Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363333663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: w5PY4RrPtHL0nKqAnbtNnmg8BPIAQiqiGHE8b4EMY74=
Subject key identifier: D9:15:C2:F4:67:6A:3C:1B:6B:3F:F6:E3:50:88:CD:02:CD:1F:BE:CF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 51DCE3013E487BBC8EE9BD20DF32B9F513267A2D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333663a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 03:54:02 +0000
ROA not before: Thu 22 May 2025 03:49:02 +0000
ROA not after: Thu 21 May 2026 03:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:633f::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:dc:e3:01:3e:48:7b:bc:8e:e9:bd:20:df:32:b9:f5:13:26:7a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 03:49:02 2025 GMT
Not After : May 21 03:54:02 2026 GMT
Subject: CN=D915C2F4676A3C1B6B3FF6E35088CD02CD1FBECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:c0:16:7d:12:ac:1e:61:b0:46:45:de:67:
85:9a:a4:80:a4:56:de:a6:60:16:69:34:a1:36:64:
20:7d:f7:6f:7a:cd:c4:31:62:6c:dc:dd:0a:39:64:
91:95:c1:4c:07:db:dd:61:c6:a1:f1:fa:34:f1:fb:
5f:b6:c0:72:0c:dd:d2:82:a7:a6:91:13:7b:54:8a:
39:01:c4:ca:f4:a6:e2:54:e0:28:87:8a:ec:bd:ae:
70:53:a8:22:24:d3:4d:52:9c:d0:e6:67:f8:4b:bb:
12:d3:93:bd:97:d2:50:cb:71:32:c1:8a:c0:ef:84:
04:d1:37:be:c7:0c:17:73:f0:87:8d:22:34:20:94:
5b:91:32:b8:26:34:53:7b:b7:9d:fe:52:5b:e6:c5:
07:59:27:23:96:6a:d9:14:7e:c9:1a:23:57:b5:53:
d1:f3:32:a9:03:7c:a7:0f:98:13:28:66:64:db:16:
c8:f8:70:45:be:e7:ee:0a:a4:06:7b:56:f2:af:a8:
ca:73:bd:0a:24:47:07:48:ea:7b:47:77:c5:21:bc:
ed:23:50:02:c6:a7:59:2d:90:21:bd:a4:c9:d0:ff:
ba:9c:61:e4:d9:d6:52:7e:8c:24:1d:55:a2:c3:e5:
9f:87:0f:e3:12:38:5b:70:d6:cc:62:c6:df:32:56:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:15:C2:F4:67:6A:3C:1B:6B:3F:F6:E3:50:88:CD:02:CD:1F:BE:CF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:633f::/48
Signature Algorithm: sha256WithRSAEncryption
2a:a9:0f:b5:97:d8:6a:77:f7:0a:6d:e8:de:5a:e8:ad:21:b7:
5d:e0:98:6f:04:90:f5:d2:4d:6c:db:78:53:e9:1a:b2:d9:f8:
c0:0a:ce:b5:4c:21:5c:c3:5a:84:e5:3e:5b:bf:ff:0f:6d:1c:
db:3b:0d:8b:ad:7e:92:ad:e7:9a:a5:92:4a:35:7e:d6:9f:76:
c7:c9:e5:e1:d6:19:f0:c5:bc:05:32:7c:9c:69:83:93:62:47:
b8:53:e1:72:1d:81:2f:42:16:d2:17:b5:ad:51:22:0a:da:ea:
e2:ad:69:a6:19:a0:e7:33:a1:88:1c:65:d9:e9:ca:ce:73:a2:
37:8a:83:86:23:4c:88:0e:1d:35:08:e7:a9:51:dd:8f:5a:e4:
46:c5:d1:15:ff:42:1f:b3:16:99:a9:09:5e:54:e4:a1:5b:56:
a3:73:ea:27:00:b0:ec:70:10:f3:d5:44:65:d8:60:dd:35:0a:
f3:29:4c:3f:21:08:99:b2:3c:14:dc:fe:1a:d1:ac:6d:09:c2:
7d:31:24:9d:f3:10:8e:27:24:36:a4:4e:6d:a9:4d:00:57:6b:
88:8b:18:80:25:45:0e:43:7f:d6:e5:a2:89:dc:0d:02:15:fe:
02:77:30:f2:4e:ac:99:f8:d4:29:61:63:e7:96:8a:79:23:1f:
5f:d2:62:35
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUUdzjAT5Ie7yO6b0g3zK59RMmei0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjIwMzQ5MDJaFw0yNjA1MjEwMzU0MDJaMDMxMTAvBgNV
BAMTKEQ5MTVDMkY0Njc2QTNDMUI2QjNGRjZFMzUwODhDRDAyQ0QxRkJFQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDilsAWfRKsHmGwRkXeZ4WapICk
Vt6mYBZpNKE2ZCB99296zcQxYmzc3Qo5ZJGVwUwH291hxqHx+jTx+1+2wHIM3dKC
p6aRE3tUijkBxMr0puJU4CiHiuy9rnBTqCIk001SnNDmZ/hLuxLTk72X0lDLcTLB
isDvhATRN77HDBdz8IeNIjQglFuRMrgmNFN7t53+UlvmxQdZJyOWatkUfskaI1e1
U9HzMqkDfKcPmBMoZmTbFsj4cEW+5+4KpAZ7VvKvqMpzvQokRwdI6ntHd8UhvO0j
UALGp1ktkCG9pMnQ/7qcYeTZ1lJ+jCQdVaLD5Z+HD+MSOFtw1sxixt8yVvh3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU2RXC9GdqPBtrP/bjUIjNAs0fvs8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzMzY2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjPzAN
BgkqhkiG9w0BAQsFAAOCAQEAKqkPtZfYanf3Cm3o3lrorSG3XeCYbwSQ9dJNbNt4
U+kastn4wArOtUwhXMNahOU+W7//D20c2zsNi61+kq3nmqWSSjV+1p92x8nl4dYZ
8MW8BTJ8nGmDk2JHuFPhch2BL0IW0he1rVEiCtrq4q1pphmg5zOhiBxl2enKznOi
N4qDhiNMiA4dNQjnqVHdj1rkRsXRFf9CH7MWmakJXlTkoVtWo3PqJwCw7HAQ89VE
Zdhg3TUK8ylMPyEImbI8FNz+GtGsbQnCfTEknfMQjickNqRObalNAFdriIsYgCVF
DkN/1uWiidwNAhX+Ancw8k6smfjUKWFj55aKeSMfX9JiNQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:55 2025 by rpki-client