Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663536643a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663536643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 0MC4tqwEpbEfUKjjr1aDVqvY9Olv9Zkaj1yznSp2c1w=
Subject key identifier: B7:64:1F:E3:11:40:56:E2:3A:E0:3C:26:64:5C:51:91:67:39:F3:EA
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 16828698F0DF101C03109972A861FF08222F45E4
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663536643a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 13:22:15 +0000
ROA not before: Thu 26 Jun 2025 13:17:15 +0000
ROA not after: Thu 25 Jun 2026 13:22:15 +0000
asID: 396968
IP address blocks: 2a0f:6287:f56d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 04:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:82:86:98:f0:df:10:1c:03:10:99:72:a8:61:ff:08:22:2f:45:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 13:17:15 2025 GMT
Not After : Jun 25 13:22:15 2026 GMT
Subject: CN=B7641FE3114056E23AE03C26645C51916739F3EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4a:49:2e:5a:ef:6b:c2:17:0b:9c:81:40:cf:
c2:30:df:27:9f:f9:d6:b2:c3:7f:c8:b8:6f:29:6e:
28:b0:03:51:c1:a7:07:a1:69:5b:c5:05:16:2d:67:
04:22:71:97:da:a3:a8:b1:09:25:79:00:27:e0:bd:
24:14:3d:0e:0a:7c:42:61:22:2d:5f:7a:1a:a9:47:
49:f0:2c:1a:01:a1:17:f4:10:6f:ed:74:d7:83:3a:
e7:a2:a5:b1:58:51:52:e6:f0:8e:8d:d1:97:2e:61:
01:4d:75:fb:2f:a6:6e:6a:6a:ff:f2:db:d9:03:b8:
0e:d0:d6:b8:88:4b:42:3f:3b:13:d2:d3:71:f6:27:
2a:9f:56:93:17:f6:65:26:2a:ac:38:4e:4a:06:56:
44:6f:6e:63:da:ec:bf:d4:70:20:c1:59:57:9a:6a:
b8:65:86:bf:35:6a:c9:49:96:85:7f:4b:dc:4b:c4:
6d:33:0e:95:8d:d7:0f:ca:8e:a0:85:24:03:43:17:
fb:10:70:6d:1f:5b:34:21:19:41:74:6d:20:6e:3a:
a0:48:9e:22:24:09:55:f4:4c:9b:de:8c:02:66:02:
a5:75:7d:73:6f:e7:69:4c:46:d8:98:93:dc:24:7b:
b0:a3:9c:be:c2:93:6d:e1:fb:0b:8d:7c:1d:da:94:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:64:1F:E3:11:40:56:E2:3A:E0:3C:26:64:5C:51:91:67:39:F3:EA
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663536643a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f56d::/48
Signature Algorithm: sha256WithRSAEncryption
a7:8e:d6:72:78:6a:b5:73:78:31:59:d0:e0:c4:98:5d:13:15:
05:61:07:c4:3b:38:30:5d:3f:a5:19:3e:99:39:65:f5:30:bb:
22:d2:88:4a:b9:59:2f:3b:d6:70:fb:36:6e:59:d8:9e:a0:02:
f3:45:f6:de:8f:b2:29:38:df:1b:89:06:b6:df:41:08:d3:26:
42:0f:cb:b0:15:df:68:d6:ce:df:44:8e:a7:96:6c:39:b9:39:
1f:c1:98:66:b6:9a:bc:eb:b2:f3:7a:3e:66:9e:4e:00:fa:d0:
95:65:72:03:8e:21:e2:52:63:ae:09:45:50:a3:a5:cc:fd:77:
3c:94:9d:96:75:07:8e:e9:18:a1:9f:df:64:0e:24:67:8f:ba:
40:10:80:a5:6e:8d:80:bb:d8:10:bc:1c:b6:a0:1d:2c:c5:5d:
4b:b4:ed:d6:f9:01:57:2b:f8:a7:86:27:7f:bb:48:12:48:8d:
23:5d:f7:1d:ed:f7:41:13:05:14:9e:c7:62:14:33:36:46:f1:
39:ca:2c:b7:bc:2e:9e:a6:42:ce:b9:07:34:e4:82:67:ff:41:
72:1b:ce:73:2e:ba:32:b4:5b:2d:0c:07:9b:55:bb:5f:ab:fb:
17:76:51:62:1c:b9:22:87:8a:20:91:07:bb:56:c1:b8:49:9c:
7f:34:18:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:40:06 2025 by rpki-client