Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363936303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363936303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: VvhcobmNj8j5Wwk6GgBpVqRfgUNjJLByQ6ZcvGOsw7U=
Subject key identifier: 54:1D:20:13:13:F1:B2:07:58:16:60:BE:50:6B:11:B0:48:E3:76:F4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 244EA7A8B31F16F9AA183425A20D62AC862994D3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363936303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:27:56 +0000
ROA not before: Fri 24 Jan 2025 11:22:56 +0000
ROA not after: Fri 23 Jan 2026 11:27:56 +0000
asID: 16909
IP address blocks: 2a14:7584:6960::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4e:a7:a8:b3:1f:16:f9:aa:18:34:25:a2:0d:62:ac:86:29:94:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:22:56 2025 GMT
Not After : Jan 23 11:27:56 2026 GMT
Subject: CN=541D201313F1B207581660BE506B11B048E376F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:3f:eb:64:cc:86:88:d1:7a:d0:4c:5d:9f:
85:86:46:48:a0:ce:16:80:0a:85:cf:16:e7:f4:d9:
e7:46:46:5a:31:dd:c2:06:c8:be:0c:95:38:5e:76:
9d:b8:eb:1a:d2:97:02:14:9b:12:5f:0f:18:e4:b5:
96:2b:fe:9f:f5:9c:7d:9f:23:f3:8b:4b:0b:79:37:
b6:fa:45:77:b9:b6:03:a4:db:43:80:b9:34:90:f9:
a1:a6:31:3f:b5:c3:83:6f:e9:cd:88:da:85:3e:1c:
42:2d:8d:58:89:f8:fd:1f:94:71:2a:5a:89:3e:51:
40:0c:00:98:4a:25:1c:8b:2a:9b:40:9d:de:05:4d:
4d:45:37:da:8d:ee:57:cf:00:56:c8:f9:36:cc:55:
13:05:b4:e0:b0:9b:7d:a2:00:18:16:63:63:e9:eb:
64:2a:56:0b:b5:04:9b:aa:b1:a7:a0:54:f2:1e:31:
27:e6:52:74:89:30:44:bf:d3:5a:b3:ce:14:5a:93:
00:fc:1a:55:07:2b:0e:13:1c:2a:82:12:ce:20:14:
df:04:78:43:e2:50:6a:ea:b0:1e:07:f8:66:44:10:
65:6e:39:44:d6:36:93:3b:9d:eb:f3:e1:01:9b:cf:
b0:43:bf:81:4e:d4:18:59:a3:ca:6e:23:74:1a:18:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:20:13:13:F1:B2:07:58:16:60:BE:50:6B:11:B0:48:E3:76:F4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363936303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6960::/48
Signature Algorithm: sha256WithRSAEncryption
85:79:79:e7:84:9a:96:ae:c0:f3:11:75:9f:54:4d:e7:31:ca:
77:ef:a2:a4:77:d2:15:1a:e9:7a:2b:78:d8:25:88:66:91:54:
03:86:18:24:f9:88:f4:8c:5a:4d:b6:c5:27:49:e3:48:98:06:
18:62:59:ff:68:b4:4b:a2:fa:91:70:c9:ec:c2:23:d5:5a:d8:
05:02:d7:6c:aa:28:48:31:c0:73:16:c3:07:d2:86:a6:49:7e:
09:7d:b0:54:53:59:43:fb:ed:e6:28:4a:7e:15:17:9d:95:93:
27:64:87:81:af:a2:ca:a8:48:18:78:f3:92:b7:0f:19:f0:87:
af:00:14:f8:bf:65:e2:8f:4f:3d:de:6b:15:cf:12:24:61:ea:
9f:09:a7:e1:1d:20:ce:63:44:72:9f:1e:b1:9c:96:c4:af:9e:
3f:5a:2f:27:4a:5f:2c:74:82:c5:d6:09:9b:dd:0e:62:6d:44:
a1:6e:06:ca:0c:25:47:c0:e4:0d:bc:5a:55:24:23:b4:5f:23:
bb:65:ab:99:0d:3a:1a:31:b9:d0:d2:fa:c2:65:7c:1a:03:8a:
e2:cb:05:58:2c:8b:03:e2:b0:c3:4a:29:57:46:86:e7:c6:65:
c4:26:19:41:df:e1:f4:b8:be:36:89:d0:4a:4f:39:98:8e:a3:
e0:e8:7b:ae
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUJE6nqLMfFvmqGDQlog1irIYplNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMjQxMTIyNTZaFw0yNjAxMjMxMTI3NTZaMDMxMTAvBgNV
BAMTKDU0MUQyMDEzMTNGMUIyMDc1ODE2NjBCRTUwNkIxMUIwNDhFMzc2RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+D/rZMyGiNF60Exdn4WGRkig
zhaACoXPFuf02edGRlox3cIGyL4MlThedp246xrSlwIUmxJfDxjktZYr/p/1nH2f
I/OLSwt5N7b6RXe5tgOk20OAuTSQ+aGmMT+1w4Nv6c2I2oU+HEItjViJ+P0flHEq
Wok+UUAMAJhKJRyLKptAnd4FTU1FN9qN7lfPAFbI+TbMVRMFtOCwm32iABgWY2Pp
62QqVgu1BJuqsaegVPIeMSfmUnSJMES/01qzzhRakwD8GlUHKw4THCqCEs4gFN8E
eEPiUGrqsB4H+GZEEGVuOUTWNpM7nevz4QGbz7BDv4FO1BhZo8puI3QaGAHVAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUVB0gExPxsgdYFmC+UGsRsEjjdvQwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzkzNjMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRpYDAN
BgkqhkiG9w0BAQsFAAOCAQEAhXl554Salq7A8xF1n1RN5zHKd++ipHfSFRrpeit4
2CWIZpFUA4YYJPmI9IxaTbbFJ0njSJgGGGJZ/2i0S6L6kXDJ7MIj1VrYBQLXbKoo
SDHAcxbDB9KGpkl+CX2wVFNZQ/vt5ihKfhUXnZWTJ2SHga+iyqhIGHjzkrcPGfCH
rwAU+L9l4o9PPd5rFc8SJGHqnwmn4R0gzmNEcp8esZyWxK+eP1ovJ0pfLHSCxdYJ
m90OYm1EoW4GygwlR8DkDbxaVSQjtF8ju2WrmQ06GjG50NL6wmV8GgOK4ssFWCyL
A+Kww0opV0aG58ZlxCYZQd/h9Li+NonQSk85mI6j4Oh7rg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:57 2025 by rpki-client