Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366638303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366638303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: z+JexGJBYChXHN10an/RBV8zsCOOsyKMD/giLRuUnKM=
Subject key identifier: 16:6A:C6:07:61:D6:BF:3D:80:81:F5:DE:6B:8C:C2:BB:93:4D:0B:AD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 72E9AF532D8ED9EDA2240BB263E7A64401292B91
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366638303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Feb 2025 15:02:34 +0000
ROA not before: Mon 10 Feb 2025 14:57:34 +0000
ROA not after: Mon 09 Feb 2026 15:02:34 +0000
asID: 16909
IP address blocks: 2a14:7584:6f80::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e9:af:53:2d:8e:d9:ed:a2:24:0b:b2:63:e7:a6:44:01:29:2b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 10 14:57:34 2025 GMT
Not After : Feb 9 15:02:34 2026 GMT
Subject: CN=166AC60761D6BF3D8081F5DE6B8CC2BB934D0BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:4d:66:9f:4f:19:87:41:0a:fc:64:43:9c:
e0:57:69:7e:c4:26:3e:53:1b:ca:5d:b7:bd:aa:32:
03:5a:9c:34:b8:00:e6:3d:f0:a1:a7:27:1b:3d:ee:
4f:5c:dd:f9:95:cf:fa:f8:9f:ba:62:66:cf:93:68:
e2:6a:14:7f:8c:34:f8:ad:50:d1:e8:44:ea:ae:58:
83:ae:7f:e8:d0:2c:bf:de:9a:50:38:a0:ca:c1:04:
7f:fb:0d:fd:8c:3f:dc:21:14:49:07:17:33:57:13:
a8:03:63:e5:81:21:0f:63:86:48:73:3e:a6:27:ce:
ad:9d:10:6e:4b:59:de:96:66:27:5d:c4:05:95:f9:
b9:92:f7:d3:65:ca:ad:96:bf:f1:19:d3:b9:54:c8:
93:d9:06:21:9e:2b:16:f2:50:04:f0:a3:15:41:d9:
a9:52:c1:fa:15:7d:a9:86:35:af:8b:59:75:ef:70:
b1:ee:ca:61:87:44:6b:84:4f:93:0c:a3:17:6a:b2:
60:31:5a:e0:9b:e5:4d:6a:46:22:d0:6c:19:c9:5a:
b9:17:7f:fa:94:e4:30:65:0b:59:0b:be:a6:33:4a:
27:e0:cb:2e:70:5d:97:e1:43:2a:1a:0e:c7:ab:17:
93:51:ef:aa:f4:e1:68:8c:ac:1d:98:a7:b9:1c:33:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6A:C6:07:61:D6:BF:3D:80:81:F5:DE:6B:8C:C2:BB:93:4D:0B:AD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366638303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f80::/48
Signature Algorithm: sha256WithRSAEncryption
13:e8:c2:b2:35:47:37:47:5e:47:62:dc:25:89:b9:04:f7:20:
9a:30:29:fb:53:53:73:0c:1f:07:cc:85:36:40:82:3a:50:dc:
d1:10:20:a6:49:51:ee:97:ea:97:56:ff:c1:89:72:67:ba:78:
0d:27:0e:f2:e8:c3:c2:50:cc:82:05:b1:d7:9b:6e:9e:5c:bc:
e2:3c:ba:b9:8c:f4:37:74:f9:0f:ca:3c:3a:f3:ee:37:cb:fb:
ba:dd:4b:21:92:41:7f:7b:61:57:bd:2b:21:9b:7b:3f:59:46:
64:3c:dd:5b:32:e2:95:5b:cf:eb:4a:53:07:33:6f:63:e3:a1:
2d:ac:01:51:a8:ce:06:03:3b:3c:5a:0a:fc:ca:29:ad:4d:0e:
30:b6:9b:fd:06:b5:b0:1a:0d:bf:82:6e:63:28:6c:37:33:5c:
97:e5:9b:42:7f:70:25:39:8d:34:52:b4:d3:06:1a:3f:db:25:
12:54:3e:a7:15:be:88:43:85:55:64:f7:09:65:6c:6c:e9:00:
a9:6e:dc:95:49:6e:2e:55:f2:58:a3:db:34:21:62:8e:a7:58:
41:a9:c2:5a:33:31:b9:ff:ed:9f:55:81:f3:dc:70:c2:a4:ac:
ad:6d:98:0c:22:bb:cc:f9:d3:66:fd:a8:ab:de:82:90:4b:e8:
78:cb:58:47
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUcumvUy2O2e2iJAuyY+emRAEpK5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMTAxNDU3MzRaFw0yNjAyMDkxNTAyMzRaMDMxMTAvBgNV
BAMTKDE2NkFDNjA3NjFENkJGM0Q4MDgxRjVERTZCOENDMkJCOTM0RDBCQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJ01mn08Zh0EK/GRDnOBXaX7E
Jj5TG8pdt72qMgNanDS4AOY98KGnJxs97k9c3fmVz/r4n7piZs+TaOJqFH+MNPit
UNHoROquWIOuf+jQLL/emlA4oMrBBH/7Df2MP9whFEkHFzNXE6gDY+WBIQ9jhkhz
PqYnzq2dEG5LWd6WZiddxAWV+bmS99Nlyq2Wv/EZ07lUyJPZBiGeKxbyUATwoxVB
2alSwfoVfamGNa+LWXXvcLHuymGHRGuET5MMoxdqsmAxWuCb5U1qRiLQbBnJWrkX
f/qU5DBlC1kLvqYzSifgyy5wXZfhQyoaDserF5NR76r04WiMrB2Yp7kcM87LAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUFmrGB2HWvz2AgfXea4zCu5NNC60wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjYzODMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRvgDAN
BgkqhkiG9w0BAQsFAAOCAQEAE+jCsjVHN0deR2LcJYm5BPcgmjAp+1NTcwwfB8yF
NkCCOlDc0RAgpklR7pfql1b/wYlyZ7p4DScO8ujDwlDMggWx15tunly84jy6uYz0
N3T5D8o8OvPuN8v7ut1LIZJBf3thV70rIZt7P1lGZDzdWzLilVvP60pTBzNvY+Oh
LawBUajOBgM7PFoK/MoprU0OMLab/Qa1sBoNv4JuYyhsNzNcl+WbQn9wJTmNNFK0
0wYaP9slElQ+pxW+iEOFVWT3CWVsbOkAqW7clUluLlXyWKPbNCFijqdYQanCWjMx
uf/tn1WB89xwwqSsrW2YDCK7zPnTZv2oq96CkEvoeMtYRw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:51:45 2025 by rpki-client