Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363235643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lnyNGBqz/w0YxpnC8tsLBip6Xw+C8mJ7mVBrakALlYg=
Subject key identifier: 53:9E:A4:42:83:4B:20:EC:A8:A8:32:AC:EE:B7:C1:00:F5:E1:A5:D9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6FC83AB965F8B34C7D90E8E0D1A62637043B1899
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235643a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:06 +0000
ROA not before: Mon 12 May 2025 16:13:06 +0000
ROA not after: Mon 11 May 2026 16:18:06 +0000
asID: 16909
IP address blocks: 2a14:7584:625d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 00:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c8:3a:b9:65:f8:b3:4c:7d:90:e8:e0:d1:a6:26:37:04:3b:18:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:06 2025 GMT
Not After : May 11 16:18:06 2026 GMT
Subject: CN=539EA442834B20ECA8A832ACEEB7C100F5E1A5D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:1d:be:21:18:bb:2c:8f:1e:54:d7:69:e8:
52:ca:bc:04:10:75:7b:46:72:fe:99:92:57:96:9d:
2f:57:bd:79:07:c1:28:06:02:6a:c0:f6:6c:51:6a:
40:6e:8b:37:99:65:d7:aa:e1:7a:f7:91:48:94:d9:
aa:98:11:2a:42:3f:36:41:49:2f:ef:63:84:de:ab:
1f:63:ec:7a:4f:9a:d3:ca:1f:02:63:ae:fc:4b:8e:
dc:9e:0b:d8:12:b6:fa:38:51:29:c6:25:95:2f:16:
b9:37:2c:3d:ca:6a:f4:34:84:f4:8a:6f:89:d2:61:
2c:4d:0b:ef:ff:d4:7f:2e:31:2c:3a:7f:0f:15:5f:
ed:fb:61:46:ac:f9:b5:ef:fa:21:36:e4:a8:99:dc:
6f:1e:90:41:09:91:55:81:13:89:23:0f:62:4f:b1:
13:62:30:06:63:b3:df:0a:aa:05:17:c2:99:de:bb:
a2:87:02:3e:fb:ce:f4:bc:90:ac:6f:63:c8:9a:cb:
c7:b9:6a:e1:db:f3:96:7d:3d:99:16:0e:60:32:9e:
9f:2f:0d:70:83:74:f4:4e:24:24:a7:27:8f:9a:ec:
a5:d8:0d:ca:f0:3c:1d:f8:81:31:57:a8:61:b8:d9:
93:15:0c:30:52:1c:42:70:7d:8a:5b:49:50:48:de:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9E:A4:42:83:4B:20:EC:A8:A8:32:AC:EE:B7:C1:00:F5:E1:A5:D9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:625d::/48
Signature Algorithm: sha256WithRSAEncryption
72:8b:25:c8:75:6c:b9:5b:40:9d:b2:1e:bd:b6:c5:9f:48:ae:
8c:bf:4f:11:4e:b0:4c:08:d5:9f:ad:75:bd:e3:33:5e:ad:2b:
dc:5a:7d:60:72:ab:91:72:04:2f:fc:e7:7a:93:ad:01:23:e5:
a5:48:98:4b:45:6f:bc:31:56:7f:be:d5:93:ba:b8:43:91:f3:
5b:41:ad:77:e5:73:f8:60:e1:4b:85:80:74:e9:57:f4:73:20:
39:68:20:93:f3:7a:09:64:e2:b2:ec:7e:7e:96:b4:27:50:49:
23:87:13:44:8a:b1:8e:45:3a:9e:fc:62:87:4b:e6:70:4a:17:
97:7d:49:44:fd:92:ed:4d:e3:15:bf:98:bf:cb:05:da:95:d7:
9e:8e:a0:83:e0:e9:ea:53:47:f3:64:c7:61:3f:f8:ca:ee:96:
bc:1f:24:f4:c5:da:88:bd:44:01:09:e4:8d:8c:59:44:91:a7:
e2:a2:c0:63:4c:ee:bc:bb:37:55:4c:e7:3c:b4:d4:8a:d6:cf:
b8:ca:d7:a3:f6:78:0b:d1:eb:17:79:96:0d:59:04:d8:f1:eb:
fc:1d:9b:1f:67:da:7e:cf:6c:99:25:69:44:3f:fa:e4:47:3a:
6b:18:92:e1:88:25:c9:cc:f7:79:16:7c:06:76:b8:b1:7e:85:
f6:06:57:1f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUb8g6uWX4s0x9kOjg0aYmNwQ7GJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDZaFw0yNjA1MTExNjE4MDZaMDMxMTAvBgNV
BAMTKDUzOUVBNDQyODM0QjIwRUNBOEE4MzJBQ0VFQjdDMTAwRjVFMUE1RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnB2+IRi7LI8eVNdp6FLKvAQQ
dXtGcv6ZkleWnS9XvXkHwSgGAmrA9mxRakBuizeZZdeq4Xr3kUiU2aqYESpCPzZB
SS/vY4Teqx9j7HpPmtPKHwJjrvxLjtyeC9gStvo4USnGJZUvFrk3LD3KavQ0hPSK
b4nSYSxNC+//1H8uMSw6fw8VX+37YUas+bXv+iE25KiZ3G8ekEEJkVWBE4kjD2JP
sRNiMAZjs98KqgUXwpneu6KHAj77zvS8kKxvY8iay8e5auHb85Z9PZkWDmAynp8v
DXCDdPROJCSnJ4+a7KXYDcrwPB34gTFXqGG42ZMVDDBSHEJwfYpbSVBI3sorAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUU56kQoNLIOyoqDKs7rfBAPXhpdkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNTY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiXTAN
BgkqhkiG9w0BAQsFAAOCAQEAcoslyHVsuVtAnbIevbbFn0iujL9PEU6wTAjVn611
veMzXq0r3Fp9YHKrkXIEL/znepOtASPlpUiYS0VvvDFWf77Vk7q4Q5HzW0Gtd+Vz
+GDhS4WAdOlX9HMgOWggk/N6CWTisux+fpa0J1BJI4cTRIqxjkU6nvxih0vmcEoX
l31JRP2S7U3jFb+Yv8sF2pXXno6gg+Dp6lNH82THYT/4yu6WvB8k9MXaiL1EAQnk
jYxZRJGn4qLAY0zuvLs3VUznPLTUitbPuMrXo/Z4C9HrF3mWDVkE2PHr/B2bH2fa
fs9smSVpRD/65Ec6axiS4Yglycz3eRZ8Bna4sX6F9gZXHw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:28 2025 by rpki-client