Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663139623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663139623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 4cxRaR4/rDpNDA5Df2Df4XmYv68D0FTk+tXpmHfIAMA=
Subject key identifier: F2:E0:C6:28:7A:EE:A8:37:7A:96:B4:10:88:D3:D2:1C:DC:5A:76:9D
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 04C2B48F95F458F8CFDAA11A344271DFA757BA6B
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663139623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 13:22:09 +0000
ROA not before: Thu 26 Jun 2025 13:17:09 +0000
ROA not after: Thu 25 Jun 2026 13:22:09 +0000
asID: 396968
IP address blocks: 2a0f:6287:f19b::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 04:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c2:b4:8f:95:f4:58:f8:cf:da:a1:1a:34:42:71:df:a7:57:ba:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 13:17:09 2025 GMT
Not After : Jun 25 13:22:09 2026 GMT
Subject: CN=F2E0C6287AEEA8377A96B41088D3D21CDC5A769D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:b5:7d:ba:a6:6f:4d:cb:6a:04:83:8e:cb:
52:49:0d:a9:54:49:85:ff:d5:a6:7e:15:5b:0f:04:
fc:b2:b9:ea:1e:63:63:aa:00:0e:ca:a9:5b:03:cf:
13:72:3e:a9:2c:c8:ce:50:5a:91:68:e0:00:d6:fc:
92:35:69:9b:57:4c:ea:61:3e:d5:d4:b8:ec:ff:c3:
ac:2a:3f:06:65:53:9c:d2:71:41:a6:1a:4b:c0:a0:
9d:1d:fa:12:b9:03:97:31:88:24:56:12:79:eb:6e:
2d:2f:ab:6a:db:95:6d:32:b4:93:a3:86:b1:ae:3a:
86:c9:e6:21:d8:b3:5f:b6:0d:bd:55:5e:a4:0e:d4:
c2:fd:83:71:13:f7:17:f9:64:83:0a:47:2b:29:b8:
7f:85:82:77:e2:6e:83:5c:23:dd:b2:5a:ee:73:34:
0d:b6:1c:fa:15:d2:d6:ed:7b:e3:cc:8d:5d:a0:f8:
88:ca:fa:65:51:81:4e:98:84:40:69:b6:17:85:52:
64:71:23:38:f9:a9:96:ea:59:76:dc:03:be:68:80:
26:f7:4f:95:bd:f2:6b:46:e4:b3:ea:be:2e:cb:1e:
dd:94:e7:6f:fb:73:17:49:97:c2:38:22:b9:c7:9f:
a1:a0:0a:97:56:0f:56:3b:e1:91:d2:9a:54:d6:26:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:C6:28:7A:EE:A8:37:7A:96:B4:10:88:D3:D2:1C:DC:5A:76:9D
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663139623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f19b::/48
Signature Algorithm: sha256WithRSAEncryption
be:53:f2:84:f4:c2:f0:fc:c3:ff:21:e6:e4:27:e1:cc:27:02:
41:ed:13:90:cb:9d:02:11:60:55:ab:65:aa:4a:65:50:eb:87:
08:7f:79:7e:57:9a:95:25:bd:7f:30:1b:e2:76:8a:05:44:14:
60:99:14:ba:98:78:84:a9:4a:3f:f7:2e:a5:e3:44:ad:22:63:
9e:b9:34:1b:d0:8f:c5:d2:ca:41:90:9b:6f:d8:f2:08:b4:12:
5d:01:7e:0f:f3:bc:18:68:03:64:70:6b:7a:1a:c8:03:aa:a2:
41:97:d7:d6:d5:41:01:72:df:95:78:37:9e:54:01:8c:38:f7:
36:cc:86:24:f7:43:82:50:f9:af:76:43:64:dc:01:8e:27:b9:
01:19:9a:ab:72:14:e4:fe:79:8d:06:fb:a3:e9:d4:e3:78:32:
da:3b:d7:ca:28:94:fd:c5:17:25:0f:e8:2b:03:b6:53:d1:67:
e6:cc:07:db:ec:04:5a:98:3a:5f:29:eb:90:38:2c:1b:d7:12:
fa:cf:71:83:b8:dc:8d:43:4c:f5:25:42:ab:a7:e1:bb:f5:f1:
91:f5:f6:e6:d6:ff:6f:b0:78:78:61:0c:44:22:55:e9:1a:57:
1f:0f:6d:07:f9:a5:4d:35:2b:53:10:bc:a4:50:97:92:3c:62:
6b:3f:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:06:00 2025 by rpki-client