Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663062663a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663062663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: baWglhTwWHGBgTxzZ9bkEepEYWxoBpCshX0mKV9FbI0=
Subject key identifier: 27:8F:36:97:9B:51:C4:C3:AD:89:47:D0:4D:C3:3F:8A:28:DD:B9:28
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 2D396626DDE2810F22EF787C4E6DBE2155EAC7AC
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663062663a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:20 +0000
ROA not before: Thu 26 Jun 2025 12:31:20 +0000
ROA not after: Thu 25 Jun 2026 12:36:20 +0000
asID: 396968
IP address blocks: 2a0f:6287:f0bf::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 08:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:39:66:26:dd:e2:81:0f:22:ef:78:7c:4e:6d:be:21:55:ea:c7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:20 2025 GMT
Not After : Jun 25 12:36:20 2026 GMT
Subject: CN=278F36979B51C4C3AD8947D04DC33F8A28DDB928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:44:3b:fe:ad:4d:fd:c4:86:ea:77:90:56:
fb:a3:bb:34:54:44:40:f9:1b:a1:e2:09:cb:ad:a2:
cd:2b:7b:6e:21:fd:91:67:8b:65:5d:fa:8f:42:9b:
b2:9e:2c:dc:64:1c:cc:5a:83:14:8d:ad:81:f9:b4:
bc:e8:04:2b:21:3a:e1:6b:a3:44:f6:b3:7b:3b:b5:
bd:37:d5:48:18:04:34:eb:70:bb:70:1e:02:2b:ab:
28:ad:e3:30:81:27:8d:82:85:cc:e2:32:7a:ca:eb:
6a:d4:cc:04:09:8c:d4:fc:62:ee:e4:3a:98:da:eb:
8b:e3:77:27:52:e7:81:92:d0:9f:5f:e2:24:da:e8:
ca:c1:f7:64:88:d7:30:27:8f:b0:61:e1:ff:cc:b4:
9c:31:36:a7:35:2f:9f:a8:01:af:63:bc:4a:9b:cd:
7d:d8:9e:fe:74:72:7a:4e:bb:a4:07:04:a7:91:77:
a6:ef:2a:ff:5e:e6:23:bc:b8:ac:fe:b3:24:ce:4b:
11:34:02:33:da:56:ab:8b:3e:0f:1e:78:4e:be:0b:
3d:54:9f:57:3e:91:8c:80:86:54:86:c2:f1:0f:72:
20:05:07:71:db:70:c7:d0:fb:3a:1a:f4:b5:c1:46:
17:ea:e8:54:ef:cc:2e:86:e6:e7:c9:c0:cb:93:03:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8F:36:97:9B:51:C4:C3:AD:89:47:D0:4D:C3:3F:8A:28:DD:B9:28
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663062663a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f0bf::/48
Signature Algorithm: sha256WithRSAEncryption
5e:cf:48:59:bf:4c:1c:4d:cd:2b:c4:27:57:a9:16:17:bc:e9:
7d:47:ec:55:59:20:f3:9a:be:81:46:07:7c:52:a0:8a:e0:be:
6d:7a:a9:8c:ed:7a:52:aa:22:5f:e8:fb:d2:43:7c:0c:cc:33:
b4:6f:a9:60:ad:2f:35:ab:e3:32:df:39:62:e6:fa:b3:32:c9:
66:6f:81:b3:22:86:b1:56:5b:e8:b4:ca:c2:0f:10:53:b6:e5:
c2:d4:b8:9b:c2:c6:09:c5:dd:ce:04:03:28:04:fe:29:62:d9:
06:4c:54:37:9b:4c:92:77:43:14:3e:c3:16:92:33:0b:a8:6d:
76:14:29:cf:86:bb:98:26:cb:3f:5b:46:17:fe:94:cb:73:3d:
01:1b:08:91:9c:39:71:48:fb:96:6c:d5:ce:ba:10:46:e0:0a:
f6:4a:08:6e:8e:ac:4e:ed:ba:a9:4c:aa:5c:40:63:2a:ee:a7:
4f:ab:6c:f2:83:b9:08:08:fa:ae:f7:8c:e5:c9:95:ca:51:48:
cf:e4:48:2d:f2:b5:8a:b5:39:e9:8f:e5:00:d9:2b:af:e6:8c:
36:b9:68:6b:03:86:be:3a:41:c8:ce:9d:24:eb:64:7e:94:ad:
95:7d:a8:52:0d:37:3c:c9:39:48:d7:e1:6f:68:81:68:34:1d:
c1:31:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:21:50 2025 by rpki-client