Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663561393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663561393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: lcD4AlX70hvi6sHgBFpzfSz6Hgapc+4htXO/grV1ZQo=
Subject key identifier: C6:A7:2E:9A:38:E3:50:33:47:DC:54:7C:B9:EA:1C:99:96:96:8E:97
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 748E159D4DB6C5BB3D591C6BADEB699FAB31596F
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663561393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 13:24:59 +0000
ROA not before: Thu 26 Jun 2025 13:19:59 +0000
ROA not after: Thu 25 Jun 2026 13:24:59 +0000
asID: 396968
IP address blocks: 2a0f:6287:f5a9::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 17:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:8e:15:9d:4d:b6:c5:bb:3d:59:1c:6b:ad:eb:69:9f:ab:31:59:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 13:19:59 2025 GMT
Not After : Jun 25 13:24:59 2026 GMT
Subject: CN=C6A72E9A38E3503347DC547CB9EA1C9996968E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:df:4f:91:ee:ce:62:e6:c2:14:6d:80:3c:
86:9c:31:67:85:e4:ad:cd:e5:cd:ae:71:12:56:40:
b5:ad:7b:7b:ac:fb:46:b1:6d:cf:16:a0:b1:65:8a:
27:ab:38:58:67:44:1a:96:45:a8:5d:8e:d1:f6:1b:
98:19:05:d3:65:88:d5:23:d5:02:0a:0b:2d:42:3d:
d3:71:ed:62:a8:1d:b0:47:7a:83:a3:d0:b2:76:34:
58:80:06:ff:c8:09:c5:c1:f7:81:3c:9b:ad:be:02:
e3:2e:49:06:26:07:25:8d:52:46:a0:75:12:d0:84:
22:2b:a8:b2:64:5b:28:40:9a:79:59:72:1e:aa:c2:
6d:25:c6:6a:6b:0b:44:df:5c:5d:29:5b:04:d7:9f:
fa:5a:de:85:0d:5a:2e:c4:7c:ee:e4:3b:66:9d:18:
3b:dc:23:3f:a8:36:5d:3e:f4:82:a8:70:cb:cc:d8:
7c:7a:d7:98:6d:47:7f:97:2c:71:ee:73:00:67:cf:
21:3e:3f:c0:18:2b:fc:0e:a8:7c:38:62:e7:c9:38:
d6:ec:c1:26:b7:a2:d4:d6:d5:a5:eb:09:79:e7:4a:
f8:34:f2:0a:2d:cf:49:56:99:65:bb:cc:bd:54:93:
a9:24:c6:90:ed:ae:75:bb:78:06:3c:c2:48:77:b8:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A7:2E:9A:38:E3:50:33:47:DC:54:7C:B9:EA:1C:99:96:96:8E:97
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663561393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f5a9::/48
Signature Algorithm: sha256WithRSAEncryption
04:15:dd:a6:be:04:c0:43:d7:db:e2:39:6d:84:8a:89:0b:94:
4b:15:cb:8e:5a:82:af:23:58:0f:dd:e9:12:8a:42:d2:77:53:
21:c9:e0:5e:af:74:b8:77:54:14:b1:26:3a:89:82:cf:eb:88:
24:73:4e:eb:17:e9:cc:be:f9:7c:fd:96:1e:f7:5c:b8:50:03:
5b:d6:c7:9a:bc:c2:73:54:34:5a:34:b6:44:6e:32:b4:03:63:
81:3b:31:af:8f:f3:53:14:3a:2e:6e:e8:68:bd:5a:ca:42:53:
03:11:26:f5:9a:d3:82:1f:d4:4e:1c:0f:95:15:b1:1e:b2:80:
63:c5:a6:87:c6:6e:1b:e7:da:23:6b:16:81:f3:59:0a:ca:fb:
a2:99:a7:fa:fc:ef:13:2e:ed:ef:45:65:da:fb:59:4b:3b:95:
94:4c:9d:17:3c:06:8a:d9:09:25:d8:7a:70:9d:59:32:a5:74:
bd:6e:33:31:f0:cc:a5:07:2d:fe:61:3b:b1:4b:3a:80:03:eb:
f2:84:2e:51:1d:9a:4a:2d:39:3c:01:0f:05:31:13:90:e9:1c:
4c:aa:77:b1:1f:be:10:34:c1:d3:fb:7f:83:ac:02:74:e8:35:
ad:74:d4:d2:c7:70:ca:66:b3:0e:bc:e9:60:cc:6a:25:34:a8:
69:ca:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:49:19 2025 by rpki-client