Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663033363a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663033363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: hq8b8W7blNjiN8WFqIyYdSoea8uexW2ULZqHPePM+is=
Subject key identifier: 4B:D1:1F:88:E9:AA:0F:59:21:F0:FE:55:36:CB:08:3D:2F:71:FD:E3
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 3BE1A5462F7469A62114AD8B95D6DBE9C40C5519
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663033363a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 13:22:09 +0000
ROA not before: Thu 26 Jun 2025 13:17:09 +0000
ROA not after: Thu 25 Jun 2026 13:22:09 +0000
asID: 396968
IP address blocks: 2a0f:6287:f036::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 17:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e1:a5:46:2f:74:69:a6:21:14:ad:8b:95:d6:db:e9:c4:0c:55:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 13:17:09 2025 GMT
Not After : Jun 25 13:22:09 2026 GMT
Subject: CN=4BD11F88E9AA0F5921F0FE5536CB083D2F71FDE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:01:9d:1b:dc:66:6f:d4:d2:6e:57:61:6d:
bd:28:72:f4:ae:96:df:da:1d:99:ba:7b:3c:88:a4:
bc:b7:db:d3:0d:73:cb:df:ff:8a:ed:5b:77:75:a6:
99:dd:27:f8:83:8b:9d:84:32:c2:94:0e:80:85:18:
69:ea:e9:0b:41:42:e4:21:54:16:70:26:d6:6f:1e:
33:8b:56:d4:45:e3:2a:12:d9:9a:b9:ba:01:72:ba:
93:77:de:c2:e3:7c:c9:72:1c:cc:cc:ff:20:72:e2:
56:85:91:e5:46:e3:12:3e:0c:f5:60:fd:45:b4:e1:
6f:70:38:ef:0e:05:7e:73:08:12:5d:cf:09:fd:6f:
ba:27:42:5d:a1:74:4b:0e:e4:11:91:fe:76:c3:ab:
f0:ca:86:d9:4d:d1:b6:ec:53:fd:28:bf:b0:8b:2a:
42:93:29:e0:61:33:d1:24:34:e2:3b:15:91:3f:48:
51:46:77:46:6b:fa:39:e1:3f:c3:ca:6b:e9:21:9d:
3e:e8:9a:bb:27:d2:a3:7d:31:c4:0d:15:02:b1:50:
df:7b:9c:ff:0d:82:96:9d:5f:99:ca:a8:2f:4a:8d:
1a:6c:06:c5:2d:a9:c9:64:6c:7c:ad:c6:63:48:df:
9d:99:42:44:4e:b3:87:7c:1d:4c:31:2b:ba:8e:d3:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D1:1F:88:E9:AA:0F:59:21:F0:FE:55:36:CB:08:3D:2F:71:FD:E3
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663033363a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f036::/48
Signature Algorithm: sha256WithRSAEncryption
73:92:6f:87:9e:27:78:31:32:a7:54:82:30:e7:3f:e1:d6:0a:
21:e8:c7:94:13:ee:19:34:df:09:8e:62:40:43:bb:9b:d6:5e:
90:fc:7f:ed:67:b0:89:36:aa:89:f7:cf:a2:18:2f:f1:e2:22:
ef:af:c7:98:41:c4:3c:5d:e0:8c:80:77:fa:78:10:bc:39:a5:
bf:de:c7:2b:39:08:1d:14:90:43:9b:ea:a1:69:f3:dd:16:23:
3b:8a:ef:b7:55:4b:28:3e:65:9a:b6:65:c7:0e:bf:2a:40:b3:
0a:ae:15:ca:69:88:6e:44:c6:a4:e6:0e:8e:66:e4:78:ab:9d:
54:1a:30:ca:54:bf:8b:4a:aa:49:8d:e8:a5:79:da:75:bb:aa:
89:27:0e:8d:04:0b:96:1b:41:a5:06:12:6b:2f:94:43:82:da:
89:2f:18:7f:09:45:b9:a0:d3:a0:23:9d:6a:81:46:14:76:19:
a5:52:0c:6d:75:5a:bc:dc:1f:dc:7b:c5:e9:c7:95:4d:74:50:
8e:72:7f:36:e6:2d:14:59:10:64:4a:bd:d3:dd:7e:73:c9:5b:
14:8e:aa:be:ee:12:56:0c:a1:b0:e1:4b:62:be:0d:8d:d6:c9:
a0:b2:41:34:f9:11:19:fc:43:ab:b5:54:4e:83:7a:ad:f3:3c:
88:6b:31:22
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUO+GlRi90aaYhFK2Lldbb6cQMVRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA2MjYxMzE3MDlaFw0yNjA2MjUxMzIyMDlaMDMxMTAvBgNV
BAMTKDRCRDExRjg4RTlBQTBGNTkyMUYwRkU1NTM2Q0IwODNEMkY3MUZERTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GwGdG9xmb9TSbldhbb0ocvSu
lt/aHZm6ezyIpLy329MNc8vf/4rtW3d1ppndJ/iDi52EMsKUDoCFGGnq6QtBQuQh
VBZwJtZvHjOLVtRF4yoS2Zq5ugFyupN33sLjfMlyHMzM/yBy4laFkeVG4xI+DPVg
/UW04W9wOO8OBX5zCBJdzwn9b7onQl2hdEsO5BGR/nbDq/DKhtlN0bbsU/0ov7CL
KkKTKeBhM9EkNOI7FZE/SFFGd0Zr+jnhP8PKa+khnT7omrsn0qN9McQNFQKxUN97
nP8NgpadX5nKqC9KjRpsBsUtqclkbHytxmNI352ZQkROs4d8HUwxK7qO0+aRAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUS9EfiOmqD1kh8P5VNssIPS9x/eMwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzAzMzM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/A2
MA0GCSqGSIb3DQEBCwUAA4IBAQBzkm+Hnid4MTKnVIIw5z/h1goh6MeUE+4ZNN8J
jmJAQ7ub1l6Q/H/tZ7CJNqqJ98+iGC/x4iLvr8eYQcQ8XeCMgHf6eBC8OaW/3scr
OQgdFJBDm+qhafPdFiM7iu+3VUsoPmWatmXHDr8qQLMKrhXKaYhuRMak5g6OZuR4
q51UGjDKVL+LSqpJjeiledp1u6qJJw6NBAuWG0GlBhJrL5RDgtqJLxh/CUW5oNOg
I51qgUYUdhmlUgxtdVq83B/ce8Xpx5VNdFCOcn825i0UWRBkSr3T3X5zyVsUjqq+
7hJWDKGw4Utivg2N1smgskE0+REZ/EOrtVROg3qt8zyIazEi
-----END CERTIFICATE-----
Generated at Wed Jul 2 06:15:20 2025 by rpki-client