Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62303a3a2f34362d3438203d3e20323134303739.roa
File: 326130623a346530373a62303a3a2f34362d3438203d3e20323134303739.roa (raw, json)
Hash identifier: oexd0/K8wImOaB7F+nrBAgmFxlmOYJWPggAnOI7wwcM=
Subject key identifier: 4A:F5:DA:F4:15:2D:A9:72:13:E4:78:39:9B:D0:0C:3F:D2:F7:07:A4
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 3982B6E87B81B8AB478462AA7EDB804690AD055A
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62303a3a2f34362d3438203d3e20323134303739.roa
Signing time: Tue 06 May 2025 10:45:07 +0000
ROA not before: Tue 06 May 2025 10:40:07 +0000
ROA not after: Tue 05 May 2026 10:45:07 +0000
asID: 214079
IP address blocks: 2a0b:4e07:b0::/46 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 May 2025 20:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:82:b6:e8:7b:81:b8:ab:47:84:62:aa:7e:db:80:46:90:ad:05:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: May 6 10:40:07 2025 GMT
Not After : May 5 10:45:07 2026 GMT
Subject: CN=4AF5DAF4152DA97213E478399BD00C3FD2F707A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:60:91:da:22:6a:9a:99:9d:db:49:ae:29:
6e:4b:b2:ed:39:95:b8:1b:42:61:ed:d8:3e:36:73:
c0:d6:c6:1f:41:e5:5c:8b:29:5c:7b:98:f0:3e:1e:
aa:2a:ea:aa:2a:ec:f6:bb:80:57:8e:c9:31:15:14:
33:f0:87:1d:70:90:30:ed:9d:d5:37:e0:fb:ab:ac:
09:ed:f5:83:69:59:10:0d:68:b3:82:82:87:24:5d:
41:9f:bd:59:96:31:c4:5b:3b:0e:08:25:9f:9a:eb:
db:b4:0c:51:d5:c0:c5:cb:6a:eb:8e:67:00:0a:63:
0a:ed:94:07:7a:72:6c:d5:7d:54:50:61:70:22:d7:
cf:87:df:36:79:7f:48:65:3c:a9:43:fd:f7:ba:36:
91:f4:e1:2a:5a:90:fd:75:b0:99:9e:d1:4b:a1:e0:
10:88:ca:f0:1b:13:25:08:e3:a2:14:9e:dc:d1:3d:
8e:47:25:20:6a:ab:c9:1e:20:a0:86:e4:18:cf:e9:
0f:8c:c7:6a:a4:fc:6c:14:4b:53:d0:de:46:73:a9:
8a:90:67:d8:4c:b5:a3:cc:fc:52:bf:b0:e6:65:1a:
02:86:81:f3:d0:a1:7c:49:7a:ab:8f:55:64:a1:85:
f9:ea:91:6f:cd:98:f3:90:80:bb:16:3e:6e:86:9a:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F5:DA:F4:15:2D:A9:72:13:E4:78:39:9B:D0:0C:3F:D2:F7:07:A4
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62303a3a2f34362d3438203d3e20323134303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:b0::/46
Signature Algorithm: sha256WithRSAEncryption
1a:73:37:b6:45:9f:88:1c:8d:5e:28:31:63:6e:6a:85:14:43:
53:e0:16:1d:b2:2b:c8:bc:97:c7:16:a7:d2:56:82:21:f6:9f:
9c:73:25:38:d6:49:23:51:73:df:5a:d9:c8:d6:58:f3:46:bb:
9b:26:99:8d:f7:35:0b:84:1f:97:d0:b6:37:16:98:71:8d:ac:
eb:1f:88:65:50:45:f3:0f:56:52:3f:d9:03:87:74:a5:85:40:
b0:01:b1:89:19:67:b2:ed:86:91:0d:0c:9c:f9:8d:ff:54:f5:
7c:a4:78:6f:73:bd:06:1e:8e:d7:e5:c2:ff:41:aa:6c:57:2b:
99:80:9c:49:5c:ba:5b:69:d2:ee:d5:58:dd:36:eb:0e:1b:69:
89:e9:1c:dd:98:2d:df:13:18:ce:3b:db:0c:0a:4f:c8:38:54:
e0:7a:2c:72:d5:1c:7f:e6:7a:ea:70:dc:38:a2:78:b3:19:53:
23:99:37:d8:14:3f:60:0e:dd:39:89:96:7d:99:c3:92:84:4c:
64:28:79:28:cd:f1:4e:a0:43:92:b6:bb:33:1b:86:87:9e:96:
b2:d7:56:40:f3:fd:97:65:a6:38:ff:b2:6d:e5:d5:ad:d1:69:
01:29:b7:03:0a:2c:e8:53:dd:cc:bc:2b:28:2b:39:eb:4a:3d:
d1:be:ee:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:27:55 2025 by rpki-client