Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AJkT4Tu034sBszY+D27CCvXI0NQxxstQhlwAFx7H4ZA=
Subject key identifier: 6C:46:53:65:3C:5C:24:59:C1:3D:AF:41:A1:C7:B8:D5:96:BF:40:9C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3FA1552F13756865FE6B93538FC06670655FAE25
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238343a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 21:42:02 +0000
ROA not before: Wed 14 May 2025 21:37:02 +0000
ROA not after: Wed 13 May 2026 21:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6284::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a1:55:2f:13:75:68:65:fe:6b:93:53:8f:c0:66:70:65:5f:ae:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 21:37:02 2025 GMT
Not After : May 13 21:42:02 2026 GMT
Subject: CN=6C4653653C5C2459C13DAF41A1C7B8D596BF409C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:bb:2b:f6:16:cb:35:f4:53:e5:b9:01:d3:
be:2b:2b:59:9a:e4:7b:80:d9:83:07:3d:a0:5d:ca:
b3:e0:cd:8d:de:46:af:be:7c:b3:53:02:3c:2d:fe:
fd:be:14:4b:43:ba:09:a3:1b:25:3b:e6:e2:2c:89:
3b:f6:6c:79:ee:29:55:09:de:83:01:0c:77:72:af:
11:ef:b8:7f:79:8c:cf:a7:3f:a3:51:87:98:0d:0f:
6a:85:52:9b:1e:06:8f:53:d0:2c:24:4e:3a:87:1e:
73:4b:f7:37:c5:8b:ab:a6:8f:d3:7d:27:70:db:e5:
99:46:1e:90:01:42:c5:2f:83:88:c7:0c:6f:da:b2:
b0:a0:51:b6:fc:c8:17:e6:4f:a1:67:06:1f:7e:52:
95:b4:0a:b9:95:ae:c7:cd:f4:57:96:74:e1:25:3f:
e8:cc:46:3c:d6:1e:f2:81:20:9d:56:d3:c6:c2:91:
b4:b9:d5:6c:5e:ff:4b:bf:55:0d:88:36:5e:c2:94:
fc:c0:00:68:72:99:9e:a0:31:77:42:7c:11:33:86:
68:03:32:50:bc:d4:8f:d4:18:65:6c:a2:54:e9:b5:
fe:0a:c8:ef:55:bf:7f:79:19:f6:de:08:63:60:cc:
06:76:4c:2b:ef:29:40:51:3c:16:b5:c5:65:07:f0:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:46:53:65:3C:5C:24:59:C1:3D:AF:41:A1:C7:B8:D5:96:BF:40:9C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6284::/48
Signature Algorithm: sha256WithRSAEncryption
2e:0c:91:75:8a:08:69:94:c9:cb:af:4a:0a:be:a0:84:9e:40:
72:b4:fc:63:88:f7:21:57:97:74:49:73:0e:32:f4:00:0e:91:
d9:9d:7d:ac:57:a6:dc:51:f1:9d:06:83:64:74:4f:06:63:77:
2a:f8:71:95:4f:e0:2b:1f:17:92:eb:63:e8:95:4f:f6:00:63:
9e:87:86:1f:bc:e2:91:33:44:74:1f:89:f7:78:77:df:33:98:
71:ee:67:9b:4e:26:44:5b:50:3c:43:fe:f4:ab:22:27:07:4f:
e5:e0:e0:67:fe:6a:06:31:02:cc:47:4f:32:5f:91:6c:b3:ab:
ff:5f:e6:ce:92:7a:98:3b:65:95:77:64:9f:79:69:4c:9f:38:
82:2f:b2:a7:9a:49:27:a5:c7:70:fc:30:cd:32:c7:86:f4:00:
dd:6d:84:23:2b:4a:f8:9f:4e:13:f9:11:f6:fe:76:c3:1e:aa:
8f:37:b2:a8:71:b1:33:0c:3e:ca:3c:7b:9d:9e:0e:17:e0:7d:
01:4e:1b:b1:a3:ef:58:8b:68:24:ee:30:bb:14:96:8e:0d:cb:
cc:f8:28:1b:41:27:f7:51:90:16:fc:5a:77:6f:2f:89:ec:da:
8e:a2:41:06:e2:47:a6:f3:bd:76:6c:65:f9:27:54:87:61:d0:
2e:80:0b:24
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUP6FVLxN1aGX+a5NTj8BmcGVfriUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTQyMTM3MDJaFw0yNjA1MTMyMTQyMDJaMDMxMTAvBgNV
BAMTKDZDNDY1MzY1M0M1QzI0NTlDMTNEQUY0MUExQzdCOEQ1OTZCRjQwOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+7sr9hbLNfRT5bkB074rK1ma
5HuA2YMHPaBdyrPgzY3eRq++fLNTAjwt/v2+FEtDugmjGyU75uIsiTv2bHnuKVUJ
3oMBDHdyrxHvuH95jM+nP6NRh5gND2qFUpseBo9T0CwkTjqHHnNL9zfFi6umj9N9
J3Db5ZlGHpABQsUvg4jHDG/asrCgUbb8yBfmT6FnBh9+UpW0CrmVrsfN9FeWdOEl
P+jMRjzWHvKBIJ1W08bCkbS51Wxe/0u/VQ2INl7ClPzAAGhymZ6gMXdCfBEzhmgD
MlC81I/UGGVsolTptf4KyO9Vv395GfbeCGNgzAZ2TCvvKUBRPBa1xWUH8DbhAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUbEZTZTxcJFnBPa9Boce41Za/QJwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzODM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRihDAN
BgkqhkiG9w0BAQsFAAOCAQEALgyRdYoIaZTJy69KCr6ghJ5AcrT8Y4j3IVeXdElz
DjL0AA6R2Z19rFem3FHxnQaDZHRPBmN3KvhxlU/gKx8Xkutj6JVP9gBjnoeGH7zi
kTNEdB+J93h33zOYce5nm04mRFtQPEP+9KsiJwdP5eDgZ/5qBjECzEdPMl+RbLOr
/1/mzpJ6mDtllXdkn3lpTJ84gi+yp5pJJ6XHcPwwzTLHhvQA3W2EIytK+J9OE/kR
9v52wx6qjzeyqHGxMww+yjx7nZ4OF+B9AU4bsaPvWItoJO4wuxSWjg3LzPgoG0En
91GQFvxad28viezajqJBBuJHpvO9dmxl+SdUh2HQLoALJA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:04 2025 by rpki-client