Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363538303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363538303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: orK1LDsCXZQ4eASAelX45wOHR0bgfuD4e5K6JqSWMLc=
Subject key identifier: D6:71:B3:9E:D5:BC:BD:51:21:E6:1C:D9:19:15:FE:E0:DF:F2:54:DF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 689A0790DCDE729F39339ABB7CCB2BA654280684
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363538303a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 14 Jan 2025 14:22:09 +0000
ROA not before: Tue 14 Jan 2025 14:17:09 +0000
ROA not after: Tue 13 Jan 2026 14:22:09 +0000
asID: 16909
IP address blocks: 2a14:7584:6580::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9a:07:90:dc:de:72:9f:39:33:9a:bb:7c:cb:2b:a6:54:28:06:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 14 14:17:09 2025 GMT
Not After : Jan 13 14:22:09 2026 GMT
Subject: CN=D671B39ED5BCBD5121E61CD91915FEE0DFF254DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:9f:ae:82:18:06:0a:6c:6a:5e:c3:37:a2:
2d:e8:1a:1d:19:f1:5e:a3:12:bc:e1:89:21:42:bd:
d3:f6:d0:92:05:d9:e8:c8:ae:88:b0:b2:f9:e3:1a:
7e:9c:5c:5d:d5:f6:73:fa:45:ee:27:67:4c:99:ee:
d2:55:b1:82:75:22:d5:5d:60:3c:db:fc:15:5e:3e:
cb:89:9f:78:9d:89:b8:37:5e:9e:9e:7c:7f:81:c6:
aa:2e:35:67:78:fe:b2:38:c4:4b:26:66:6a:fc:8a:
c2:04:38:ec:7c:ab:69:c3:d1:58:3f:ed:91:b4:4a:
07:1c:83:79:99:b7:30:67:bc:d2:bc:55:72:9e:54:
58:5b:43:22:71:b3:eb:bc:e3:ee:65:7b:e8:87:2a:
d6:ba:46:02:02:f2:4c:44:ee:0d:32:32:cd:11:e7:
69:b6:ce:5e:41:e1:2c:f9:15:7c:f7:11:59:a2:76:
3f:a9:3b:22:47:c3:d8:45:07:11:b2:b8:06:2f:c4:
34:f5:97:fb:19:54:f6:c1:c4:12:a7:85:ad:58:23:
a6:5e:40:8e:b4:b8:5c:b4:30:c3:a4:de:a9:07:07:
81:1f:ef:f0:9a:4b:63:15:7c:8b:ce:b4:3d:db:26:
fb:6a:8e:c4:06:ea:e8:21:94:01:e4:f3:58:49:0d:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:71:B3:9E:D5:BC:BD:51:21:E6:1C:D9:19:15:FE:E0:DF:F2:54:DF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363538303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6580::/48
Signature Algorithm: sha256WithRSAEncryption
35:50:30:98:4b:67:0a:2f:c8:16:40:83:76:72:a2:74:1f:14:
2d:f9:b8:c1:0e:db:3a:13:1d:cb:cb:d5:f9:7c:a9:54:53:fe:
25:00:a8:a7:2d:bc:29:6e:19:a9:36:c2:a3:74:fc:87:aa:34:
bb:5b:f7:a3:f2:ef:c1:88:b1:70:54:0c:f8:e0:28:72:a9:08:
65:c9:b0:4b:49:4d:ec:53:fe:2d:53:bf:a1:28:64:99:56:bb:
26:59:c7:96:7d:c7:70:03:9d:a0:69:a4:bd:82:44:99:84:99:
19:8e:72:a6:02:32:e9:08:1a:d5:8b:53:3e:40:18:89:0f:e6:
79:50:9b:43:c0:a7:23:fa:b9:75:18:1f:10:c5:0e:d4:2d:1d:
d7:21:0c:3c:b2:c7:9c:01:a6:4a:c0:b8:a3:cd:75:12:cd:c9:
e6:ff:3d:87:aa:71:2c:21:03:22:89:6e:e4:6d:25:fe:12:f0:
1e:0f:60:bd:96:9d:16:0d:0c:c9:ca:a4:5d:b4:51:5b:45:d5:
76:57:a6:6f:86:26:04:bb:39:ab:9c:0c:51:df:36:12:41:3d:
cb:89:61:10:da:e2:3b:4c:77:2c:9f:fd:aa:a5:8b:4c:f2:49:
14:93:61:5e:51:3e:72:82:08:a2:8e:9f:e8:7d:56:24:f1:08:
27:9a:68:d2
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUaJoHkNzecp85M5q7fMsrplQoBoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMTQxNDE3MDlaFw0yNjAxMTMxNDIyMDlaMDMxMTAvBgNV
BAMTKEQ2NzFCMzlFRDVCQ0JENTEyMUU2MUNEOTE5MTVGRUUwREZGMjU0REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyZ+ughgGCmxqXsM3oi3oGh0Z
8V6jErzhiSFCvdP20JIF2ejIroiwsvnjGn6cXF3V9nP6Re4nZ0yZ7tJVsYJ1ItVd
YDzb/BVePsuJn3idibg3Xp6efH+BxqouNWd4/rI4xEsmZmr8isIEOOx8q2nD0Vg/
7ZG0Sgccg3mZtzBnvNK8VXKeVFhbQyJxs+u84+5le+iHKta6RgIC8kxE7g0yMs0R
52m2zl5B4Sz5FXz3EVmidj+pOyJHw9hFBxGyuAYvxDT1l/sZVPbBxBKnha1YI6Ze
QI60uFy0MMOk3qkHB4Ef7/CaS2MVfIvOtD3bJvtqjsQG6ughlAHk81hJDVm/AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU1nGzntW8vVEh5hzZGRX+4N/yVN8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzUzODMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRlgDAN
BgkqhkiG9w0BAQsFAAOCAQEANVAwmEtnCi/IFkCDdnKidB8ULfm4wQ7bOhMdy8vV
+XypVFP+JQCopy28KW4ZqTbCo3T8h6o0u1v3o/LvwYixcFQM+OAocqkIZcmwS0lN
7FP+LVO/oShkmVa7JlnHln3HcAOdoGmkvYJEmYSZGY5ypgIy6Qga1YtTPkAYiQ/m
eVCbQ8CnI/q5dRgfEMUO1C0d1yEMPLLHnAGmSsC4o811Es3J5v89h6pxLCEDIolu
5G0l/hLwHg9gvZadFg0MycqkXbRRW0XVdlemb4YmBLs5q5wMUd82EkE9y4lhENri
O0x3LJ/9qqWLTPJJFJNhXlE+coIIoo6f6H1WJPEIJ5po0g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:43 2025 by rpki-client