Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363730303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363730303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lIa4qEokbNiQBKkpbs1T6H5DZ2H/QiwpQSMsOUgRVus=
Subject key identifier: 21:6C:BF:49:75:D6:00:48:CD:45:F7:0B:95:0E:26:34:48:8A:9F:78
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 525B0FB042D3983843DC1EE5F391075A4B812040
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363730303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:31:43 +0000
ROA not before: Thu 16 Jan 2025 19:26:43 +0000
ROA not after: Thu 15 Jan 2026 19:31:43 +0000
asID: 16909
IP address blocks: 2a14:7584:6700::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5b:0f:b0:42:d3:98:38:43:dc:1e:e5:f3:91:07:5a:4b:81:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:26:43 2025 GMT
Not After : Jan 15 19:31:43 2026 GMT
Subject: CN=216CBF4975D60048CD45F70B950E2634488A9F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e9:ab:b1:c6:d0:9a:33:3b:e0:8d:65:80:66:
93:db:f0:4c:43:61:d3:8e:f2:17:e8:70:8a:6b:b4:
54:4f:c8:ab:29:cf:ff:c7:99:b6:39:1d:b0:92:a8:
d8:d3:dd:ce:94:6b:ab:96:ae:3d:bd:38:1e:63:20:
ec:4d:18:30:22:20:3f:9a:a1:5c:0a:7c:42:01:c7:
7a:e4:8a:63:6a:da:0c:82:48:79:fd:5f:d5:65:53:
72:d1:f8:d4:c8:ec:bd:fb:6a:e5:08:e2:9f:14:db:
c1:b0:2a:7c:01:cb:8a:b5:97:fa:ae:a2:5c:21:50:
a2:a2:1c:f7:a9:88:2d:ec:2d:15:8c:ff:72:94:c8:
8f:7b:55:83:35:e3:2a:60:e4:f1:46:de:c6:c4:66:
20:33:23:c0:ca:6c:d6:52:9b:95:da:29:d0:c3:21:
cc:36:82:10:09:6d:02:d5:2f:86:bd:52:ee:84:4d:
34:bc:2b:0b:a7:28:90:54:64:0f:a8:2d:01:88:b4:
05:fa:59:c2:9f:b2:d0:36:e9:5b:ec:88:62:8f:17:
5f:b8:50:f7:43:10:6f:a0:2c:8f:5b:08:59:bd:c5:
58:a1:9c:56:77:f4:2f:ca:e7:33:d0:27:b9:c8:f4:
08:10:d3:51:3d:79:90:82:1b:33:bf:0c:d3:7d:df:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6C:BF:49:75:D6:00:48:CD:45:F7:0B:95:0E:26:34:48:8A:9F:78
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363730303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6700::/48
Signature Algorithm: sha256WithRSAEncryption
70:79:43:1b:7c:92:b6:db:29:c8:10:6e:b0:5b:8d:21:3c:e9:
21:e9:93:c4:5e:8c:84:0c:5c:e8:f6:b2:81:b3:c4:4b:b6:1e:
18:e4:f2:41:c3:b6:cd:b5:33:63:dc:e9:53:ee:4d:3e:63:56:
34:35:51:44:7a:88:c9:8f:68:c1:be:d7:2a:ce:31:f3:6b:08:
40:cb:51:d0:44:39:c0:13:b9:bb:c8:05:4d:31:8f:96:88:a3:
38:a1:69:e4:41:43:38:b6:89:8f:cd:47:a0:b7:19:70:20:67:
12:b5:13:88:43:85:15:5d:da:ee:e7:59:ae:7e:5b:09:10:ff:
5d:96:50:46:90:f0:23:73:9d:4b:6a:9f:ed:d6:14:91:7d:2e:
1e:ae:7d:2f:2e:c1:a5:ca:ad:8c:10:96:f9:92:36:74:3d:7c:
c1:49:a9:e3:b1:b1:b6:5c:fc:f6:99:81:49:9a:69:46:1a:5a:
ef:bd:81:a8:0f:b9:4b:7e:4a:fb:ab:7b:c3:f6:91:c1:10:9b:
44:2b:6e:54:66:67:fb:41:62:79:2c:03:bf:96:9f:9b:b5:c1:
2c:10:d5:20:1e:79:f3:6a:61:5e:84:1a:0b:77:b7:9c:48:8f:
1b:ae:5a:f3:1d:4c:b9:ac:13:9d:cd:f3:7b:43:c1:fe:29:dd:
9b:58:a3:f2
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUUlsPsELTmDhD3B7l85EHWkuBIEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMTYxOTI2NDNaFw0yNjAxMTUxOTMxNDNaMDMxMTAvBgNV
BAMTKDIxNkNCRjQ5NzVENjAwNDhDRDQ1RjcwQjk1MEUyNjM0NDg4QTlGNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD46auxxtCaMzvgjWWAZpPb8ExD
YdOO8hfocIprtFRPyKspz//HmbY5HbCSqNjT3c6Ua6uWrj29OB5jIOxNGDAiID+a
oVwKfEIBx3rkimNq2gyCSHn9X9VlU3LR+NTI7L37auUI4p8U28GwKnwBy4q1l/qu
olwhUKKiHPepiC3sLRWM/3KUyI97VYM14ypg5PFG3sbEZiAzI8DKbNZSm5XaKdDD
Icw2ghAJbQLVL4a9Uu6ETTS8KwunKJBUZA+oLQGItAX6WcKfstA26VvsiGKPF1+4
UPdDEG+gLI9bCFm9xVihnFZ39C/K5zPQJ7nI9AgQ01E9eZCCGzO/DNN93xCHAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUIWy/SXXWAEjNRfcLlQ4mNEiKn3gwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzczMDMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRnADAN
BgkqhkiG9w0BAQsFAAOCAQEAcHlDG3ySttspyBBusFuNITzpIemTxF6MhAxc6Pay
gbPES7YeGOTyQcO2zbUzY9zpU+5NPmNWNDVRRHqIyY9owb7XKs4x82sIQMtR0EQ5
wBO5u8gFTTGPloijOKFp5EFDOLaJj81HoLcZcCBnErUTiEOFFV3a7udZrn5bCRD/
XZZQRpDwI3OdS2qf7dYUkX0uHq59Ly7BpcqtjBCW+ZI2dD18wUmp47Gxtlz89pmB
SZppRhpa772BqA+5S35K+6t7w/aRwRCbRCtuVGZn+0FieSwDv5afm7XBLBDVIB55
82phXoQaC3e3nEiPG65a8x1MuawTnc3ze0PB/indm1ij8g==
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:11 2025 by rpki-client