Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: LiZF3OS8kAqITuHCFmqrzqktAdZWd815HG3cxtyBy8w=
Subject key identifier: 71:EA:F2:C3:17:47:6B:E5:E0:2D:83:FE:56:DB:D4:11:C2:CE:04:57
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3FE1EFFF70918F9514E124856608C09CD3741977
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263333a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 12:24:01 +0000
ROA not before: Sat 17 May 2025 12:19:01 +0000
ROA not after: Sat 16 May 2026 12:24:01 +0000
asID: 16909
IP address blocks: 2a14:7584:62c3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 23:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e1:ef:ff:70:91:8f:95:14:e1:24:85:66:08:c0:9c:d3:74:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 12:19:01 2025 GMT
Not After : May 16 12:24:01 2026 GMT
Subject: CN=71EAF2C317476BE5E02D83FE56DBD411C2CE0457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:53:d3:c9:49:cf:c1:27:fb:76:7f:88:bf:
96:8f:a8:3d:7e:f8:96:9c:fe:df:aa:55:bb:55:09:
b3:83:c8:33:49:6b:48:c9:d7:56:fa:bb:3c:77:2b:
3f:39:49:3d:b5:be:d4:f4:c3:ff:11:52:b5:1b:38:
11:d5:73:2f:47:47:48:87:3d:df:73:8c:5a:b3:b7:
d3:1e:fe:a3:7b:de:da:d1:7d:0c:95:2e:5e:67:74:
bb:1e:45:7c:76:f4:4b:bf:b4:6b:30:fd:90:51:39:
54:48:79:51:1e:ce:83:9d:2f:ab:c2:89:32:73:58:
e8:5c:f2:b4:a9:9f:33:8a:be:16:8c:79:f4:e3:9f:
b3:cc:4d:d8:38:d4:e2:27:88:30:17:82:48:83:3c:
00:e1:0b:07:8b:01:d8:83:91:a7:b8:48:78:12:9d:
0d:f1:62:1b:34:b9:12:8b:f0:c1:3d:c6:3b:3f:38:
2f:6b:d3:42:f8:77:8a:a1:4f:33:ea:33:a7:2c:35:
ce:95:ad:a0:bd:4e:7d:07:96:8c:30:3c:9f:97:b5:
be:19:e6:d0:6c:18:7f:27:47:b7:e0:66:49:55:0b:
32:7d:95:f6:02:92:ab:f3:e7:05:6d:53:51:f2:73:
80:da:89:a7:47:81:47:cb:86:41:d5:14:d0:7e:40:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EA:F2:C3:17:47:6B:E5:E0:2D:83:FE:56:DB:D4:11:C2:CE:04:57
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62c3::/48
Signature Algorithm: sha256WithRSAEncryption
77:cb:32:df:e3:a6:61:ab:44:4a:f4:51:e5:b4:85:03:b8:fc:
a2:1d:dd:71:4f:da:ec:6b:60:1e:7e:74:a7:1e:b7:42:22:1d:
3b:bd:ae:9f:c5:a0:0a:df:7f:5f:ce:83:25:68:8a:2e:9f:4a:
79:42:fd:03:22:2f:a1:4b:eb:e3:2d:b0:82:c6:47:2e:1f:be:
6f:26:0c:d7:3f:a6:8c:95:85:e0:25:80:84:92:8f:2d:31:04:
9d:dc:95:67:d3:d7:0f:e6:5c:70:9c:4e:31:d9:2d:f7:7f:18:
cf:79:e2:66:83:b5:58:e0:05:0e:7a:91:b4:16:db:63:df:03:
6e:c7:a3:63:89:07:58:5f:68:a0:5c:0c:d9:63:40:0f:88:25:
bf:7b:76:0e:ee:d2:75:33:c9:1c:4f:2b:8b:ac:fa:46:5d:23:
77:d3:25:7a:c4:b4:79:ef:ca:41:51:ce:3f:8e:b8:4c:a7:39:
24:74:55:e0:b6:14:72:f2:83:41:2e:23:6a:28:59:c2:b0:0e:
79:80:6c:b6:30:18:cc:32:19:a9:58:98:ec:10:1e:f7:6a:7a:
e9:1f:c0:c8:86:ff:34:51:af:da:61:46:9b:0c:6f:c7:e6:f0:
86:88:7b:8b:8d:f5:89:20:96:d8:cc:ed:5f:00:cd:f8:16:35:
26:7b:c9:20
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUP+Hv/3CRj5UU4SSFZgjAnNN0GXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTcxMjE5MDFaFw0yNjA1MTYxMjI0MDFaMDMxMTAvBgNV
BAMTKDcxRUFGMkMzMTc0NzZCRTVFMDJEODNGRTU2REJENDExQzJDRTA0NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mlPTyUnPwSf7dn+Iv5aPqD1+
+Jac/t+qVbtVCbODyDNJa0jJ11b6uzx3Kz85ST21vtT0w/8RUrUbOBHVcy9HR0iH
Pd9zjFqzt9Me/qN73trRfQyVLl5ndLseRXx29Eu/tGsw/ZBROVRIeVEezoOdL6vC
iTJzWOhc8rSpnzOKvhaMefTjn7PMTdg41OIniDAXgkiDPADhCweLAdiDkae4SHgS
nQ3xYhs0uRKL8ME9xjs/OC9r00L4d4qhTzPqM6csNc6VraC9Tn0HlowwPJ+Xtb4Z
5tBsGH8nR7fgZklVCzJ9lfYCkqvz5wVtU1Hyc4DaiadHgUfLhkHVFNB+QIMdAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUcerywxdHa+XgLYP+VtvUEcLOBFcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2MzMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiwzAN
BgkqhkiG9w0BAQsFAAOCAQEAd8sy3+OmYatESvRR5bSFA7j8oh3dcU/a7GtgHn50
px63QiIdO72un8WgCt9/X86DJWiKLp9KeUL9AyIvoUvr4y2wgsZHLh++byYM1z+m
jJWF4CWAhJKPLTEEndyVZ9PXD+ZccJxOMdkt938Yz3niZoO1WOAFDnqRtBbbY98D
bsejY4kHWF9ooFwM2WNAD4glv3t2Du7SdTPJHE8ri6z6Rl0jd9MlesS0ee/KQVHO
P464TKc5JHRV4LYUcvKDQS4jaihZwrAOeYBstjAYzDIZqViY7BAe92p66R/AyIb/
NFGv2mFGmwxvx+bwhoh7i431iSCW2MztXwDN+BY1JnvJIA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:00:39 2025 by rpki-client