Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663263613a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663263613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: aX3a1ESfIwMJE2fRV0O+5ZVUgSaiDatLBSM4vc3zgt8=
Subject key identifier: DB:DD:15:86:4F:EE:06:75:D9:B2:BB:68:C1:47:E9:71:05:79:B6:04
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 542827DBC142FD1D220CCC3F1E9AE7BEB89CBEEC
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663263613a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:55:57 +0000
ROA not before: Thu 26 Jun 2025 12:50:57 +0000
ROA not after: Thu 25 Jun 2026 12:55:57 +0000
asID: 396968
IP address blocks: 2a0f:6287:f2ca::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 03:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:28:27:db:c1:42:fd:1d:22:0c:cc:3f:1e:9a:e7:be:b8:9c:be:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:50:57 2025 GMT
Not After : Jun 25 12:55:57 2026 GMT
Subject: CN=DBDD15864FEE0675D9B2BB68C147E9710579B604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:55:ef:70:a0:53:aa:3c:28:55:a0:a7:0e:
b6:11:73:09:45:5b:d7:0c:06:db:47:c1:11:36:4e:
4a:3d:c1:d2:4c:ce:0c:78:d2:08:e4:19:52:23:5d:
d3:c1:14:ec:b7:04:fc:98:d4:9f:0e:a0:01:13:30:
cd:df:5f:9d:8a:3a:69:46:72:55:6f:15:ce:df:09:
6e:cf:20:c7:3b:39:14:c7:20:d2:cb:df:74:be:7b:
8c:5e:44:d1:b9:db:c7:ec:92:5d:06:c3:ef:63:7e:
ad:a6:d3:0f:2d:fa:d1:81:11:3f:1b:0e:91:3c:9b:
c2:6a:8a:b7:c6:d1:8c:42:d8:56:7e:52:71:87:c3:
dc:00:24:75:0c:d7:df:ad:46:1c:39:57:0f:5c:cd:
b8:7b:34:88:93:b2:cf:db:40:3f:d7:08:68:b2:d4:
71:03:e5:2e:3f:ad:b2:28:4b:ac:c2:8c:1d:bb:e3:
a8:0b:10:e3:02:84:30:fb:0e:3e:f5:d7:c6:6c:56:
2e:b1:18:12:c4:38:ec:07:eb:36:80:1a:03:7e:09:
75:ed:2b:7f:e0:be:ca:e6:5a:f4:b3:73:1f:c6:8b:
1c:49:96:a8:2e:20:24:00:0d:20:ef:f8:3c:9a:da:
dc:0c:3b:77:b4:1c:0e:f8:be:d1:32:c6:e5:ab:90:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DD:15:86:4F:EE:06:75:D9:B2:BB:68:C1:47:E9:71:05:79:B6:04
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663263613a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f2ca::/48
Signature Algorithm: sha256WithRSAEncryption
32:b1:b4:f8:34:d2:f8:18:2d:fa:75:06:95:f8:2e:40:ab:f3:
22:46:aa:33:a4:e8:e5:3c:f7:cd:6e:2f:e0:cf:09:f9:9d:bd:
d5:a3:6e:a6:83:34:82:7d:28:cd:1e:eb:84:58:6c:ce:23:42:
b5:2e:1f:77:c3:85:2c:53:d2:28:51:37:c0:40:f9:fc:82:ce:
61:59:3a:fb:67:82:92:f4:9e:aa:70:ea:24:69:98:6a:98:e3:
d0:fc:76:28:ae:89:df:ac:00:19:a2:79:ef:98:a0:60:64:c7:
2a:55:a0:aa:63:64:81:89:f7:2d:af:b8:55:f6:3e:eb:76:f9:
4b:a9:02:70:59:b5:70:57:a8:3b:97:ed:a1:7d:7f:2a:49:ee:
92:b2:2c:c2:4f:3a:b6:44:5d:86:ed:9b:be:1c:7b:a4:50:67:
cd:99:0e:2c:63:59:8c:55:1b:88:75:08:c0:df:d0:f4:58:f4:
19:fb:45:94:d5:e2:84:fd:c0:31:01:3e:ee:2a:45:9c:cd:a0:
9d:09:48:e5:c2:f3:99:22:74:cf:73:14:38:e1:9b:e6:50:c6:
c2:5b:e4:a2:dd:5f:3d:41:ea:77:e9:c7:17:13:e9:74:65:45:
76:17:92:e2:b4:95:d6:c9:2f:34:fa:f3:0c:3d:be:fb:fa:6a:
37:6f:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:32:08 2025 by rpki-client