Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363332353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: wDbsxvZegoWBrKQCMk3okk4Ds+AiXDnX1LgBFwkSlL0=
Subject key identifier: 6A:C5:FE:1E:C7:74:EE:E0:74:74:2C:CD:39:FB:92:8D:9B:75:94:77
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 20F12D4EEBA6763E21CB302EC911DECAE5F15E36
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332353a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 12:54:01 +0000
ROA not before: Tue 20 May 2025 12:49:01 +0000
ROA not after: Tue 19 May 2026 12:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6325::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 05:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f1:2d:4e:eb:a6:76:3e:21:cb:30:2e:c9:11:de:ca:e5:f1:5e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 12:49:01 2025 GMT
Not After : May 19 12:54:01 2026 GMT
Subject: CN=6AC5FE1EC774EEE074742CCD39FB928D9B759477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:53:cf:99:da:88:6e:5b:1b:ce:20:f4:91:
e7:96:ce:8b:23:2c:06:14:3e:64:1e:2b:39:b6:c9:
b7:f2:a4:ef:41:2c:d4:7a:d7:9d:d4:72:7f:b0:40:
88:b1:e5:e5:0a:b3:bc:9b:d8:12:6c:75:1b:b1:dd:
2d:55:7d:e9:4c:06:b9:de:48:bc:de:ba:c8:23:8a:
ee:46:e3:7e:b8:4c:7a:b3:00:b7:59:10:43:63:9a:
e8:b2:29:f1:23:c9:57:67:ae:41:47:99:3b:cf:a5:
6b:51:47:64:76:12:75:a7:be:75:fc:0d:5f:e1:f0:
b3:75:27:41:26:39:77:0d:45:70:ca:0c:c6:0f:86:
e8:f9:24:f6:94:3b:be:06:62:6d:c4:af:61:79:41:
cb:e3:e5:ab:fd:8f:5f:34:9f:7f:a5:b3:98:e0:92:
7e:05:a0:70:4c:9f:06:12:6c:54:cf:14:4f:b4:82:
1a:7b:c2:9c:71:9e:f8:c2:f2:2e:12:80:66:16:21:
9a:60:23:e8:0e:8e:4f:4b:03:8b:79:40:46:d7:52:
f7:14:e9:01:ef:f4:1b:5f:c6:ab:97:b2:89:cf:a6:
35:37:36:75:db:f1:14:5b:37:54:ea:5c:6f:5c:c3:
8b:61:27:3c:b0:a9:ca:9d:43:b6:c5:c2:6e:24:0d:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C5:FE:1E:C7:74:EE:E0:74:74:2C:CD:39:FB:92:8D:9B:75:94:77
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6325::/48
Signature Algorithm: sha256WithRSAEncryption
58:3e:1b:ff:3e:4d:47:c0:38:43:d3:dc:16:ff:93:10:cc:b9:
54:fe:35:da:4a:14:36:b6:40:d9:5a:e5:1e:57:52:7c:8b:d0:
9e:c5:5b:bd:c3:35:27:b8:ec:3f:4d:ae:1b:af:40:3b:85:76:
a2:ae:40:00:14:51:38:a6:5e:3f:ec:2a:0d:24:96:8f:dc:f5:
c2:53:b3:08:af:4a:32:32:2e:b3:d6:2a:21:65:b3:cf:99:e1:
4d:1d:79:82:51:89:59:ba:86:bf:61:34:bc:f6:ec:79:8b:29:
79:73:10:be:0e:aa:b5:50:53:44:b2:74:d1:c1:3b:12:eb:1a:
00:e2:84:e7:ad:88:5a:86:c0:3f:65:0b:5a:53:5e:94:32:02:
ac:f4:2f:14:3b:e6:c5:ff:4c:83:49:49:9b:bd:e1:5d:24:a1:
10:2d:fe:14:60:ba:b9:cf:1e:b7:a9:cb:91:d8:a8:28:d1:b3:
5e:0f:52:d7:6b:fe:c1:88:0f:27:6d:9d:6d:cb:2b:32:a1:c2:
c6:3c:9c:20:2d:ca:57:04:2b:78:fd:f8:5c:65:65:51:94:65:
35:6a:8d:11:90:28:d1:da:22:6a:7d:68:78:26:02:f8:c6:89:
11:2a:db:9e:4b:15:ce:fd:08:5f:12:b4:da:4a:b9:e3:2c:fe:
cf:c1:91:a7
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUIPEtTuumdj4hyzAuyRHeyuXxXjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjAxMjQ5MDFaFw0yNjA1MTkxMjU0MDFaMDMxMTAvBgNV
BAMTKDZBQzVGRTFFQzc3NEVFRTA3NDc0MkNDRDM5RkI5MjhEOUI3NTk0NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcX1PPmdqIblsbziD0keeWzosj
LAYUPmQeKzm2ybfypO9BLNR6153Ucn+wQIix5eUKs7yb2BJsdRux3S1VfelMBrne
SLzeusgjiu5G4364THqzALdZEENjmuiyKfEjyVdnrkFHmTvPpWtRR2R2EnWnvnX8
DV/h8LN1J0EmOXcNRXDKDMYPhuj5JPaUO74GYm3Er2F5Qcvj5av9j180n3+ls5jg
kn4FoHBMnwYSbFTPFE+0ghp7wpxxnvjC8i4SgGYWIZpgI+gOjk9LA4t5QEbXUvcU
6QHv9BtfxquXsonPpjU3NnXb8RRbN1TqXG9cw4thJzywqcqdQ7bFwm4kDd9pAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUasX+Hsd07uB0dCzNOfuSjZt1lHcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzMjM1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjJTAN
BgkqhkiG9w0BAQsFAAOCAQEAWD4b/z5NR8A4Q9PcFv+TEMy5VP412koUNrZA2Vrl
HldSfIvQnsVbvcM1J7jsP02uG69AO4V2oq5AABRROKZeP+wqDSSWj9z1wlOzCK9K
MjIus9YqIWWzz5nhTR15glGJWbqGv2E0vPbseYspeXMQvg6qtVBTRLJ00cE7Eusa
AOKE562IWobAP2ULWlNelDICrPQvFDvmxf9Mg0lJm73hXSShEC3+FGC6uc8et6nL
kdioKNGzXg9S12v+wYgPJ22dbcsrMqHCxjycIC3KVwQreP34XGVlUZRlNWqNEZAo
0doian1oeCYC+MaJESrbnksVzv0IXxK02kq54yz+z8GRpw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:17 2025 by rpki-client