Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kRHBIBsZ7X1iDGG9Qw7DMNSfMnx6E/RDnlEdSgEf3JI=
Subject key identifier: 98:09:85:BF:33:B9:4A:29:05:D4:5A:A6:6F:22:C6:D8:50:FE:1D:6B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 456EEACD5833C34EC0BBF8D846C5C0BC6D7E8B7D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331313a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 23:00:02 +0000
ROA not before: Mon 19 May 2025 22:55:02 +0000
ROA not after: Mon 18 May 2026 23:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6311::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 21:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6e:ea:cd:58:33:c3:4e:c0:bb:f8:d8:46:c5:c0:bc:6d:7e:8b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 22:55:02 2025 GMT
Not After : May 18 23:00:02 2026 GMT
Subject: CN=980985BF33B94A2905D45AA66F22C6D850FE1D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:93:a0:19:48:2a:62:d2:b7:89:01:c3:5e:
7a:e9:6f:9e:6a:db:de:12:cf:f9:b8:8c:89:ce:81:
8a:6c:10:ea:ad:a5:e1:59:04:e1:54:87:ce:2e:ad:
5e:83:a2:f4:f3:95:8b:26:29:6f:35:5b:6c:fd:bd:
a0:95:a4:1c:ec:04:28:a1:f8:af:46:83:42:da:d5:
53:28:78:b1:57:02:11:a4:68:06:8e:a0:05:63:fe:
88:e2:71:54:21:39:13:de:af:51:e6:67:0c:54:f0:
ef:79:57:a8:8e:bc:ef:dc:bc:f5:13:0a:2c:c7:af:
88:d7:50:e4:4a:8b:c5:06:6e:5a:02:f9:33:18:97:
f3:a3:cf:7b:19:48:68:f0:ac:a8:f8:cc:44:a9:2b:
59:c8:ec:93:fa:dc:0d:88:27:1a:e8:9a:2c:88:d9:
de:3e:3c:4d:17:40:68:ea:b8:92:22:7b:b5:53:ec:
27:1a:23:4b:f2:b7:04:fd:1b:a3:f5:ef:5c:e4:4d:
27:b3:19:5e:d6:94:fc:7e:89:59:63:49:b2:68:61:
3d:8b:0b:00:cc:a1:f6:c0:96:45:3c:b2:9c:4a:a3:
a4:48:1e:ca:6b:f7:d2:5b:47:93:bf:b7:fb:e1:b9:
ac:80:9f:68:e3:7f:91:95:a3:fc:05:dd:47:7b:8f:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:85:BF:33:B9:4A:29:05:D4:5A:A6:6F:22:C6:D8:50:FE:1D:6B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6311::/48
Signature Algorithm: sha256WithRSAEncryption
9b:12:d9:6c:25:ca:4e:e1:aa:fd:06:3c:89:b6:7f:8a:05:1d:
2e:7c:40:f0:7f:8a:34:6d:ad:ed:47:5d:90:2a:11:d3:a2:4f:
b4:d0:cf:4b:54:81:47:36:86:cd:86:65:5a:ee:1d:07:48:df:
4a:eb:ac:41:c5:56:b7:33:ec:eb:47:da:16:f9:d8:0b:52:36:
56:a5:93:5c:f6:3f:cb:7d:b1:ac:80:f4:00:69:c4:c1:22:a4:
37:39:e4:6b:51:a7:1a:84:dc:58:d4:69:60:2a:e3:d0:c0:08:
dc:36:b2:7f:f6:19:ae:e9:3b:33:c0:1b:de:b4:0c:a9:dc:39:
c8:71:da:49:5d:e9:4e:55:d2:30:7f:40:1c:54:cd:d7:cd:51:
fb:61:7d:e9:37:f3:26:5b:ff:b1:5f:2b:df:54:f5:d6:dd:b4:
63:ad:d0:6a:2c:87:54:23:83:97:85:92:5d:77:05:73:07:12:
5e:c0:0e:07:e9:6e:4e:ef:82:0a:6b:a7:f8:3e:3d:69:83:38:
bf:5e:6b:eb:ce:3d:2b:16:f7:0a:c2:75:4a:3b:bb:e2:06:49:
0d:ae:3b:9a:a8:33:67:f3:3b:bd:97:05:38:36:d2:8f:2f:a4:
97:e6:aa:a2:fb:18:c5:e1:c9:fd:82:fa:05:11:e6:32:c1:0b:
ef:43:98:fb
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURW7qzVgzw07Au/jYRsXAvG1+i30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTkyMjU1MDJaFw0yNjA1MTgyMzAwMDJaMDMxMTAvBgNV
BAMTKDk4MDk4NUJGMzNCOTRBMjkwNUQ0NUFBNjZGMjJDNkQ4NTBGRTFENkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fpOgGUgqYtK3iQHDXnrpb55q
294Sz/m4jInOgYpsEOqtpeFZBOFUh84urV6DovTzlYsmKW81W2z9vaCVpBzsBCih
+K9Gg0La1VMoeLFXAhGkaAaOoAVj/ojicVQhORPer1HmZwxU8O95V6iOvO/cvPUT
CizHr4jXUORKi8UGbloC+TMYl/Ojz3sZSGjwrKj4zESpK1nI7JP63A2IJxromiyI
2d4+PE0XQGjquJIie7VT7CcaI0vytwT9G6P171zkTSezGV7WlPx+iVljSbJoYT2L
CwDMofbAlkU8spxKo6RIHspr99JbR5O/t/vhuayAn2jjf5GVo/wF3Ud7j7qvAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUmAmFvzO5SikF1FqmbyLG2FD+HWswHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzMTMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjETAN
BgkqhkiG9w0BAQsFAAOCAQEAmxLZbCXKTuGq/QY8ibZ/igUdLnxA8H+KNG2t7Udd
kCoR06JPtNDPS1SBRzaGzYZlWu4dB0jfSuusQcVWtzPs60faFvnYC1I2VqWTXPY/
y32xrID0AGnEwSKkNznka1GnGoTcWNRpYCrj0MAI3Dayf/YZruk7M8Ab3rQMqdw5
yHHaSV3pTlXSMH9AHFTN181R+2F96TfzJlv/sV8r31T11t20Y63QaiyHVCODl4WS
XXcFcwcSXsAOB+luTu+CCmun+D49aYM4v15r6849Kxb3CsJ1Sju74gZJDa47mqgz
Z/M7vZcFODbSjy+kl+aqovsYxeHJ/YL6BRHmMsEL70OY+w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:24:12 2025 by rpki-client