Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663232303a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663232303a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: VGPD2FsJYzR8D6/q3HU0ieBK+F2Ivu9Hw/vTl8T9tds=
Subject key identifier: BD:6F:15:25:4B:8B:6E:AB:46:B9:39:BE:DA:B8:5F:25:B9:03:58:DE
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 142350A819917AB3763D74D2FD90C861FC70CE13
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663232303a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:19 +0000
ROA not before: Thu 26 Jun 2025 12:31:19 +0000
ROA not after: Thu 25 Jun 2026 12:36:19 +0000
asID: 396968
IP address blocks: 2a0f:6287:f220::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 03:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:23:50:a8:19:91:7a:b3:76:3d:74:d2:fd:90:c8:61:fc:70:ce:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:19 2025 GMT
Not After : Jun 25 12:36:19 2026 GMT
Subject: CN=BD6F15254B8B6EAB46B939BEDAB85F25B90358DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fb:97:6f:dc:ec:a5:fc:d5:8b:88:09:70:42:
4f:b4:fd:c0:e9:aa:38:d9:58:a1:89:86:44:f6:24:
83:12:85:55:22:01:8e:27:51:a7:47:3f:5d:a5:8b:
df:8d:8d:c2:f8:9f:bd:4e:12:fb:31:a0:b0:89:40:
91:b3:7c:95:c9:47:ac:8e:52:e9:47:d1:fd:26:5e:
3d:a1:45:9d:04:8f:93:59:d3:25:be:50:1b:9f:d2:
db:62:a1:39:81:c0:b9:0d:ec:4b:79:28:62:40:f8:
85:22:37:75:27:3d:c3:00:2e:22:12:04:b3:60:3b:
29:d9:67:28:1f:1b:e3:25:d3:85:6b:33:be:de:b8:
77:0b:1d:90:c9:17:7d:85:65:db:17:36:53:03:39:
6d:c1:30:fa:dd:57:28:ee:62:cd:4b:df:00:c7:b4:
fb:22:d7:fd:61:6a:33:ec:ff:67:a5:3b:8e:f1:aa:
da:8f:c6:f8:b4:46:1c:12:09:40:55:c1:5d:65:a7:
84:20:7b:76:88:b6:9f:ec:b2:d3:ad:f7:44:85:da:
63:56:dd:5d:af:3d:3a:93:f0:dd:8d:22:41:b8:7c:
28:80:42:a2:5d:e2:f3:c6:d8:75:c5:ce:2b:09:ac:
54:8a:cf:60:26:ac:22:ae:61:88:18:cd:9f:d3:cf:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:15:25:4B:8B:6E:AB:46:B9:39:BE:DA:B8:5F:25:B9:03:58:DE
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663232303a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f220::/48
Signature Algorithm: sha256WithRSAEncryption
a1:39:59:d4:58:d3:b2:04:7b:a1:18:2e:5a:65:6b:23:0e:31:
80:43:78:29:66:89:15:65:61:61:f7:2b:f0:3e:b0:82:3c:d5:
cc:d2:da:a2:64:92:87:f0:e5:ef:1a:2d:d8:6c:75:d7:3b:54:
ea:85:9a:13:a2:53:10:aa:80:eb:ae:f8:d9:69:88:01:81:d7:
d4:11:33:65:c0:d2:35:59:70:d1:c4:42:21:0c:23:c6:e7:8e:
17:97:9a:75:d7:0e:3e:a8:f1:ee:d2:17:fe:e0:28:e2:c1:65:
ae:38:2e:3f:96:a8:6d:5e:73:e4:16:15:9f:bc:8c:25:dc:80:
85:9e:16:97:85:de:a4:49:94:41:a9:ca:1b:c2:20:50:03:83:
0a:e9:ad:e9:66:b8:f8:10:03:d9:1d:d8:18:24:6d:fd:a9:68:
64:3f:2c:b5:9b:40:b3:99:9b:3b:cf:f3:be:ec:44:82:1c:0c:
8d:fc:e1:c1:aa:90:49:4c:51:50:47:b5:ac:bd:02:99:59:be:
d9:12:e0:8d:51:bf:33:c0:e0:1f:2a:a5:8f:fe:51:15:97:0a:
92:f5:ee:23:ea:4f:17:0b:ee:9e:ac:e5:8d:a9:d9:1b:ae:d7:
0e:f2:4a:e1:d3:91:8f:f5:82:cd:80:d8:12:b9:82:7d:6c:72:
2f:20:6d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:24:41 2025 by rpki-client