Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363463643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363463643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 8rpmT43FBju76gC53B1/aZZ8RpJHpH2NY1IUbGT4WSg=
Subject key identifier: 9C:64:45:83:A7:FE:1D:BB:56:C9:16:A2:1F:C3:12:DA:AA:0F:CE:ED
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2E5479537BD3818AF0AFD2B901CB878664008D5F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363463643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 02:54:01 +0000
ROA not before: Sat 31 May 2025 02:49:01 +0000
ROA not after: Sat 30 May 2026 02:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:64cd::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:54:79:53:7b:d3:81:8a:f0:af:d2:b9:01:cb:87:86:64:00:8d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 02:49:01 2025 GMT
Not After : May 30 02:54:01 2026 GMT
Subject: CN=9C644583A7FE1DBB56C916A21FC312DAAA0FCEED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:da:92:df:c6:6d:03:3c:46:35:8d:42:27:
55:a8:4f:f8:45:01:ca:63:52:83:27:a9:41:1b:ed:
5e:8c:ce:88:df:a0:70:b2:1a:33:bf:a5:c3:97:7f:
36:b8:18:f9:00:4a:e6:b6:a2:98:ae:f7:f4:7c:56:
fa:91:d7:a2:81:95:c5:1e:66:bb:01:dc:a9:42:f1:
49:75:c4:f3:89:e5:9c:34:ab:d1:f2:e2:9c:13:af:
4c:3b:f0:a6:f8:a0:dc:90:26:c7:88:bf:80:a1:ed:
c5:d4:b3:58:22:38:59:1b:e4:bd:24:63:ec:1e:55:
3c:f5:0a:e5:38:ad:9c:69:7e:2b:b9:82:3e:df:d5:
70:fd:f7:3a:14:3a:91:a1:c2:67:3a:58:aa:28:7a:
86:90:d8:ca:ca:1d:a8:42:12:46:5d:52:7f:24:78:
18:94:c7:fc:e7:57:a2:1e:14:3a:1c:f9:3a:74:91:
04:5e:ce:52:f9:31:8c:9c:4b:c8:6c:c2:c8:96:47:
b0:1e:1b:07:d1:3b:fe:e3:a5:c4:45:11:7d:b9:a5:
aa:6a:23:51:c2:7a:dc:26:e1:9d:58:73:13:c5:96:
05:f0:f3:5c:2e:0d:a6:f2:57:00:fd:24:b5:69:1b:
4e:50:c8:f8:d5:61:95:b6:bc:41:a7:0b:19:c3:24:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:45:83:A7:FE:1D:BB:56:C9:16:A2:1F:C3:12:DA:AA:0F:CE:ED
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363463643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:64cd::/48
Signature Algorithm: sha256WithRSAEncryption
57:8b:d2:64:34:5d:6b:61:cf:4f:4d:83:ec:9d:c1:7d:f6:74:
49:af:2e:9c:db:ff:7c:29:c5:ca:fa:9d:a1:68:27:43:77:9d:
60:ec:86:63:74:33:73:f2:a6:18:70:95:49:84:1b:28:97:7d:
3d:4f:bc:b4:bd:ab:d3:74:af:a3:c4:da:f1:a7:16:4b:84:93:
7b:a4:5f:e8:2c:5d:03:35:8e:19:28:4b:cf:7e:b4:33:75:06:
42:9a:6e:54:72:1f:fb:98:d4:82:d3:d2:01:55:3f:f4:45:11:
75:45:af:67:55:77:01:7c:d1:ef:b1:1e:6c:f7:dd:94:f3:38:
07:21:0a:a2:eb:79:85:e4:80:2f:c9:8a:d8:8c:fe:17:62:23:
5e:6f:04:32:f2:60:05:dd:4f:2a:ac:90:b1:02:d5:13:22:b2:
7a:af:35:30:d9:df:2b:04:2a:bd:5a:3d:d8:d4:10:1b:75:eb:
aa:8e:c0:28:52:5a:56:28:48:fc:ba:61:aa:b5:e7:f3:14:29:
67:3c:f9:66:2f:31:00:f5:15:93:27:9a:85:8d:26:da:32:69:
83:71:0b:fc:14:e2:ac:4d:44:aa:83:1e:24:55:9a:67:ef:04:
ee:51:19:17:3e:c2:82:39:d0:e7:41:2a:6e:a4:78:37:45:aa:
37:a3:17:af
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIULlR5U3vTgYrwr9K5AcuHhmQAjV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MzEwMjQ5MDFaFw0yNjA1MzAwMjU0MDFaMDMxMTAvBgNV
BAMTKDlDNjQ0NTgzQTdGRTFEQkI1NkM5MTZBMjFGQzMxMkRBQUEwRkNFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgk9qS38ZtAzxGNY1CJ1WoT/hF
AcpjUoMnqUEb7V6MzojfoHCyGjO/pcOXfza4GPkASua2opiu9/R8VvqR16KBlcUe
ZrsB3KlC8Ul1xPOJ5Zw0q9Hy4pwTr0w78Kb4oNyQJseIv4Ch7cXUs1giOFkb5L0k
Y+weVTz1CuU4rZxpfiu5gj7f1XD99zoUOpGhwmc6WKooeoaQ2MrKHahCEkZdUn8k
eBiUx/znV6IeFDoc+Tp0kQRezlL5MYycS8hswsiWR7AeGwfRO/7jpcRFEX25papq
I1HCetwm4Z1YcxPFlgXw81wuDabyVwD9JLVpG05QyPjVYZW2vEGnCxnDJHxBAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUnGRFg6f+HbtWyRaiH8MS2qoPzu0wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzQ2MzY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRkzTAN
BgkqhkiG9w0BAQsFAAOCAQEAV4vSZDRda2HPT02D7J3BffZ0Sa8unNv/fCnFyvqd
oWgnQ3edYOyGY3Qzc/KmGHCVSYQbKJd9PU+8tL2r03Svo8Ta8acWS4STe6Rf6Cxd
AzWOGShLz360M3UGQppuVHIf+5jUgtPSAVU/9EURdUWvZ1V3AXzR77EebPfdlPM4
ByEKout5heSAL8mK2Iz+F2IjXm8EMvJgBd1PKqyQsQLVEyKyeq81MNnfKwQqvVo9
2NQQG3Xrqo7AKFJaVihI/LphqrXn8xQpZzz5Zi8xAPUVkyeahY0m2jJpg3EL/BTi
rE1EqoMeJFWaZ+8E7lEZFz7CgjnQ50EqbqR4N0WqN6MXrw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:21 2025 by rpki-client