MjhCNUZDNTU2RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGYT4Jd+joTt0ImYOQPuUDNIb
gaxTz9/Y33n8r+XOyOziocNzd91vfX52oyPQIB5d3eLGt8EqD2ggMgKEQF1nsIhq
r6/xHQV5oQjJin1VJQEKmTn/bBJudZp7mt3obCFUSGX8ccPiMS5cfFsneyFOk+yj
eE3xfxXV8Tp8lr+OscQSNNg6Wc8eag2uGu63kRf2Q9aUMjH/EZbeuVVSuqAX6QUe
6IrIKSVVmQwYuTJOCf7Swcm8dQ2bpNr+cONR0waUrl9DXr7YUUCRbg5jK24ZMikR
cDOp3Zst3S4+83xm2shOal5HayeAqDWc1iP+DkXRAbh/4rL0yK2LCiDMEVNbAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUXWczb0RFjtFWM8/pcidSi1/FVuowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2MjY2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGC/
MA0GCSqGSIb3DQEBCwUAA4IBAQBCbyQhbg5WihV+N4bzNl9gqYL00hm/DaXy0Wlo
IU+RjiTQOpFWDJbL6ZjLdvuLYy13fULxvQjBZfUsTEZ3RJcjqqGTxFu+nEFKsv+V
PoTyuSaXtuVYJGZcdJ6GF66tt8Q3j2tavuuls+gfPg4Z2kANoUoa6ZrhgN21NsXC
G70sBnbIwLedkYeIFpGkwZzfTvxnpJh/PQAb2yt3eNA16jNvpkqgWFfzGWG+M2UY
Bpwf97QV7hl5cyOS7yAcRwAZICclMxKoOcFfkuFIZt4dUfSy3DDNIMM6jBjCcfAf
Z8C2iVtHIkC2WSv0ZF8bLU4JJEL4Q+rIUowQXVfPhDzAFI5h
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:58 2025 by rpki-client