Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: U0lHgmQ/7zb3197aYjchbZqoXUoN5JozH/8A2M21BBg=
Subject key identifier: 5F:13:E6:20:B6:D8:E4:71:E4:FB:7F:CA:62:0E:2D:7F:E9:87:71:69
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5887896B1D4BB89D3771AD20F6828CD1AAA7EC4D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232613a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:04 +0000
ROA not before: Mon 12 May 2025 16:13:04 +0000
ROA not after: Mon 11 May 2026 16:18:04 +0000
asID: 16909
IP address blocks: 2a14:7584:622a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 16:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:87:89:6b:1d:4b:b8:9d:37:71:ad:20:f6:82:8c:d1:aa:a7:ec:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:04 2025 GMT
Not After : May 11 16:18:04 2026 GMT
Subject: CN=5F13E620B6D8E471E4FB7FCA620E2D7FE9877169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:8b:58:98:ee:c3:27:f6:aa:25:90:55:d0:
ec:8a:7c:19:6a:f7:90:a2:5a:09:02:1c:b3:78:f2:
5e:a7:43:a6:df:a8:b7:5a:ae:c5:f4:a4:13:fb:d0:
68:73:6e:01:ff:ac:b8:09:aa:bb:ae:39:5e:58:52:
9b:05:3e:ff:ed:76:57:4e:2b:86:c9:b5:1e:d9:77:
b8:bc:4c:fa:bb:e8:fc:51:bc:3d:ff:c3:f3:96:35:
ad:82:fb:21:80:c1:50:e8:f7:71:8b:b7:13:da:93:
20:59:aa:31:af:27:ff:6b:fe:fd:2c:27:db:d0:9a:
e1:1c:b3:f3:3a:03:d1:b5:70:b7:33:e0:20:f9:17:
19:12:57:32:29:9c:b2:3d:52:90:4c:79:c7:35:55:
e1:20:e3:0f:cd:b4:8d:d5:bd:dc:b0:a0:92:ab:dc:
3f:ed:36:51:67:d5:61:94:7e:94:a2:18:7e:2b:b9:
a6:90:4b:10:74:ed:cc:35:7a:ec:ec:e8:3a:c8:62:
ff:47:96:7a:10:8b:87:6b:ad:46:d1:39:dd:9c:eb:
b2:e0:73:fa:d9:89:56:6e:24:73:34:f8:d9:67:b9:
e7:f8:58:09:32:6f:66:79:f9:bb:85:d7:10:5c:e5:
3b:15:de:52:b7:07:70:8c:1d:d9:21:4a:71:7a:d4:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:E6:20:B6:D8:E4:71:E4:FB:7F:CA:62:0E:2D:7F:E9:87:71:69
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:622a::/48
Signature Algorithm: sha256WithRSAEncryption
3c:a2:53:9e:1c:8f:d7:ca:4f:67:8a:f5:70:59:ed:25:7f:d5:
01:3f:69:c0:c7:41:05:95:5e:ba:73:31:56:dc:ed:ae:07:59:
12:44:39:f8:90:19:63:d6:e2:96:3a:92:f6:7b:bc:a6:29:99:
56:d3:bb:a2:6c:a1:64:ca:8b:04:07:95:0e:44:5d:a4:15:c4:
16:e1:e0:20:5e:d0:fe:d3:17:8e:f7:62:16:40:e8:cf:de:fd:
57:61:81:c6:9b:32:51:c4:f5:53:75:08:93:27:d7:70:d0:44:
ff:4f:38:29:83:b6:0a:d0:c3:74:6f:e5:08:66:7a:37:c2:8b:
80:5f:02:0d:10:98:1d:43:32:9b:c0:f9:bd:72:f4:7f:04:0e:
93:22:81:d8:ab:47:e3:03:75:1e:e4:ac:65:63:53:72:d4:b5:
48:a2:2f:fe:21:d4:8e:9a:7e:48:53:fc:43:83:d5:a5:31:27:
6e:ef:46:16:dd:47:49:87:18:98:fe:e2:c7:b4:34:74:c6:96:
f1:94:0e:a9:03:9d:af:35:31:ea:a9:54:51:93:16:34:52:45:
93:00:72:25:b0:59:24:f6:f6:4c:c4:59:62:3a:9a:22:ba:81:
b0:f8:10:bd:2b:7a:27:d4:df:27:38:f5:83:b3:0f:91:91:ce:
63:54:b4:c8
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUWIeJax1LuJ03ca0g9oKM0aqn7E0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDRaFw0yNjA1MTExNjE4MDRaMDMxMTAvBgNV
BAMTKDVGMTNFNjIwQjZEOEU0NzFFNEZCN0ZDQTYyMEUyRDdGRTk4NzcxNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsItYmO7DJ/aqJZBV0OyKfBlq
95CiWgkCHLN48l6nQ6bfqLdarsX0pBP70GhzbgH/rLgJqruuOV5YUpsFPv/tdldO
K4bJtR7Zd7i8TPq76PxRvD3/w/OWNa2C+yGAwVDo93GLtxPakyBZqjGvJ/9r/v0s
J9vQmuEcs/M6A9G1cLcz4CD5FxkSVzIpnLI9UpBMecc1VeEg4w/NtI3VvdywoJKr
3D/tNlFn1WGUfpSiGH4ruaaQSxB07cw1euzs6DrIYv9HlnoQi4drrUbROd2c67Lg
c/rZiVZuJHM0+Nlnuef4WAkyb2Z5+buF1xBc5TsV3lK3B3CMHdkhSnF61ECfAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUXxPmILbY5HHk+3/KYg4tf+mHcWkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzMjYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiKjAN
BgkqhkiG9w0BAQsFAAOCAQEAPKJTnhyP18pPZ4r1cFntJX/VAT9pwMdBBZVeunMx
VtztrgdZEkQ5+JAZY9biljqS9nu8pimZVtO7omyhZMqLBAeVDkRdpBXEFuHgIF7Q
/tMXjvdiFkDoz979V2GBxpsyUcT1U3UIkyfXcNBE/084KYO2CtDDdG/lCGZ6N8KL
gF8CDRCYHUMym8D5vXL0fwQOkyKB2KtH4wN1HuSsZWNTctS1SKIv/iHUjpp+SFP8
Q4PVpTEnbu9GFt1HSYcYmP7ix7Q0dMaW8ZQOqQOdrzUx6qlUUZMWNFJFkwByJbBZ
JPb2TMRZYjqaIrqBsPgQvSt6J9TfJzj1g7MPkZHOY1S0yA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:24 2025 by rpki-client