Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: doh2+XvFIB5qMIQyrQEMbz1dX55y4qHjSzCH70KCvwU=
Subject key identifier: 8B:49:72:B1:81:19:B9:9E:4A:21:03:EA:FC:82:83:1C:A3:34:7C:8C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 70BA83218C1BFDD2AA550F1482E6F83D32708B2D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038343a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:58 +0000
ROA not before: Mon 10 Mar 2025 11:49:58 +0000
ROA not after: Mon 09 Mar 2026 11:54:58 +0000
asID: 16909
IP address blocks: 2a14:7584:6084::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ba:83:21:8c:1b:fd:d2:aa:55:0f:14:82:e6:f8:3d:32:70:8b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:58 2025 GMT
Not After : Mar 9 11:54:58 2026 GMT
Subject: CN=8B4972B18119B99E4A2103EAFC82831CA3347C8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:b9:e7:31:e2:d3:01:25:09:59:86:36:11:
07:c2:07:c7:aa:74:69:e2:c0:e8:38:9e:03:cb:1b:
dd:d7:86:7c:4f:f5:08:09:23:82:97:e0:4c:1c:f7:
78:98:6b:83:51:50:34:7e:12:7b:bc:72:3c:46:6f:
5e:2c:dc:23:48:c9:94:1e:59:71:5c:62:95:84:ae:
83:46:76:27:e5:52:fb:e0:11:80:c4:20:b8:cf:46:
ae:34:ff:f2:4f:6d:58:72:1f:7c:bf:49:ba:83:cc:
db:1c:3b:7a:bc:56:70:42:9f:53:0f:1c:e0:b9:28:
75:7f:c3:8f:e7:9e:4e:48:17:49:c0:82:d7:e6:3e:
3d:84:8f:61:8c:38:ea:4e:ac:7b:c9:21:ac:b5:6c:
68:26:9b:87:c3:f6:8e:67:b1:3e:17:42:1b:8b:3c:
6f:0f:c3:15:8f:f1:08:66:21:29:a2:20:8c:4c:14:
f1:0b:61:bf:c3:6c:18:a2:22:25:8c:9f:5a:ca:a0:
45:fb:69:95:4c:14:8e:f3:99:b5:60:f9:83:3f:03:
5c:57:89:1a:33:87:7e:63:3e:f5:32:f5:90:70:7d:
2b:1f:ce:00:35:64:a0:8f:e8:1a:f1:39:49:dd:26:
a3:b8:60:0e:1a:9b:cc:33:f4:25:ef:aa:d8:a1:59:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:49:72:B1:81:19:B9:9E:4A:21:03:EA:FC:82:83:1C:A3:34:7C:8C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6084::/48
Signature Algorithm: sha256WithRSAEncryption
2d:62:63:fa:76:3f:02:c6:75:58:88:30:e5:eb:89:40:4d:3c:
63:0b:90:23:1b:c1:78:26:41:49:c8:df:82:cb:1d:a9:85:a2:
a5:be:54:30:20:64:18:e6:fa:c8:99:5c:2f:df:68:4c:da:4b:
86:52:50:ea:5c:d4:6c:72:04:5b:6d:15:0e:fe:1a:4c:95:e8:
0e:2d:b8:52:50:cf:52:86:61:0f:75:f4:14:12:ec:01:4b:6f:
3e:a5:22:78:31:77:4c:e9:fb:2c:b9:5a:b4:c7:66:02:31:20:
3e:76:6d:ad:d6:aa:4f:12:d8:28:aa:a5:63:78:5a:eb:32:ed:
91:2d:ce:07:2f:92:e6:57:f7:ba:b9:83:04:69:6f:83:69:67:
79:9c:cc:cd:86:eb:53:42:27:0b:f2:dc:5b:e8:0d:0c:2b:c4:
80:27:f6:12:ad:4f:b1:7f:4d:de:96:66:28:23:d2:2c:a1:d1:
60:e1:ac:75:9f:c3:71:1e:23:41:c8:96:2d:6f:2b:76:19:9e:
3a:10:13:34:7f:66:e8:2e:58:f9:42:73:81:85:63:f5:63:9d:
93:ae:57:06:02:0a:54:8c:6e:9e:58:c4:e7:e8:55:e7:76:b7:
fb:ac:ba:ab:54:46:42:77:60:c4:76:aa:ba:3c:5d:48:e6:98:
d8:63:6f:2f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUcLqDIYwb/dKqVQ8Ugub4PTJwiy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTQ5NThaFw0yNjAzMDkxMTU0NThaMDMxMTAvBgNV
BAMTKDhCNDk3MkIxODExOUI5OUU0QTIxMDNFQUZDODI4MzFDQTMzNDdDOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4rnnMeLTASUJWYY2EQfCB8eq
dGniwOg4ngPLG93XhnxP9QgJI4KX4Ewc93iYa4NRUDR+Enu8cjxGb14s3CNIyZQe
WXFcYpWEroNGdiflUvvgEYDEILjPRq40//JPbVhyH3y/SbqDzNscO3q8VnBCn1MP
HOC5KHV/w4/nnk5IF0nAgtfmPj2Ej2GMOOpOrHvJIay1bGgmm4fD9o5nsT4XQhuL
PG8PwxWP8QhmISmiIIxMFPELYb/DbBiiIiWMn1rKoEX7aZVMFI7zmbVg+YM/A1xX
iRozh35jPvUy9ZBwfSsfzgA1ZKCP6BrxOUndJqO4YA4am8wz9CXvqtihWUTVAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUi0lysYEZuZ5KIQPq/IKDHKM0fIwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzODM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRghDAN
BgkqhkiG9w0BAQsFAAOCAQEALWJj+nY/AsZ1WIgw5euJQE08YwuQIxvBeCZBScjf
gssdqYWipb5UMCBkGOb6yJlcL99oTNpLhlJQ6lzUbHIEW20VDv4aTJXoDi24UlDP
UoZhD3X0FBLsAUtvPqUieDF3TOn7LLlatMdmAjEgPnZtrdaqTxLYKKqlY3ha6zLt
kS3OBy+S5lf3urmDBGlvg2lneZzMzYbrU0InC/LcW+gNDCvEgCf2Eq1PsX9N3pZm
KCPSLKHRYOGsdZ/DcR4jQciWLW8rdhmeOhATNH9m6C5Y+UJzgYVj9WOdk65XBgIK
VIxunljE5+hV53a3+6y6q1RGQndgxHaqujxdSOaY2GNvLw==
-----END CERTIFICATE-----
Generated at Sat May 10 10:07:48 2025 by rpki-client