Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363864363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363864363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: itj4AkIRPcPfQm1yRbhqk8BByoZBzHXLAAP/ScPplZM=
Subject key identifier: CE:8E:B0:31:10:E7:21:C4:95:3A:7D:8D:57:3C:CB:FE:A2:DA:4C:9C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4BAC9EBF7304BC095BCC898A97949D9182DE0B2F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363864363a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 05:12:02 +0000
ROA not before: Thu 29 May 2025 05:07:02 +0000
ROA not after: Thu 28 May 2026 05:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:68d6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 16:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ac:9e:bf:73:04:bc:09:5b:cc:89:8a:97:94:9d:91:82:de:0b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 05:07:02 2025 GMT
Not After : May 28 05:12:02 2026 GMT
Subject: CN=CE8EB03110E721C4953A7D8D573CCBFEA2DA4C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:ce:20:a2:a5:a6:97:ed:69:5e:80:00:16:
1b:3f:a7:02:a3:61:27:85:a9:7f:f4:71:a4:d4:f1:
a6:88:6a:95:67:e4:8b:ac:98:10:ee:09:8b:b7:75:
7f:90:6f:6f:77:bc:ff:fe:fc:57:39:1c:41:c0:ec:
30:eb:86:84:e9:f9:57:7c:18:e2:24:2f:cb:24:71:
c0:cb:a0:6d:c0:11:35:ad:de:bb:26:0f:8a:df:2f:
52:46:15:55:c8:ec:32:a6:e8:d9:c9:a1:77:04:a1:
0b:50:f6:64:33:34:4c:35:40:08:a4:84:73:12:a8:
cf:c9:12:ee:45:86:32:09:f1:ab:13:af:fe:8d:44:
0a:3a:9e:eb:a0:20:15:8d:ab:0f:57:f9:3e:03:65:
2e:72:3e:d4:f9:8c:cd:4b:bb:f3:35:84:1f:f3:17:
40:d2:5c:74:ae:d4:c6:e2:81:39:f7:35:8e:4b:03:
84:79:0d:cb:dc:2c:2a:48:e4:59:78:44:a7:33:cf:
be:fa:ff:30:e0:fa:7e:d3:12:cd:e3:4e:5b:91:be:
7e:3e:c1:01:7d:e1:c7:d3:3b:be:ec:66:65:9a:02:
cc:f6:a0:63:e5:a4:5e:23:e5:8e:7c:59:b8:8c:43:
41:73:d9:a7:a9:0d:c3:e3:5f:0b:2b:35:3c:45:3a:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:B0:31:10:E7:21:C4:95:3A:7D:8D:57:3C:CB:FE:A2:DA:4C:9C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363864363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68d6::/48
Signature Algorithm: sha256WithRSAEncryption
5c:aa:84:9e:bd:43:95:75:6b:f7:db:f0:5b:32:e8:e3:84:5e:
a5:8e:ac:26:8c:b9:49:ce:c4:15:87:25:dc:95:26:2f:ef:e5:
94:f9:cf:18:b5:10:93:68:43:18:90:9f:4d:10:cd:7b:95:3e:
66:2e:dd:11:7b:74:9a:b6:89:88:72:01:16:ce:b5:53:87:79:
b4:fc:c8:11:fc:5c:ae:a3:e5:28:61:c5:84:f4:4a:e3:e7:fb:
09:dd:75:5f:c2:15:66:65:74:4c:ff:d3:53:6d:3b:e1:88:3f:
2d:e4:b9:ee:86:c5:28:f8:57:65:a8:5f:ac:d1:ca:d8:51:04:
2c:3a:0e:22:c2:3e:91:bd:bc:11:18:81:d6:d8:6c:9f:e4:de:
38:8c:c3:19:ea:00:7d:ff:4c:a0:3b:de:4e:38:c8:57:62:83:
36:90:00:34:4f:81:c1:42:87:91:6d:d1:fc:8f:ac:50:4f:56:
8b:ed:f2:9e:07:8b:4a:cc:41:49:5f:91:90:d6:62:0d:07:92:
b1:d7:99:d8:ff:e0:35:41:0b:b5:12:bd:73:17:97:43:21:7b:
6b:3d:99:da:23:d9:63:55:d4:83:2a:61:e5:17:06:51:aa:ab:
b6:b5:3c:fd:ec:63:f4:b5:b1:1b:e5:ec:7f:31:b7:3b:d5:f2:
76:83:2f:3c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUS6yev3MEvAlbzImKl5SdkYLeCy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjkwNTA3MDJaFw0yNjA1MjgwNTEyMDJaMDMxMTAvBgNV
BAMTKENFOEVCMDMxMTBFNzIxQzQ5NTNBN0Q4RDU3M0NDQkZFQTJEQTRDOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJic4goqWml+1pXoAAFhs/pwKj
YSeFqX/0caTU8aaIapVn5IusmBDuCYu3dX+Qb293vP/+/Fc5HEHA7DDrhoTp+Vd8
GOIkL8skccDLoG3AETWt3rsmD4rfL1JGFVXI7DKm6NnJoXcEoQtQ9mQzNEw1QAik
hHMSqM/JEu5FhjIJ8asTr/6NRAo6nuugIBWNqw9X+T4DZS5yPtT5jM1Lu/M1hB/z
F0DSXHSu1MbigTn3NY5LA4R5DcvcLCpI5Fl4RKczz776/zDg+n7TEs3jTluRvn4+
wQF94cfTO77sZmWaAsz2oGPlpF4j5Y58WbiMQ0Fz2aepDcPjXwsrNTxFOr7VAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUzo6wMRDnIcSVOn2NVzzL/qLaTJwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2Mzg2NDM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRo1jAN
BgkqhkiG9w0BAQsFAAOCAQEAXKqEnr1DlXVr99vwWzLo44RepY6sJoy5Sc7EFYcl
3JUmL+/llPnPGLUQk2hDGJCfTRDNe5U+Zi7dEXt0mraJiHIBFs61U4d5tPzIEfxc
rqPlKGHFhPRK4+f7Cd11X8IVZmV0TP/TU2074Yg/LeS57obFKPhXZahfrNHK2FEE
LDoOIsI+kb28ERiB1thsn+TeOIzDGeoAff9MoDveTjjIV2KDNpAANE+BwUKHkW3R
/I+sUE9Wi+3yngeLSsxBSV+RkNZiDQeSsdeZ2P/gNUELtRK9cxeXQyF7az2Z2iPZ
Y1XUgyph5RcGUaqrtrU8/exj9LWxG+XsfzG3O9XydoMvPA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:04:08 2025 by rpki-client