Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366136313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366136313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: DepHKRQqTrShlbHRUZekQXb7zU0IMJUGu3pw9BxQas0=
Subject key identifier: AF:11:88:7E:36:74:04:0E:1D:04:00:1A:17:EA:D0:28:A5:A2:AB:36
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3425C26E2FFBEC11BFFAFDF79A25347F7912609B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366136313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 05:54:02 +0000
ROA not before: Sun 25 May 2025 05:49:02 +0000
ROA not after: Sun 24 May 2026 05:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6a61::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:25:c2:6e:2f:fb:ec:11:bf:fa:fd:f7:9a:25:34:7f:79:12:60:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 05:49:02 2025 GMT
Not After : May 24 05:54:02 2026 GMT
Subject: CN=AF11887E3674040E1D04001A17EAD028A5A2AB36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:17:33:05:0d:c5:1c:79:ed:60:78:d3:5b:
7a:d7:c8:07:fa:d6:ac:af:37:04:34:fd:c1:32:a0:
30:fd:82:49:5d:7d:44:6b:7a:95:30:43:28:7a:03:
fc:e1:7b:d2:67:46:e6:2b:72:65:c4:47:4b:c8:60:
7f:b4:36:d6:99:b4:09:45:c2:bb:33:46:89:29:04:
77:6f:44:11:f0:d8:93:24:f3:e6:20:6e:f4:e6:d7:
04:ee:11:bd:27:d6:7b:a8:27:87:7a:16:12:f4:a7:
05:60:7a:9e:5e:fe:d5:cb:7a:75:29:aa:90:84:2c:
fa:d3:77:28:66:d6:51:42:d0:5f:fa:56:d7:cf:ee:
91:c2:af:95:d6:cd:b2:09:bd:45:eb:ca:14:e1:cb:
db:54:f8:0e:7a:c6:b3:5f:21:f3:0c:fd:7d:b2:0d:
a3:60:47:10:3c:40:dd:66:95:44:72:5c:0e:c2:62:
5e:2f:f5:69:ea:df:b0:a8:2a:1c:93:ab:c4:39:d4:
77:50:a6:cb:31:fa:2d:e1:d9:aa:57:b8:09:ed:2c:
89:fa:97:bc:23:25:32:a7:8f:19:72:3b:91:ba:23:
56:67:35:c2:0c:6e:c9:5e:ee:69:4f:c9:3c:5f:9a:
94:c5:2f:8f:93:69:d8:81:6a:3e:3e:cb:78:9d:b9:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:88:7E:36:74:04:0E:1D:04:00:1A:17:EA:D0:28:A5:A2:AB:36
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366136313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a61::/48
Signature Algorithm: sha256WithRSAEncryption
60:f8:39:d2:3c:67:28:00:13:16:9d:de:ed:2e:4d:fb:09:6f:
ac:1d:1b:aa:ef:ec:b6:d6:bb:4d:a9:4d:d2:b0:3b:11:d2:10:
7d:f3:d5:ce:e8:27:77:79:ef:b6:ca:bf:5b:de:7f:9f:1f:ad:
48:d8:2f:ba:bd:19:6a:0b:88:a8:5d:d3:6f:38:53:53:dc:c5:
92:a9:e9:e1:c7:60:05:c0:09:c7:96:fc:34:3f:96:98:b0:c8:
08:b4:80:b1:d2:fe:4b:88:1f:32:88:7a:17:03:37:f2:93:d1:
dd:a0:6d:5d:3f:c9:2a:1b:b0:65:1b:30:70:32:f1:fc:ea:44:
bf:6f:f9:59:7a:b0:e4:a4:48:7d:f8:dc:17:01:59:ed:c1:8c:
ce:42:24:4a:3b:12:40:bc:79:d6:a0:a8:6a:b7:8f:06:ea:69:
2e:2e:e2:d7:16:e9:16:30:7e:49:26:9c:56:19:f4:2e:38:c5:
36:7a:f5:17:6a:22:82:84:e6:a4:9c:b8:01:c6:24:0a:27:46:
72:4a:fc:f2:22:ea:7e:5b:02:a2:1f:3a:07:89:83:bc:4b:eb:
85:67:00:a5:f0:72:ed:fb:b7:fc:9b:84:2c:0c:e7:30:44:9c:
39:38:4f:9c:f7:d3:68:89:8d:53:8c:d0:45:79:55:7b:29:c0:
2b:81:a2:cd
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUNCXCbi/77BG/+v33miU0f3kSYJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUwNTQ5MDJaFw0yNjA1MjQwNTU0MDJaMDMxMTAvBgNV
BAMTKEFGMTE4ODdFMzY3NDA0MEUxRDA0MDAxQTE3RUFEMDI4QTVBMkFCMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRBczBQ3FHHntYHjTW3rXyAf6
1qyvNwQ0/cEyoDD9gkldfURrepUwQyh6A/zhe9JnRuYrcmXER0vIYH+0NtaZtAlF
wrszRokpBHdvRBHw2JMk8+YgbvTm1wTuEb0n1nuoJ4d6FhL0pwVgep5e/tXLenUp
qpCELPrTdyhm1lFC0F/6VtfP7pHCr5XWzbIJvUXryhThy9tU+A56xrNfIfMM/X2y
DaNgRxA8QN1mlURyXA7CYl4v9Wnq37CoKhyTq8Q51HdQpssx+i3h2apXuAntLIn6
l7wjJTKnjxlyO5G6I1ZnNcIMbsle7mlPyTxfmpTFL4+TadiBaj4+y3iduRSFAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUrxGIfjZ0BA4dBAAaF+rQKKWiqzYwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjEzNjMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRqYTAN
BgkqhkiG9w0BAQsFAAOCAQEAYPg50jxnKAATFp3e7S5N+wlvrB0bqu/stta7TalN
0rA7EdIQffPVzugnd3nvtsq/W95/nx+tSNgvur0ZaguIqF3TbzhTU9zFkqnp4cdg
BcAJx5b8ND+WmLDICLSAsdL+S4gfMoh6FwM38pPR3aBtXT/JKhuwZRswcDLx/OpE
v2/5WXqw5KRIffjcFwFZ7cGMzkIkSjsSQLx51qCoarePBuppLi7i1xbpFjB+SSac
Vhn0LjjFNnr1F2oigoTmpJy4AcYkCidGckr88iLqflsCoh86B4mDvEvrhWcApfBy
7fu3/JuELAznMEScOThPnPfTaImNU4zQRXlVeynAK4GizQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:21:14 2025 by rpki-client