Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366365323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: r1BZuwC8Dh3Zv5OLpmYD9RXKH74eorkr/I0j9WNA5H0=
Subject key identifier: 46:E7:90:F3:AC:83:6D:CA:33:D2:8A:0F:74:3A:23:16:4B:AA:BE:AA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 46A509898BB0D25021F5442381CD886147FED650
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 22:06:02 +0000
ROA not before: Sun 25 May 2025 22:01:02 +0000
ROA not after: Sun 24 May 2026 22:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ce2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 20:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a5:09:89:8b:b0:d2:50:21:f5:44:23:81:cd:88:61:47:fe:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 22:01:02 2025 GMT
Not After : May 24 22:06:02 2026 GMT
Subject: CN=46E790F3AC836DCA33D28A0F743A23164BAABEAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:7d:c5:c1:9e:f6:0d:d8:2f:b7:d3:65:10:
63:f2:03:29:f1:53:e7:40:97:4d:f6:74:ab:01:45:
fa:81:0f:63:4b:41:24:a4:27:f4:13:71:19:5d:d8:
5b:99:e0:0d:bb:b0:90:20:8a:c1:6b:c0:0f:c9:99:
30:50:29:38:d9:cb:55:5e:48:46:c9:77:1e:34:0a:
cc:b7:8b:d4:06:17:0c:27:60:f2:70:eb:7a:f4:78:
d0:46:f7:3c:64:e1:84:54:c6:63:89:44:05:05:36:
46:a1:1e:99:0a:99:5a:0a:b2:00:66:6c:5c:fd:21:
ea:ce:85:19:e8:e6:bd:54:2d:13:51:8b:5c:d9:41:
32:ac:d5:0a:f5:67:13:32:bc:a9:49:ed:f1:8e:51:
1e:c2:44:ea:71:11:10:28:3a:af:6e:49:5e:ae:10:
2f:25:ab:0b:de:a8:b6:9c:84:bd:21:a6:c1:b1:10:
25:a4:b1:85:90:b4:4f:b1:92:68:1b:a0:93:c2:b9:
88:de:b4:b8:04:e6:a9:a8:98:12:12:87:eb:22:0b:
86:d3:c8:20:c6:1e:4d:74:a3:dd:49:c3:9e:e0:a9:
6b:0b:9e:c9:e3:80:e3:c5:07:72:8d:ce:f6:88:8e:
46:9e:61:94:aa:38:54:a5:7c:7e:92:d8:7a:7a:eb:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:90:F3:AC:83:6D:CA:33:D2:8A:0F:74:3A:23:16:4B:AA:BE:AA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ce2::/48
Signature Algorithm: sha256WithRSAEncryption
01:32:89:4d:80:dd:32:29:4e:d1:39:99:84:52:30:3f:13:b4:
21:28:b9:4d:80:4e:b9:51:02:c9:81:97:e1:4a:b9:8e:6d:1d:
58:52:e3:d0:50:cd:64:14:e8:2c:ca:2a:12:71:8d:f6:c2:42:
b2:a9:70:c0:08:d3:4e:16:ea:8f:40:53:cc:3b:3e:ea:56:bb:
37:49:be:34:d2:95:d1:f4:28:9f:18:63:31:8d:1c:7a:9f:0a:
fa:66:98:25:bf:1f:34:5b:72:5f:02:65:3a:2e:b0:6b:eb:5a:
bc:df:55:2b:d5:45:10:45:4a:6d:02:c9:a3:a6:c7:59:59:05:
69:34:d9:ad:39:c8:71:96:4a:c4:a3:24:69:86:a5:68:78:64:
f6:1e:8e:83:8d:6a:a8:2b:ce:10:86:4f:a8:6d:4c:95:ba:d6:
03:46:1c:2d:93:9a:83:d3:4c:2a:8c:32:45:c7:29:60:f6:b9:
4d:a6:b8:4d:c1:28:a6:d3:fd:35:cb:2d:47:01:6f:da:d6:9f:
7d:96:a9:31:c2:e3:e3:a0:ca:7d:aa:31:6a:ad:c7:20:4a:68:
5c:1f:73:b2:db:95:a6:9b:53:0d:08:c7:50:fb:b4:d2:f6:95:
96:26:f2:c0:96:11:5b:73:49:d2:dd:e2:55:e0:03:51:7f:6d:
71:6f:01:3a
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURqUJiYuw0lAh9UQjgc2IYUf+1lAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUyMjAxMDJaFw0yNjA1MjQyMjA2MDJaMDMxMTAvBgNV
BAMTKDQ2RTc5MEYzQUM4MzZEQ0EzM0QyOEEwRjc0M0EyMzE2NEJBQUJFQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKX3FwZ72Ddgvt9NlEGPyAynx
U+dAl032dKsBRfqBD2NLQSSkJ/QTcRld2FuZ4A27sJAgisFrwA/JmTBQKTjZy1Ve
SEbJdx40Csy3i9QGFwwnYPJw63r0eNBG9zxk4YRUxmOJRAUFNkahHpkKmVoKsgBm
bFz9IerOhRno5r1ULRNRi1zZQTKs1Qr1ZxMyvKlJ7fGOUR7CROpxERAoOq9uSV6u
EC8lqwveqLachL0hpsGxECWksYWQtE+xkmgboJPCuYjetLgE5qmomBISh+siC4bT
yCDGHk10o91Jw57gqWsLnsnjgOPFB3KNzvaIjkaeYZSqOFSlfH6S2Hp663WxAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQURueQ86yDbcoz0ooPdDojFkuqvqowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjM2NTMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRs4jAN
BgkqhkiG9w0BAQsFAAOCAQEAATKJTYDdMilO0TmZhFIwPxO0ISi5TYBOuVECyYGX
4Uq5jm0dWFLj0FDNZBToLMoqEnGN9sJCsqlwwAjTThbqj0BTzDs+6la7N0m+NNKV
0fQonxhjMY0cep8K+maYJb8fNFtyXwJlOi6wa+tavN9VK9VFEEVKbQLJo6bHWVkF
aTTZrTnIcZZKxKMkaYalaHhk9h6Og41qqCvOEIZPqG1MlbrWA0YcLZOag9NMKowy
RccpYPa5Taa4TcEoptP9NcstRwFv2taffZapMcLj46DKfaoxaq3HIEpoXB9zstuV
pptTDQjHUPu00vaVlibywJYRW3NJ0t3iVeADUX9tcW8BOg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:26:45 2025 by rpki-client