Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663639353a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663639353a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: lDhI4bzGjKx1sdNYMKxJsQycF2M6mosyLLkAJYJTZAk=
Subject key identifier: AB:1C:91:3A:B1:6E:C9:C2:33:66:C8:68:80:9A:77:60:26:49:5A:A1
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 4FF581DF2316AB4B70417D3B779B55836BCECF69
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663639353a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:37:36 +0000
ROA not before: Thu 26 Jun 2025 12:32:36 +0000
ROA not after: Thu 25 Jun 2026 12:37:36 +0000
asID: 396968
IP address blocks: 2a0f:6287:f695::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 03:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f5:81:df:23:16:ab:4b:70:41:7d:3b:77:9b:55:83:6b:ce:cf:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:32:36 2025 GMT
Not After : Jun 25 12:37:36 2026 GMT
Subject: CN=AB1C913AB16EC9C23366C868809A776026495AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:e3:91:41:80:53:77:e4:be:2f:30:40:e4:
41:fc:90:1b:53:d5:7c:b6:32:80:a7:a0:24:e0:b4:
f9:ed:83:56:50:3a:55:aa:b1:da:ee:03:bb:01:c8:
10:73:c0:e5:9e:90:0a:36:ca:4e:3e:19:8d:84:87:
56:8a:15:23:cc:d1:f9:69:bf:2b:83:df:24:ec:aa:
20:83:0a:a4:5a:cf:96:85:de:e7:b7:69:77:8c:7a:
b8:74:55:65:47:9a:95:46:94:3e:01:b9:e8:b3:db:
16:5a:ae:91:bf:89:4c:5b:cd:69:05:d9:f5:22:30:
bd:99:45:ea:44:da:06:cf:c6:f5:a3:f5:4b:35:53:
3e:93:3e:00:f6:64:d2:f8:23:d8:47:7f:ad:7b:e7:
e3:bb:0a:14:30:d7:a6:db:dc:42:74:56:ea:e7:e2:
f7:9b:c9:fd:f5:e7:6c:40:4b:6f:6a:77:52:c7:2c:
ed:da:ef:98:b9:b1:2c:b7:85:79:08:07:08:50:f6:
b3:ba:2f:73:d2:b6:b0:fb:b5:9e:ec:23:4f:44:c7:
e6:5f:04:1c:b5:6a:24:d8:95:af:8b:ee:39:29:52:
45:14:b2:c4:0f:eb:83:84:77:78:94:bd:5d:a7:78:
85:0f:e3:91:28:78:fe:b8:ba:9d:a9:62:72:90:78:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1C:91:3A:B1:6E:C9:C2:33:66:C8:68:80:9A:77:60:26:49:5A:A1
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663639353a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f695::/48
Signature Algorithm: sha256WithRSAEncryption
3a:48:2a:78:b7:6d:9a:58:2d:25:0b:8d:9d:a5:08:0c:5c:d5:
99:60:0e:f3:c9:7f:35:2c:cf:ad:5a:a6:8d:9b:99:3c:75:2c:
3f:0d:db:c1:d9:1c:72:f6:18:04:48:5e:49:fa:6b:4f:df:f1:
88:61:56:ab:8e:d3:8b:b6:ee:c7:c0:d2:75:54:81:67:02:f2:
be:a0:e2:bd:37:11:85:a8:77:29:70:0c:d8:40:e2:18:90:9e:
a3:b9:7a:02:fc:c2:b9:78:e3:cf:94:e3:75:53:47:77:6c:ee:
31:c4:db:08:d6:0b:b5:30:ac:e4:1d:02:8f:ab:b7:d8:29:95:
a4:51:1f:ae:44:8b:32:8d:37:46:f8:5a:5a:87:03:7a:dc:4d:
56:0c:e8:65:d7:65:b2:1d:94:ff:e3:9b:ec:6d:ef:94:7e:23:
c9:4b:70:fd:27:82:61:b7:53:8e:47:89:e2:93:24:4d:7e:a6:
62:fb:59:b6:2b:fc:83:42:f8:1c:09:e6:bd:f4:f4:2d:40:4f:
cf:a4:ce:8f:ba:88:b7:20:0f:93:6a:71:da:80:3d:1d:6b:fb:
bd:f3:ee:91:0e:76:21:24:52:a5:d6:76:49:d0:8c:19:56:cc:
6f:72:8d:80:14:8f:9f:99:a2:5d:d4:04:44:8f:5c:9e:a9:7f:
b0:c0:df:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:15:14 2025 by rpki-client