Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663266393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663266393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: G2miOCKKrymnC/SzW4o+/+Ax8x7D9Uqf66eTPg469+k=
Subject key identifier: 4D:EF:EC:F5:E0:CB:1D:B3:CA:37:4B:75:33:A8:02:9E:26:1F:5A:5C
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 56F748C7E6031BBA61EBFEC35CE00F7345DBB59D
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663266393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 13:25:00 +0000
ROA not before: Thu 26 Jun 2025 13:20:00 +0000
ROA not after: Thu 25 Jun 2026 13:25:00 +0000
asID: 396968
IP address blocks: 2a0f:6287:f2f9::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 17:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f7:48:c7:e6:03:1b:ba:61:eb:fe:c3:5c:e0:0f:73:45:db:b5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 13:20:00 2025 GMT
Not After : Jun 25 13:25:00 2026 GMT
Subject: CN=4DEFECF5E0CB1DB3CA374B7533A8029E261F5A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:5c:51:87:38:81:52:f0:81:af:dc:08:f3:
5e:d8:02:04:3f:48:97:6c:c4:b2:25:ab:06:10:d4:
02:18:77:6b:aa:08:ef:e8:16:e9:27:23:18:c9:2c:
d2:24:73:84:a2:65:ac:15:1d:83:78:ae:26:ac:89:
ed:d8:62:2e:d5:dc:2d:c6:3d:a3:1f:ef:21:79:15:
fd:b9:73:1e:46:54:f0:f9:eb:05:00:25:71:1d:ae:
ac:8f:69:9c:c2:fc:ca:b6:d2:b5:df:53:3a:57:76:
80:5c:b3:1d:53:28:81:a1:83:bf:cd:5d:79:f7:bf:
11:ad:d5:de:5a:f7:3c:b4:5b:20:d7:b8:06:4a:25:
65:96:35:c7:9f:be:1d:a7:c5:1b:1d:6f:f9:fc:90:
d5:81:0d:13:a4:19:84:e9:27:fb:96:85:f6:0c:ab:
26:d0:ed:a4:69:92:61:92:88:d1:f5:15:41:7c:d1:
4d:50:fe:cf:bb:e3:3d:af:a4:bf:80:29:0f:5a:68:
d2:6b:d6:94:dd:b2:a3:e0:ae:48:45:f7:4f:d8:1c:
32:6d:6a:66:09:5f:7b:ce:39:ea:98:34:c5:64:1c:
23:4e:02:0c:59:9f:97:46:35:bb:44:37:94:29:24:
18:d1:f7:9a:b4:96:cf:e0:59:7c:58:5b:e4:e1:0f:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EF:EC:F5:E0:CB:1D:B3:CA:37:4B:75:33:A8:02:9E:26:1F:5A:5C
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663266393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f2f9::/48
Signature Algorithm: sha256WithRSAEncryption
18:93:b4:05:5a:52:77:f4:b3:ca:24:95:bc:ab:1e:57:a0:5a:
89:6d:13:09:49:34:5e:f0:40:5d:dd:13:07:ef:6d:bd:cc:c2:
b1:6e:16:9e:ea:dd:98:d2:12:9e:73:30:5d:dc:26:07:b4:c5:
f9:2a:36:e9:51:84:ff:15:4f:a6:0a:9b:b5:08:02:e9:35:b2:
5c:78:13:65:86:f8:7a:d7:15:43:7f:e6:e8:b7:18:3e:63:43:
9c:ee:a7:a0:37:78:5c:73:64:e5:24:d0:dc:55:d9:4c:c2:6e:
5a:de:58:a4:e6:69:cc:2f:84:e7:04:7b:7a:bb:15:97:7b:d3:
9e:07:fa:60:e0:91:f6:0d:a8:dc:e9:00:f8:0e:c7:c9:63:cf:
e2:fb:ae:60:47:ae:da:fc:0e:49:d3:b5:f2:59:73:f5:5c:84:
a1:52:8c:85:af:2c:11:5c:8c:9c:87:0a:29:c1:dd:bb:34:7e:
fe:02:a0:17:3b:fa:8d:dc:9b:2c:d6:a0:ce:16:99:c2:9d:c8:
e2:09:1d:7d:4a:6a:0c:21:b9:03:35:dd:91:27:2b:15:01:72:
ac:7e:3f:5d:cf:65:e2:62:cc:74:0a:34:c9:f3:93:67:d8:ff:
7e:69:56:7c:df:e1:ef:a4:34:7a:6f:2b:d0:e2:a0:30:63:70:
b7:3b:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:41:53 2025 by rpki-client