Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663361613a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663361613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: jipZf/T8c43JU5pczGB8bYjTQ7jYwPWiPlYlZ8x3Fio=
Subject key identifier: 2D:3D:77:8A:2B:9F:F4:5F:10:79:68:E1:7C:C4:6F:C7:6B:D1:8C:A5
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 44AF12D0B4716FB17D4B9364D307795B5AA408FD
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663361613a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:37:34 +0000
ROA not before: Thu 26 Jun 2025 12:32:34 +0000
ROA not after: Thu 25 Jun 2026 12:37:34 +0000
asID: 396968
IP address blocks: 2a0f:6287:f3aa::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 17:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:af:12:d0:b4:71:6f:b1:7d:4b:93:64:d3:07:79:5b:5a:a4:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:32:34 2025 GMT
Not After : Jun 25 12:37:34 2026 GMT
Subject: CN=2D3D778A2B9FF45F107968E17CC46FC76BD18CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:5d:c0:a4:19:1d:ab:63:de:8d:37:38:3f:
d4:6f:92:14:8a:18:be:38:8b:c4:3a:af:c1:a3:ae:
9c:9a:82:6d:ee:83:33:c4:3f:e2:2f:13:5c:26:4c:
2f:48:f6:7b:d0:64:5e:ed:dd:cd:f4:0a:e5:47:fe:
47:43:6c:6c:a2:5d:d7:36:1e:8b:c5:ba:5b:0f:d3:
18:a2:73:cf:b1:a0:2f:a2:c3:50:34:fc:a0:f6:42:
f2:ae:f0:bb:94:41:2f:d7:df:34:f2:32:3a:fd:74:
35:e6:84:55:2e:4d:1c:be:61:87:ad:20:f1:67:50:
1b:6a:37:ee:43:71:34:0f:bc:8a:71:74:67:59:66:
c2:de:32:38:e5:de:9a:26:3b:c5:5b:c3:b5:a6:be:
e6:52:92:91:b3:cf:ae:d6:00:7f:f6:79:ae:7e:22:
c9:3f:d5:02:8a:aa:21:be:4b:f9:09:65:4c:03:bd:
9c:be:0d:e1:f7:b3:92:e8:b0:21:73:2f:cb:8c:ab:
5d:78:4b:df:ed:f4:f4:35:1a:5f:c3:4c:a7:ec:94:
e3:c6:ff:f6:35:f6:29:e6:6b:30:79:5f:a7:e8:dc:
d9:59:d0:d7:6e:a5:26:76:8c:0d:15:9a:3e:ca:3a:
40:21:28:36:59:fa:c4:e3:c1:14:1d:27:d7:78:28:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3D:77:8A:2B:9F:F4:5F:10:79:68:E1:7C:C4:6F:C7:6B:D1:8C:A5
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663361613a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f3aa::/48
Signature Algorithm: sha256WithRSAEncryption
10:63:46:46:1f:7a:af:80:0b:37:32:00:de:e4:25:5b:bf:26:
1a:75:99:0a:45:0d:e1:37:b5:eb:60:d4:94:36:5a:8d:ab:df:
49:78:5d:93:a6:ce:f7:2b:38:af:6a:c0:2e:10:a0:7a:f5:88:
b4:cc:ef:c9:71:8d:cd:44:be:3a:47:3e:5e:c9:ae:e0:54:4e:
ce:da:a6:2f:71:8f:ad:91:46:a4:1f:a8:82:f2:9c:c2:ae:9f:
2a:74:2b:d9:c1:82:0a:78:34:fa:c4:0a:38:97:73:77:67:0a:
7d:6d:61:62:5c:24:48:d5:a3:86:49:d1:e4:23:30:ca:53:7e:
49:e7:6d:0b:04:83:7d:97:6a:b2:6d:15:5e:59:5b:a7:c8:98:
52:d5:09:9d:83:2e:38:fa:f8:d6:6b:d4:9a:82:33:4f:58:01:
a8:df:40:c8:00:91:60:31:d6:59:a9:da:67:a7:7c:c3:bb:2c:
49:a9:c3:8f:c9:87:4a:ea:c1:6b:b5:44:4e:dd:a9:85:8c:d0:
11:ff:07:b9:72:65:a1:26:69:9a:5f:65:af:ef:29:02:aa:40:
98:f5:53:7a:7e:88:6e:be:24:7e:de:46:40:b3:7d:04:92:fd:
4b:b5:48:c6:d6:a5:c4:09:11:14:85:b6:df:5a:ff:e0:9d:29:
17:db:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:12:44 2025 by rpki-client