Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366138633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366138633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lo0Bw5nNOpN+XmFEH7AXdovjqBtWdyXwcgdd7lCzHD8=
Subject key identifier: FB:42:E3:CA:18:89:AB:41:09:07:7D:50:09:AD:76:F2:6D:BA:16:71
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 44B4CC53E3BE5D08496E21EF5BD4D8542BF9BE4C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366138633a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 05:12:03 +0000
ROA not before: Thu 29 May 2025 05:07:03 +0000
ROA not after: Thu 28 May 2026 05:12:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6a8c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 16:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b4:cc:53:e3:be:5d:08:49:6e:21:ef:5b:d4:d8:54:2b:f9:be:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 05:07:03 2025 GMT
Not After : May 28 05:12:03 2026 GMT
Subject: CN=FB42E3CA1889AB4109077D5009AD76F26DBA1671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:30:5b:fd:bc:20:5a:a6:c1:45:18:ef:04:
04:59:2a:ba:ea:04:8d:13:09:c1:4f:cd:71:d8:03:
10:68:70:7a:90:9d:58:6c:8f:b9:fc:44:d6:bb:29:
28:ca:85:05:b6:fe:17:33:d6:0e:4a:39:3b:02:b5:
7c:a2:1d:96:86:4a:79:2e:91:c2:4f:df:2a:54:51:
94:ee:6d:9f:f8:cf:9f:bb:ed:3e:df:06:d9:d7:15:
35:52:24:57:99:7c:1a:13:4e:4e:e7:d7:6c:a8:be:
b4:54:84:12:7d:88:65:0a:f0:65:a6:99:cd:50:65:
f4:72:95:d2:40:6a:b8:0b:af:5d:99:92:60:14:1c:
81:72:03:e7:ab:d2:68:32:a4:72:e7:02:cf:c1:98:
63:e7:51:bc:58:b9:f4:9a:86:a2:c6:83:6f:c7:7e:
21:fc:03:f0:c0:9f:50:11:30:09:50:8e:76:7c:8e:
0a:6e:e7:c7:3e:a0:9f:0c:d2:e6:56:7f:e4:d9:c9:
82:11:6e:76:4a:3e:74:ed:ea:14:d2:fa:d1:68:0e:
ca:86:19:5a:47:85:b5:58:fe:de:4c:ac:3b:7f:1f:
6b:ae:10:90:37:8d:5a:b2:43:ee:fa:82:c0:37:54:
94:35:a2:43:2a:39:7c:0c:01:be:92:a5:70:1b:c6:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:42:E3:CA:18:89:AB:41:09:07:7D:50:09:AD:76:F2:6D:BA:16:71
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366138633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a8c::/48
Signature Algorithm: sha256WithRSAEncryption
4b:8c:cd:59:d6:2f:08:e4:fa:81:74:cf:4b:90:57:8a:32:01:
0e:57:a9:bf:84:c3:de:d5:68:47:6a:93:5d:6a:9d:18:61:8e:
91:24:cc:fb:59:7c:fa:d2:5f:7d:3f:11:d4:e4:f9:5e:c8:9f:
71:69:62:41:42:2a:8e:9f:9e:39:68:db:3c:ef:60:62:59:ec:
ba:40:81:c1:1d:63:78:33:65:19:90:3c:a8:a1:91:cc:ac:33:
79:d7:ab:53:d9:59:5a:9f:bb:cd:91:6b:ce:d0:7d:16:ef:0d:
19:15:1c:2f:64:b1:39:ed:6d:f4:e6:66:76:3c:22:a8:66:91:
8f:86:97:be:14:08:08:af:19:1b:f7:5d:03:23:04:db:08:f5:
e1:ae:8d:9c:8d:08:11:60:2d:22:39:53:b7:00:75:e7:96:da:
5d:d6:3a:b4:b3:fe:6b:da:6e:2c:b0:da:30:66:7f:70:d6:9a:
00:a9:8f:b8:e7:1c:84:06:39:90:07:15:09:26:c0:95:fe:ec:
9d:3c:97:d1:31:dd:8d:74:3e:8c:93:c5:6d:c0:de:38:aa:76:
8f:6c:e2:c1:1e:39:55:c6:f3:eb:f7:44:23:1d:3e:6f:b3:82:
21:55:bf:0b:98:b5:ae:56:0c:70:46:d5:4c:0e:4f:ef:59:99:
06:2d:5f:3e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURLTMU+O+XQhJbiHvW9TYVCv5vkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjkwNTA3MDNaFw0yNjA1MjgwNTEyMDNaMDMxMTAvBgNV
BAMTKEZCNDJFM0NBMTg4OUFCNDEwOTA3N0Q1MDA5QUQ3NkYyNkRCQTE2NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycTBb/bwgWqbBRRjvBARZKrrq
BI0TCcFPzXHYAxBocHqQnVhsj7n8RNa7KSjKhQW2/hcz1g5KOTsCtXyiHZaGSnku
kcJP3ypUUZTubZ/4z5+77T7fBtnXFTVSJFeZfBoTTk7n12yovrRUhBJ9iGUK8GWm
mc1QZfRyldJAargLr12ZkmAUHIFyA+er0mgypHLnAs/BmGPnUbxYufSahqLGg2/H
fiH8A/DAn1ARMAlQjnZ8jgpu58c+oJ8M0uZWf+TZyYIRbnZKPnTt6hTS+tFoDsqG
GVpHhbVY/t5MrDt/H2uuEJA3jVqyQ+76gsA3VJQ1okMqOXwMAb6SpXAbxuNZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU+0LjyhiJq0EJB31QCa128m26FnEwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjEzODYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRqjDAN
BgkqhkiG9w0BAQsFAAOCAQEAS4zNWdYvCOT6gXTPS5BXijIBDlepv4TD3tVoR2qT
XWqdGGGOkSTM+1l8+tJffT8R1OT5XsifcWliQUIqjp+eOWjbPO9gYlnsukCBwR1j
eDNlGZA8qKGRzKwzederU9lZWp+7zZFrztB9Fu8NGRUcL2SxOe1t9OZmdjwiqGaR
j4aXvhQICK8ZG/ddAyME2wj14a6NnI0IEWAtIjlTtwB155baXdY6tLP+a9puLLDa
MGZ/cNaaAKmPuOcchAY5kAcVCSbAlf7snTyX0THdjXQ+jJPFbcDeOKp2j2ziwR45
Vcbz6/dEIx0+b7OCIVW/C5i1rlYMcEbVTA5P71mZBi1fPg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:42:08 2025 by rpki-client