Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663836623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663836623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: LUYsssbGwRR88zdMxaKalL9IbG7KcHJTvnSWvV8MimA=
Subject key identifier: B4:29:2D:0D:A6:B2:A0:F9:55:85:4A:E8:96:37:47:BF:47:A8:8C:4F
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 1686EA5791D79C0BAB03C811D4DD2DE61F637C02
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663836623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:58:06 +0000
ROA not before: Thu 26 Jun 2025 12:53:06 +0000
ROA not after: Thu 25 Jun 2026 12:58:06 +0000
asID: 396968
IP address blocks: 2a0f:6287:f86b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 22:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:86:ea:57:91:d7:9c:0b:ab:03:c8:11:d4:dd:2d:e6:1f:63:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:53:06 2025 GMT
Not After : Jun 25 12:58:06 2026 GMT
Subject: CN=B4292D0DA6B2A0F955854AE8963747BF47A88C4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:7d:77:f6:35:8e:ca:9e:55:d0:7c:d6:f2:
ed:4a:d5:a4:ad:98:5e:72:14:8e:d9:e3:d1:ab:df:
f5:1a:08:79:39:05:a5:8d:50:8c:99:9b:a6:30:6a:
f4:e9:2d:08:4a:2a:ce:60:87:5e:20:8a:a6:09:f4:
aa:cd:35:31:91:c3:ba:09:b5:7e:ab:2b:d6:cc:66:
0e:10:08:33:4d:40:a8:88:28:43:13:8d:bd:9f:44:
52:8c:dd:7c:ac:72:5a:3a:02:83:c4:97:c4:36:43:
62:4e:7a:1f:e2:8a:53:55:ea:5b:8f:5e:ab:32:04:
5b:b7:10:86:53:33:6b:78:4d:e4:72:e9:68:fe:b4:
a2:fe:48:38:da:f2:74:bd:c9:77:2b:78:5f:cf:e1:
f5:3f:45:62:42:9e:da:70:55:92:b7:cb:63:73:0f:
a7:17:64:46:dd:20:d1:a0:20:b8:75:1a:0c:74:9b:
74:3d:74:2d:18:9b:95:0c:95:ad:20:de:89:01:82:
38:ae:39:8d:18:38:a4:fa:3a:df:be:b8:fe:82:87:
cd:b3:60:5b:ad:70:6e:17:1d:20:41:36:e1:cc:0a:
8a:db:24:c6:ef:a8:85:ab:33:91:3a:a6:48:2f:49:
87:a4:a6:2f:da:e4:2e:00:5b:0d:3f:ec:66:1a:d1:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:2D:0D:A6:B2:A0:F9:55:85:4A:E8:96:37:47:BF:47:A8:8C:4F
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663836623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f86b::/48
Signature Algorithm: sha256WithRSAEncryption
a4:97:e1:93:f4:a6:dc:65:7f:d6:96:28:22:ed:80:13:74:8c:
e7:cd:4c:88:69:0f:72:8d:50:45:93:24:19:ba:31:ba:82:ec:
03:9b:0a:90:93:d7:dc:dc:3a:f8:77:4f:60:8c:e2:a4:c7:c5:
e4:53:06:6f:fa:51:10:a2:0f:c7:d0:1a:86:a9:c7:f3:af:03:
fe:cc:8b:56:6a:37:ca:8d:64:88:9c:4f:d3:26:63:40:e7:d6:
8e:70:ed:71:a2:1a:f5:f7:10:df:fd:d8:75:aa:87:f3:8d:0d:
76:68:d2:bf:0b:f6:a1:8a:df:c4:cd:e2:4d:50:e3:7a:e5:c4:
b7:6e:87:8d:2b:56:1a:32:b4:1f:67:4f:e3:ce:0c:70:46:a0:
47:41:6d:96:d3:e2:c8:72:e3:94:83:f0:cb:9f:7b:26:d7:47:
61:d3:2e:7b:a6:f1:d3:b6:05:cc:14:26:f4:80:16:a4:f2:84:
52:17:25:ae:74:e9:cf:ea:a1:9d:b1:47:82:67:74:9d:72:74:
5c:c0:07:a1:81:47:0f:d2:ea:c0:f7:db:ae:14:4b:c4:1c:ce:
91:99:af:16:1b:5e:18:b7:db:d2:68:83:74:52:c2:de:0a:33:
ca:43:3f:bd:ef:85:5d:3f:5e:a3:02:82:46:af:b9:b5:ff:bc:
25:a2:74:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:43:39 2025 by rpki-client