Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363231343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: bL5hPOb7QJHeF8Fknpl78lDHEqKkqBhO9FK0vnA1/co=
Subject key identifier: F3:71:1D:84:F8:A3:09:B9:B2:F4:88:FF:18:D1:AF:68:E4:02:0C:4D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 313627CC23F4BB6C69E2C0C60C285F9D3B0AAF3A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231343a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:04 +0000
ROA not before: Mon 12 May 2025 16:13:04 +0000
ROA not after: Mon 11 May 2026 16:18:04 +0000
asID: 16909
IP address blocks: 2a14:7584:6214::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 08:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:36:27:cc:23:f4:bb:6c:69:e2:c0:c6:0c:28:5f:9d:3b:0a:af:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:04 2025 GMT
Not After : May 11 16:18:04 2026 GMT
Subject: CN=F3711D84F8A309B9B2F488FF18D1AF68E4020C4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:7a:2e:db:08:b6:3b:17:bb:bd:75:30:fc:
eb:ad:1e:6e:e2:a6:4a:77:ec:0a:18:ec:c1:79:c2:
d0:d0:a3:2b:77:bf:43:50:53:1c:ca:f9:33:36:1c:
d5:5e:bd:11:84:60:25:a1:a0:31:39:3c:66:15:b3:
e5:79:96:a2:58:27:7a:8d:34:b8:59:b9:15:26:ce:
77:e6:1e:5b:f9:d3:95:c5:3a:9e:be:a2:dc:ef:34:
aa:5d:34:1f:1b:1f:5d:f4:d1:fb:6a:12:b8:9e:ce:
73:c2:02:2b:74:7f:c9:e2:55:af:7d:15:c1:6a:46:
46:55:f4:5c:77:c3:e4:bf:8f:54:9e:fa:75:12:4d:
24:c7:d9:31:10:57:33:4d:7c:30:b9:16:6a:51:45:
6d:c9:51:66:dd:d7:2c:ed:58:51:f1:76:e9:24:7e:
5c:96:55:5d:c9:16:05:7d:81:20:52:a5:08:42:0e:
7e:f7:56:99:b2:62:b3:d4:eb:c6:73:a0:fa:9d:b8:
2c:b1:5f:76:0c:a2:a9:61:42:e7:74:da:a5:1e:a8:
92:de:fc:c7:ae:24:1e:94:b9:86:ec:fb:c6:1d:85:
fb:a2:0b:07:ec:0a:11:3f:49:13:d2:60:33:7b:61:
b9:d7:8b:38:2c:5b:01:a9:07:8f:ce:70:a6:cb:8b:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:1D:84:F8:A3:09:B9:B2:F4:88:FF:18:D1:AF:68:E4:02:0C:4D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6214::/48
Signature Algorithm: sha256WithRSAEncryption
0d:1e:b9:15:24:e8:55:40:59:09:88:03:47:71:5c:77:68:d3:
70:6e:69:02:dd:f8:0e:31:39:b2:e7:86:3c:af:8c:96:ef:5a:
26:e5:a1:d9:52:3d:6a:d6:b2:a0:6a:6d:3d:c9:56:df:e6:7f:
f5:4f:08:d1:54:5b:c2:94:50:42:2a:2f:db:da:c6:ad:9b:5f:
f3:ed:0a:b7:fb:51:42:35:c0:f6:eb:bc:52:81:a1:c5:ea:04:
34:fc:33:09:3f:22:3b:db:73:66:96:8a:ee:7c:1a:88:de:35:
ff:38:e9:dc:6a:02:74:d7:53:c4:f8:34:16:c0:3d:bf:ce:4c:
68:a3:95:ce:a0:e2:ee:88:30:62:0b:80:92:ba:04:2d:61:fa:
8f:b4:52:21:8c:30:c8:f4:dd:ea:2a:d3:88:fa:be:94:e1:b1:
88:90:b4:b7:0b:12:af:18:18:3b:12:79:41:34:39:a7:07:27:
60:f9:25:c9:0c:b2:84:aa:bd:36:8e:21:8e:80:0e:52:c7:86:
35:07:a4:78:2d:53:cd:0b:a5:96:85:bb:aa:48:0e:5e:21:2c:
ce:05:cc:bb:de:a7:64:76:7e:45:61:29:7b:17:35:9c:a8:c0:
22:0a:e7:c8:1b:66:2d:09:dc:79:c9:8a:60:e4:1d:61:3c:26:
0f:01:c0:25
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUMTYnzCP0u2xp4sDGDChfnTsKrzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDRaFw0yNjA1MTExNjE4MDRaMDMxMTAvBgNV
BAMTKEYzNzExRDg0RjhBMzA5QjlCMkY0ODhGRjE4RDFBRjY4RTQwMjBDNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7THou2wi2Oxe7vXUw/OutHm7i
pkp37AoY7MF5wtDQoyt3v0NQUxzK+TM2HNVevRGEYCWhoDE5PGYVs+V5lqJYJ3qN
NLhZuRUmznfmHlv505XFOp6+otzvNKpdNB8bH1300ftqErieznPCAit0f8niVa99
FcFqRkZV9Fx3w+S/j1Se+nUSTSTH2TEQVzNNfDC5FmpRRW3JUWbd1yztWFHxdukk
flyWVV3JFgV9gSBSpQhCDn73VpmyYrPU68ZzoPqduCyxX3YMoqlhQud02qUeqJLe
/MeuJB6UuYbs+8YdhfuiCwfsChE/SRPSYDN7YbnXizgsWwGpB4/OcKbLi8bJAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU83EdhPijCbmy9Ij/GNGvaOQCDE0wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzMTM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiFDAN
BgkqhkiG9w0BAQsFAAOCAQEADR65FSToVUBZCYgDR3Fcd2jTcG5pAt34DjE5sueG
PK+Mlu9aJuWh2VI9atayoGptPclW3+Z/9U8I0VRbwpRQQiov29rGrZtf8+0Kt/tR
QjXA9uu8UoGhxeoENPwzCT8iO9tzZpaK7nwaiN41/zjp3GoCdNdTxPg0FsA9v85M
aKOVzqDi7ogwYguAkroELWH6j7RSIYwwyPTd6irTiPq+lOGxiJC0twsSrxgYOxJ5
QTQ5pwcnYPklyQyyhKq9No4hjoAOUseGNQekeC1TzQulloW7qkgOXiEszgXMu96n
ZHZ+RWEpexc1nKjAIgrnyBtmLQncecmKYOQdYTwmDwHAJQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:43:28 2025 by rpki-client