Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363564343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: P8J5zv0jFIVsawng8b36jsSUfuCuOny6U5OyabVZTtg=
Subject key identifier: 9B:00:F4:D5:B6:C0:8E:8B:99:25:BF:F0:AF:2A:8A:E1:E9:4C:15:56
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 076E42889D6F720CB8AC03286398DEFC714FAAA1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 06:12:02 +0000
ROA not before: Sat 24 May 2025 06:07:02 +0000
ROA not after: Sat 23 May 2026 06:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:65d4::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 22:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6e:42:88:9d:6f:72:0c:b8:ac:03:28:63:98:de:fc:71:4f:aa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 06:07:02 2025 GMT
Not After : May 23 06:12:02 2026 GMT
Subject: CN=9B00F4D5B6C08E8B9925BFF0AF2A8AE1E94C1556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8c:69:5e:d1:4e:04:2a:cd:78:94:a0:0a:db:
11:81:b3:4f:a1:6d:ee:07:28:8b:d3:76:6a:06:d4:
7c:0a:d5:42:98:95:ac:7b:60:69:ad:c0:40:e6:a7:
d7:bb:e6:cf:8e:d4:de:18:16:66:86:0c:fc:8c:d1:
67:e7:50:a6:6e:57:18:6e:8f:9c:1f:33:76:78:ab:
af:c9:01:54:65:b6:a2:8e:cf:50:95:aa:a2:d1:b0:
2d:d0:41:6c:ee:79:54:20:69:55:ee:cc:9a:87:0b:
2c:eb:de:a8:ac:a5:95:13:fe:89:8f:50:16:e4:b3:
24:1d:26:7d:7d:a7:44:4a:39:b2:30:cf:fa:39:21:
7d:0a:a2:cb:6a:a0:95:26:22:47:16:30:fd:c6:52:
8e:b0:fa:0c:bd:1f:51:5d:c9:11:f7:82:95:de:07:
c7:85:bd:4e:7a:84:6a:e4:61:6e:f0:42:49:30:9a:
99:2b:37:e2:22:ca:3b:67:8d:73:47:bc:b0:c3:f2:
7c:09:35:2a:ac:21:aa:df:14:f4:76:61:a0:31:22:
c3:1b:63:0a:4a:33:9b:d4:13:11:91:d3:01:3d:00:
ac:06:8b:1a:4a:a6:16:b4:18:92:1b:f0:f1:89:2c:
3b:00:47:2a:59:f5:a6:a2:c8:71:39:8c:b3:bf:41:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:00:F4:D5:B6:C0:8E:8B:99:25:BF:F0:AF:2A:8A:E1:E9:4C:15:56
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:65d4::/48
Signature Algorithm: sha256WithRSAEncryption
7c:09:37:d2:4a:2b:1d:09:6c:79:bd:63:3a:33:d9:03:ce:af:
2f:d3:4f:53:cb:07:96:4a:06:73:2a:22:cd:55:4e:31:db:bc:
97:93:a1:d8:3a:0d:86:18:7c:b2:6d:75:b2:46:4a:6d:15:8c:
f8:60:26:b9:46:d1:57:b9:dd:cf:d4:01:bf:1d:5b:bd:03:69:
6b:fe:ab:58:d6:7f:f9:50:f5:08:66:21:8d:98:0c:60:54:11:
03:e4:4e:4d:2e:a4:be:e3:f7:95:df:b0:3c:63:05:12:56:aa:
58:9c:c8:8a:03:0a:ce:35:1a:8b:46:e2:57:52:33:1c:87:1c:
5e:0a:4d:2d:a5:21:13:cb:8d:bf:61:f7:33:b0:bc:05:4a:8b:
47:91:0d:05:19:cc:58:a0:e3:79:88:1d:28:46:20:00:eb:15:
a6:92:70:be:36:6c:c2:f0:69:c2:25:cf:e2:d3:73:4f:c4:35:
76:86:be:80:59:85:49:bc:79:4e:0d:df:d8:83:cd:cf:11:22:
33:ce:8a:ab:e8:e4:2e:8a:2b:ee:41:a2:e2:2a:0a:71:0b:0f:
ef:9f:62:4d:21:4b:fe:c4:5c:9b:fc:b0:d4:3d:2d:a6:75:17:
0d:c1:46:50:08:53:91:99:e7:88:81:f0:4a:62:15:a9:d9:bf:
9b:71:46:82
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUB25CiJ1vcgy4rAMoY5je/HFPqqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjQwNjA3MDJaFw0yNjA1MjMwNjEyMDJaMDMxMTAvBgNV
BAMTKDlCMDBGNEQ1QjZDMDhFOEI5OTI1QkZGMEFGMkE4QUUxRTk0QzE1NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDojGle0U4EKs14lKAK2xGBs0+h
be4HKIvTdmoG1HwK1UKYlax7YGmtwEDmp9e75s+O1N4YFmaGDPyM0WfnUKZuVxhu
j5wfM3Z4q6/JAVRltqKOz1CVqqLRsC3QQWzueVQgaVXuzJqHCyzr3qispZUT/omP
UBbksyQdJn19p0RKObIwz/o5IX0KostqoJUmIkcWMP3GUo6w+gy9H1FdyRH3gpXe
B8eFvU56hGrkYW7wQkkwmpkrN+IiyjtnjXNHvLDD8nwJNSqsIarfFPR2YaAxIsMb
YwpKM5vUExGR0wE9AKwGixpKpha0GJIb8PGJLDsARypZ9aaiyHE5jLO/QV8vAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUmwD01bbAjouZJb/wryqK4elMFVYwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzU2NDM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRl1DAN
BgkqhkiG9w0BAQsFAAOCAQEAfAk30korHQlseb1jOjPZA86vL9NPU8sHlkoGcyoi
zVVOMdu8l5Oh2DoNhhh8sm11skZKbRWM+GAmuUbRV7ndz9QBvx1bvQNpa/6rWNZ/
+VD1CGYhjZgMYFQRA+ROTS6kvuP3ld+wPGMFElaqWJzIigMKzjUai0biV1IzHIcc
XgpNLaUhE8uNv2H3M7C8BUqLR5ENBRnMWKDjeYgdKEYgAOsVppJwvjZswvBpwiXP
4tNzT8Q1doa+gFmFSbx5Tg3f2IPNzxEiM86Kq+jkLoor7kGi4ioKcQsP759iTSFL
/sRcm/yw1D0tpnUXDcFGUAhTkZnniIHwSmIVqdm/m3FGgg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:56:52 2025 by rpki-client