Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366633333a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366633333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: DTEBV9d7PpZw/jCjfq07+ryDXS/ZoooKM+3U1XFHCMo=
Subject key identifier: BF:C1:CC:D0:00:00:7A:81:EA:01:FC:4C:45:71:D0:56:A6:5E:3B:73
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 240891D3774C57EFBEFCDCC5920C3B5B1E6C7572
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366633333a3a2f34382d3438203d3e20343031353037.roa
Signing time: Tue 27 May 2025 09:36:02 +0000
ROA not before: Tue 27 May 2025 09:31:02 +0000
ROA not after: Tue 26 May 2026 09:36:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6f33::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:08:91:d3:77:4c:57:ef:be:fc:dc:c5:92:0c:3b:5b:1e:6c:75:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 09:31:02 2025 GMT
Not After : May 26 09:36:02 2026 GMT
Subject: CN=BFC1CCD000007A81EA01FC4C4571D056A65E3B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:16:32:f9:7c:c9:92:44:9e:74:62:57:3a:
6f:b7:de:84:37:cf:32:f7:63:33:c3:66:5e:37:1b:
67:32:b8:6c:02:32:bc:47:cf:f5:1d:83:fa:88:63:
2a:de:6a:7a:47:87:11:76:56:65:12:33:47:5b:7d:
bd:c7:f2:84:4d:a7:86:64:b8:a3:9a:2c:56:9f:9f:
96:87:be:6c:8a:38:1b:0f:08:6c:88:11:dc:e5:29:
1c:98:29:57:3f:8b:da:a8:a8:84:bf:c5:9c:9a:dd:
88:ff:c2:c2:7f:af:b6:af:d3:62:ee:f9:b7:29:dd:
37:cb:5b:c1:95:1a:d7:d9:f3:f3:55:3d:91:55:38:
e6:74:cc:f5:aa:f3:0e:94:26:5b:b7:0c:12:fa:82:
43:3d:db:23:97:5a:50:1c:ea:66:90:2c:cc:3a:01:
0b:c7:44:de:3c:3c:65:ae:c6:cc:11:4b:3e:ca:fd:
42:04:df:9c:c6:65:17:ad:5e:62:3c:b7:af:fb:37:
d6:db:cd:fc:77:22:c3:6d:23:4e:3c:f6:cb:a4:26:
c7:a7:e8:fe:fe:64:da:ad:8e:02:68:b6:08:d0:41:
f3:eb:04:9c:2f:63:51:93:9e:46:b5:2c:e2:1b:8b:
12:a1:9b:7f:43:3f:68:e6:4f:87:fc:45:61:00:03:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C1:CC:D0:00:00:7A:81:EA:01:FC:4C:45:71:D0:56:A6:5E:3B:73
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366633333a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f33::/48
Signature Algorithm: sha256WithRSAEncryption
18:7c:2d:2e:f5:08:7b:7d:9e:03:f7:d8:ea:ed:bb:21:86:0a:
30:2e:47:c1:44:64:89:a6:af:73:78:1d:9a:0a:94:34:22:0b:
bd:76:0f:0e:b8:07:a1:aa:75:b5:53:60:c5:6e:0e:40:c2:dc:
6c:fd:52:d1:41:cc:c0:c9:f7:66:11:f0:db:5d:d9:e2:7f:f9:
77:0c:6b:25:ef:cd:f3:bc:1a:f5:88:29:b1:06:a2:f5:45:bf:
17:85:12:be:ab:1a:50:cc:01:a2:fa:5a:d1:7b:f0:7f:b9:59:
18:c3:61:3e:c2:e2:74:9b:c5:0d:46:f5:af:ef:04:89:3c:74:
7d:8e:ae:9f:32:84:97:1c:cc:c3:fe:39:0d:7f:72:18:5a:74:
cc:24:af:80:fb:b3:cd:1e:c0:60:0e:24:12:a5:bc:67:fc:34:
93:73:cf:b3:e1:d2:0d:b8:61:d2:fe:17:1e:69:ae:b3:00:fa:
42:64:7d:19:f1:4b:45:b9:cb:91:bc:63:4b:bb:e4:42:ad:76:
f6:58:19:e3:dc:70:45:ac:cd:6b:34:89:91:e9:12:69:75:e5:
21:42:8d:db:14:dd:bf:3b:81:26:03:63:28:07:04:69:e1:17:
4b:e1:d0:ee:07:8f:8b:78:41:83:1e:d3:63:90:f6:bd:69:8c:
00:6a:af:28
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJAiR03dMV+++/NzFkgw7Wx5sdXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjcwOTMxMDJaFw0yNjA1MjYwOTM2MDJaMDMxMTAvBgNV
BAMTKEJGQzFDQ0QwMDAwMDdBODFFQTAxRkM0QzQ1NzFEMDU2QTY1RTNCNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUBYy+XzJkkSedGJXOm+33oQ3
zzL3YzPDZl43G2cyuGwCMrxHz/Udg/qIYyreanpHhxF2VmUSM0dbfb3H8oRNp4Zk
uKOaLFafn5aHvmyKOBsPCGyIEdzlKRyYKVc/i9qoqIS/xZya3Yj/wsJ/r7av02Lu
+bcp3TfLW8GVGtfZ8/NVPZFVOOZ0zPWq8w6UJlu3DBL6gkM92yOXWlAc6maQLMw6
AQvHRN48PGWuxswRSz7K/UIE35zGZRetXmI8t6/7N9bbzfx3IsNtI0489sukJsen
6P7+ZNqtjgJotgjQQfPrBJwvY1GTnka1LOIbixKhm39DP2jmT4f8RWEAAxGBAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUv8HM0AAAeoHqAfxMRXHQVqZeO3MwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjYzMzMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hG8z
MA0GCSqGSIb3DQEBCwUAA4IBAQAYfC0u9Qh7fZ4D99jq7bshhgowLkfBRGSJpq9z
eB2aCpQ0Igu9dg8OuAehqnW1U2DFbg5Awtxs/VLRQczAyfdmEfDbXdnif/l3DGsl
783zvBr1iCmxBqL1Rb8XhRK+qxpQzAGi+lrRe/B/uVkYw2E+wuJ0m8UNRvWv7wSJ
PHR9jq6fMoSXHMzD/jkNf3IYWnTMJK+A+7PNHsBgDiQSpbxn/DSTc8+z4dINuGHS
/hceaa6zAPpCZH0Z8UtFucuRvGNLu+RCrXb2WBnj3HBFrM1rNImR6RJpdeUhQo3b
FN2/O4EmA2MoBwRp4RdL4dDuB4+LeEGDHtNjkPa9aYwAaq8o
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:06:12 2025 by rpki-client