Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366333303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366333303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 53T1cuqzpOOD7DXR6iSTk22TtqHxd+wuV2WfspfjLBw=
Subject key identifier: E5:06:85:F2:EC:C2:15:A7:40:7B:09:D9:A3:AB:07:83:6D:19:53:A8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2785948D3B3D18F4CF53E18B79A3DE29DED28BC1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366333303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 01 Feb 2025 19:34:17 +0000
ROA not before: Sat 01 Feb 2025 19:29:17 +0000
ROA not after: Sat 31 Jan 2026 19:34:17 +0000
asID: 16909
IP address blocks: 2a14:7584:6c30::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:85:94:8d:3b:3d:18:f4:cf:53:e1:8b:79:a3:de:29:de:d2:8b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 1 19:29:17 2025 GMT
Not After : Jan 31 19:34:17 2026 GMT
Subject: CN=E50685F2ECC215A7407B09D9A3AB07836D1953A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:5f:e4:bb:82:da:c6:c6:00:40:c8:f3:1d:
f1:96:06:be:53:0a:74:5a:de:bd:f8:21:93:81:a8:
97:35:e9:76:25:16:5c:90:09:43:69:90:66:7f:6b:
e5:e6:8d:d3:8b:88:de:9e:fa:25:19:a0:01:f8:b2:
91:87:37:dd:e1:91:83:62:b7:e2:52:d9:80:89:20:
fc:43:73:40:0d:a4:57:4f:78:86:ba:ac:ff:49:a7:
52:c0:ac:af:e2:58:85:62:4b:2a:f7:58:d9:e8:13:
6d:f6:8a:5b:76:a0:53:33:82:b3:ae:c9:80:dc:54:
be:5d:66:3f:b3:23:66:ab:ca:ea:0f:dc:6f:4e:58:
82:1f:92:cc:a8:b5:51:b5:00:fa:a9:26:b4:72:93:
87:be:92:9a:8a:59:03:3c:07:68:14:32:b1:d6:c0:
ce:a4:a8:33:77:e9:1c:e4:0d:01:3a:d5:78:03:6f:
ef:36:80:da:c6:ce:b9:b0:2e:16:c6:bf:64:e1:bc:
e0:18:89:d3:a2:da:d7:cf:a4:72:e8:35:02:db:4f:
43:8c:9a:c8:33:1b:ed:2a:a3:26:a4:b2:84:de:50:
3c:a4:08:a9:88:b8:c7:04:15:4e:67:61:26:d6:33:
3e:ca:ae:37:08:ea:58:ad:de:c6:a0:0e:fb:9f:4e:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:85:F2:EC:C2:15:A7:40:7B:09:D9:A3:AB:07:83:6D:19:53:A8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366333303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c30::/48
Signature Algorithm: sha256WithRSAEncryption
76:c6:1d:f0:e4:76:5f:79:8d:d1:5e:66:e9:8b:e7:85:a4:c1:
05:59:57:e8:b9:6a:d2:a5:38:0f:01:69:4e:a2:cd:01:e8:f6:
8d:59:42:c7:a0:25:67:73:dc:2f:d4:9c:32:6f:45:a1:ef:30:
82:7b:20:65:ee:6d:01:ab:30:52:93:c5:f6:89:0f:5f:e5:99:
b6:c5:b5:58:db:e5:59:8f:77:22:b1:83:b3:b4:42:f0:04:f2:
87:eb:c5:c6:ee:e3:b9:26:25:e7:64:40:54:a2:66:11:17:96:
ef:bf:74:ed:03:31:20:a5:15:44:e8:ee:5c:f7:a1:d5:17:9a:
13:61:e9:95:c5:d9:6c:e2:05:5a:22:50:2b:60:95:2c:6b:d8:
e7:5f:2c:1d:ab:10:3a:6d:4f:6f:1a:53:a7:8e:dc:fb:23:3e:
1f:1b:2e:79:65:22:45:06:a2:5b:41:b4:31:39:61:6f:38:f9:
e5:ec:cf:92:59:d1:85:90:6a:f4:c2:10:3e:6d:ec:01:c6:f5:
5b:4a:ab:c9:c3:6d:08:10:44:47:ce:64:3e:83:38:17:c4:67:
0c:fd:b7:4e:df:47:fe:25:30:4f:6e:b5:90:c3:57:46:2d:10:
04:8c:b0:64:11:16:fc:6f:f5:4a:7c:dd:40:4a:99:40:45:f6:
32:be:04:94
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUJ4WUjTs9GPTPU+GLeaPeKd7Si8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMDExOTI5MTdaFw0yNjAxMzExOTM0MTdaMDMxMTAvBgNV
BAMTKEU1MDY4NUYyRUNDMjE1QTc0MDdCMDlEOUEzQUIwNzgzNkQxOTUzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN+1/ku4LaxsYAQMjzHfGWBr5T
CnRa3r34IZOBqJc16XYlFlyQCUNpkGZ/a+XmjdOLiN6e+iUZoAH4spGHN93hkYNi
t+JS2YCJIPxDc0ANpFdPeIa6rP9Jp1LArK/iWIViSyr3WNnoE232ilt2oFMzgrOu
yYDcVL5dZj+zI2aryuoP3G9OWIIfksyotVG1APqpJrRyk4e+kpqKWQM8B2gUMrHW
wM6kqDN36RzkDQE61XgDb+82gNrGzrmwLhbGv2ThvOAYidOi2tfPpHLoNQLbT0OM
msgzG+0qoyaksoTeUDykCKmIuMcEFU5nYSbWMz7KrjcI6lit3sagDvufTuiFAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU5QaF8uzCFadAewnZo6sHg20ZU6gwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjMzMzMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRsMDAN
BgkqhkiG9w0BAQsFAAOCAQEAdsYd8OR2X3mN0V5m6YvnhaTBBVlX6Llq0qU4DwFp
TqLNAej2jVlCx6AlZ3PcL9ScMm9Foe8wgnsgZe5tAaswUpPF9okPX+WZtsW1WNvl
WY93IrGDs7RC8ATyh+vFxu7juSYl52RAVKJmEReW77907QMxIKUVROjuXPeh1Rea
E2HplcXZbOIFWiJQK2CVLGvY518sHasQOm1PbxpTp47c+yM+HxsueWUiRQaiW0G0
MTlhbzj55ezPklnRhZBq9MIQPm3sAcb1W0qrycNtCBBER85kPoM4F8RnDP23Tt9H
/iUwT261kMNXRi0QBIywZBEW/G/1SnzdQEqZQEX2Mr4ElA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:11 2025 by rpki-client