Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663265663a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663265663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: /QFXvgp+/NB5YacGNLfdsZBy0CuVEiOn9fY2ot1REKY=
Subject key identifier: 5B:90:BD:E3:99:AA:D6:E8:22:DD:D6:40:59:F6:44:F4:4E:F0:8E:A5
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 325D8D30075500BC57831D01F4076D802777AFBC
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663265663a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:21 +0000
ROA not before: Thu 26 Jun 2025 12:31:21 +0000
ROA not after: Thu 25 Jun 2026 12:36:21 +0000
asID: 396968
IP address blocks: 2a0f:6287:f2ef::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 03:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5d:8d:30:07:55:00:bc:57:83:1d:01:f4:07:6d:80:27:77:af:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:21 2025 GMT
Not After : Jun 25 12:36:21 2026 GMT
Subject: CN=5B90BDE399AAD6E822DDD64059F644F44EF08EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:ff:4f:26:3e:09:aa:85:9e:78:5a:ee:93:
75:52:d0:57:94:9b:2f:d9:88:32:77:d1:e9:49:0c:
e0:33:a5:d1:8b:43:b0:84:9d:82:0d:61:02:c7:bf:
be:fc:15:b8:c4:4b:bd:cb:09:86:eb:09:36:0d:a3:
fc:ac:04:00:77:b3:0d:ef:78:63:9f:18:bc:62:6f:
9e:de:46:35:a4:3b:f6:19:f5:b8:f9:7f:67:2e:44:
db:fc:2e:67:88:9e:36:cf:f1:90:45:90:ed:e0:97:
86:0b:85:38:57:6c:b7:29:68:41:e0:6a:17:22:59:
62:75:88:a7:46:f5:90:ea:4d:46:d1:47:d2:4e:e6:
2c:ab:8e:80:bd:c5:05:3c:d2:86:ec:37:b6:a6:3d:
c2:16:d3:75:1f:bf:43:65:13:bf:fd:72:4e:ef:86:
28:a7:2a:b6:4a:a0:bb:78:14:a1:52:f0:f1:b7:2f:
93:34:f1:7e:3f:98:09:79:26:68:36:2c:47:6a:cc:
5e:22:43:b7:b0:09:62:2a:52:83:e3:19:be:90:1a:
0d:e3:cd:32:53:3a:65:62:7c:76:b5:7b:a1:07:01:
ad:ba:ad:0e:0f:f8:a8:3b:0f:70:65:e4:96:a7:58:
6b:ea:cf:04:e2:9d:6a:1d:5a:e9:db:b4:ec:c2:c0:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:90:BD:E3:99:AA:D6:E8:22:DD:D6:40:59:F6:44:F4:4E:F0:8E:A5
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663265663a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f2ef::/48
Signature Algorithm: sha256WithRSAEncryption
78:84:23:9f:3f:3d:da:b8:5c:3a:74:11:ca:51:6b:e5:3b:77:
30:c9:03:e6:48:f9:46:62:68:b2:ed:73:ba:e9:31:30:0b:b3:
0f:dc:36:49:97:7d:4d:41:e8:48:c9:3f:96:48:98:57:4f:37:
2b:48:b1:2e:59:8e:7c:28:fa:61:e0:84:ea:92:ef:97:8d:b1:
5f:05:a1:92:a4:6d:5c:7e:54:ac:ff:6b:4c:de:8b:9c:03:89:
3c:ff:a5:2c:cd:af:b8:01:4d:9b:01:63:fc:3a:6f:97:25:2e:
f9:41:30:2c:20:32:65:16:56:20:ff:b7:6b:7e:b9:88:0b:3d:
1b:82:9d:94:76:6c:b0:1e:30:c6:85:30:eb:55:9f:e5:61:86:
a5:c8:04:7a:df:35:bb:6a:8b:46:81:52:ba:99:fb:69:14:80:
64:75:51:04:1e:75:0a:88:ff:10:07:f6:17:0f:6c:6e:65:a2:
02:b4:76:7d:56:f7:5f:54:87:b3:fb:49:90:a8:59:d5:65:62:
ab:4b:4b:07:f3:9b:f1:02:9d:12:d5:cd:35:7a:ae:db:c2:60:
8b:d3:26:63:69:e7:18:d1:8e:4b:a7:d1:bb:ad:66:ff:e0:eb:
6c:aa:15:72:27:a7:f5:e1:ff:20:0e:23:2b:44:a3:86:91:93:
23:e1:8f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:32:48 2025 by rpki-client