Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366434323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Vp4c6kEnMDBb5kBjBO+ggJrYIsyy4uMM8PO3eC5TltI=
Subject key identifier: CD:4B:75:25:6D:34:25:E7:C2:04:50:96:5F:1A:2A:EE:71:57:44:25
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0C31CDFA0CB409A0BE79099835081C104144F316
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434323a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 19:54:02 +0000
ROA not before: Mon 26 May 2025 19:49:02 +0000
ROA not after: Mon 25 May 2026 19:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d42::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:31:cd:fa:0c:b4:09:a0:be:79:09:98:35:08:1c:10:41:44:f3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 19:49:02 2025 GMT
Not After : May 25 19:54:02 2026 GMT
Subject: CN=CD4B75256D3425E7C20450965F1A2AEE71574425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:24:2c:f7:cb:5c:c0:fc:4e:d7:b6:11:64:
d9:43:59:8b:cd:06:24:d6:3f:df:57:73:a5:3b:2c:
39:0c:15:45:af:21:e5:93:22:6a:24:00:01:77:70:
95:f3:cc:13:e8:02:00:0b:96:de:80:54:4d:18:45:
55:f0:c7:a4:b4:1e:f6:d5:f8:92:a4:6b:31:2d:ae:
38:a0:da:0a:1a:54:13:10:3e:e2:2d:92:d5:1e:b5:
81:11:bb:2f:f4:24:db:6d:c7:a3:ce:54:40:99:11:
a8:28:1a:1b:3a:29:a9:fb:1b:e0:fa:4d:43:5d:fd:
08:ca:18:be:31:a6:e1:c0:a1:14:e2:f5:02:a9:94:
c7:50:95:85:9b:c0:0a:6f:99:2e:23:99:f1:f2:73:
1a:1c:7c:44:0e:c2:5c:93:64:84:e5:b9:a8:77:78:
5b:37:fe:e3:a9:37:8d:da:22:78:37:19:9d:7d:b7:
9f:86:2a:69:7e:3f:64:e2:ed:4b:03:8e:fd:76:cd:
19:5a:e2:69:26:54:18:72:a2:68:d3:bd:2f:4c:03:
62:dd:75:5f:76:e0:47:e7:30:cf:06:ef:19:10:3d:
3f:86:b9:a9:9e:5c:e5:ea:43:a5:ae:2c:f1:0d:80:
e9:b4:7f:fc:9c:d7:df:69:8e:54:95:d3:96:64:f9:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4B:75:25:6D:34:25:E7:C2:04:50:96:5F:1A:2A:EE:71:57:44:25
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d42::/48
Signature Algorithm: sha256WithRSAEncryption
73:2e:fb:05:07:61:fb:16:d0:4c:28:e8:b7:65:4f:93:72:da:
76:e0:16:38:30:a1:39:e3:f6:37:95:74:05:c7:45:83:9e:e5:
05:f0:e1:cb:01:43:56:02:32:9d:7b:a1:b7:ad:eb:1a:c3:4b:
37:d7:fb:d0:20:3d:da:ba:2b:2d:f4:c0:23:49:4f:31:25:09:
41:64:7c:af:b7:4c:65:01:2f:02:eb:4b:ec:5d:63:55:99:30:
6e:1e:17:db:fc:c4:63:3e:2e:02:17:68:a9:a7:a9:c7:d2:54:
25:d4:31:93:2b:dc:c5:40:d7:7c:44:79:d2:5d:69:58:0e:82:
f4:ce:d1:a1:98:72:99:02:13:9f:b8:b8:b8:28:b5:92:41:cb:
0e:54:38:3e:57:6c:a1:6e:96:93:4b:a4:b3:34:72:b9:a9:92:
29:66:05:b3:0a:b9:d2:ff:58:5c:14:a0:6d:af:1f:a1:e0:fe:
50:bd:b6:4d:9b:a3:b1:05:a5:e7:31:11:8b:01:3a:02:2d:42:
02:28:7d:59:49:53:67:26:7d:f8:cf:9f:c1:70:3a:d6:9f:55:
7a:4d:0d:03:41:a7:21:ee:11:9e:25:d7:1e:62:88:48:97:11:
f5:0c:6b:c7:12:24:ba:9b:55:e5:c5:1b:11:91:31:fc:49:12:
bb:e2:2d:e7
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUDDHN+gy0CaC+eQmYNQgcEEFE8xYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjYxOTQ5MDJaFw0yNjA1MjUxOTU0MDJaMDMxMTAvBgNV
BAMTKENENEI3NTI1NkQzNDI1RTdDMjA0NTA5NjVGMUEyQUVFNzE1NzQ0MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3CQs98tcwPxO17YRZNlDWYvN
BiTWP99Xc6U7LDkMFUWvIeWTImokAAF3cJXzzBPoAgALlt6AVE0YRVXwx6S0HvbV
+JKkazEtrjig2goaVBMQPuItktUetYERuy/0JNttx6POVECZEagoGhs6Kan7G+D6
TUNd/QjKGL4xpuHAoRTi9QKplMdQlYWbwApvmS4jmfHycxocfEQOwlyTZITluah3
eFs3/uOpN43aIng3GZ19t5+GKml+P2Ti7UsDjv12zRla4mkmVBhyomjTvS9MA2Ld
dV924EfnMM8G7xkQPT+GuameXOXqQ6WuLPENgOm0f/yc199pjlSV05Zk+QohAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUzUt1JW00JefCBFCWXxoq7nFXRCUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjQzNDMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRtQjAN
BgkqhkiG9w0BAQsFAAOCAQEAcy77BQdh+xbQTCjot2VPk3LaduAWODChOeP2N5V0
BcdFg57lBfDhywFDVgIynXuht63rGsNLN9f70CA92rorLfTAI0lPMSUJQWR8r7dM
ZQEvAutL7F1jVZkwbh4X2/zEYz4uAhdoqaepx9JUJdQxkyvcxUDXfER50l1pWA6C
9M7RoZhymQITn7i4uCi1kkHLDlQ4PldsoW6Wk0ukszRyuamSKWYFswq50v9YXBSg
ba8foeD+UL22TZujsQWl5zERiwE6Ai1CAih9WUlTZyZ9+M+fwXA61p9Vek0NA0Gn
Ie4RniXXHmKISJcR9QxrxxIkuptV5cUbEZEx/EkSu+It5w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:53 2025 by rpki-client