Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663939623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663939623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: NZg3DWdVjsXyVXrjm2FjhyTcMu1BYV1gySislx1B0eI=
Subject key identifier: B4:68:A4:31:5E:25:FD:9E:C9:64:CD:9C:3C:91:DE:68:E4:BC:F8:54
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 115FFDE30B28A8B1094F8FA04109C1013F717BA1
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663939623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:18 +0000
ROA not before: Thu 26 Jun 2025 12:31:18 +0000
ROA not after: Thu 25 Jun 2026 12:36:18 +0000
asID: 396968
IP address blocks: 2a0f:6287:f99b::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 03:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:5f:fd:e3:0b:28:a8:b1:09:4f:8f:a0:41:09:c1:01:3f:71:7b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:18 2025 GMT
Not After : Jun 25 12:36:18 2026 GMT
Subject: CN=B468A4315E25FD9EC964CD9C3C91DE68E4BCF854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f0:2e:07:5b:63:1e:64:21:bd:9e:59:a1:18:
21:ff:b7:3d:2c:a6:6f:3e:cb:8a:bc:42:ad:6a:dd:
d6:f4:93:2e:3c:d9:5d:e6:d6:d7:a3:07:47:a8:32:
23:f5:18:d1:48:80:56:45:d0:fd:82:83:fc:d5:09:
75:96:9c:67:18:de:5a:ac:af:1c:b8:93:b4:83:24:
30:37:33:87:77:f9:ce:4c:ac:2c:ac:e5:54:70:29:
33:8c:2f:e3:9d:8a:7a:2b:b7:14:ff:e9:78:1e:b2:
60:7c:ef:48:38:f6:bf:a2:1f:28:09:61:2d:5e:15:
75:3d:95:e6:fa:b1:32:56:fb:a6:1e:f5:c8:e9:db:
d4:d8:a9:3c:2e:1d:93:d1:fd:c5:72:76:f7:04:9d:
47:18:a4:e3:84:2e:aa:a4:5b:5b:f7:bc:5a:20:f2:
15:24:e1:16:ac:b7:aa:2a:b8:12:3d:43:ce:73:6e:
cc:06:3d:3e:55:f8:cb:49:d9:18:74:d2:a4:c1:5f:
e6:d2:60:39:f4:82:d4:85:46:57:3b:2f:89:11:d5:
c2:98:76:59:85:c9:84:68:45:69:d4:ae:c2:71:4a:
9c:06:d3:54:f1:5e:f9:5c:68:5b:4c:d7:25:b9:ba:
61:8d:06:58:5f:f6:e4:81:01:ea:3e:ac:c9:dd:3e:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:A4:31:5E:25:FD:9E:C9:64:CD:9C:3C:91:DE:68:E4:BC:F8:54
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663939623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f99b::/48
Signature Algorithm: sha256WithRSAEncryption
bd:6b:54:5d:10:61:c8:e8:d2:8c:b3:9b:72:89:1a:ae:49:e3:
9b:f1:0f:ab:57:62:49:8c:9f:7e:ac:6c:a2:44:53:f5:bc:f9:
7f:b1:4b:8d:31:ac:fb:38:a1:6f:2f:c1:e7:58:75:52:ed:3a:
a2:26:88:e9:d5:50:ea:7c:f8:59:64:66:cf:35:3e:a2:bb:a1:
8e:1d:b1:db:50:e4:6e:4a:fa:ca:9c:46:f3:11:00:74:dd:02:
50:fe:b3:1e:9a:a0:fa:de:6a:bc:fc:3f:86:de:7c:9e:af:8c:
29:30:cc:71:ec:3b:79:6a:82:4a:09:0d:91:20:4a:d2:ba:a7:
52:ab:15:91:bf:96:88:5d:65:51:68:bf:b8:cc:6b:f5:e5:74:
15:18:55:da:6f:88:fa:41:c4:2d:f2:9c:be:d7:ed:aa:0d:92:
a0:76:bb:5a:38:df:53:35:c5:d9:53:43:70:03:8a:f4:87:da:
a9:ba:45:7e:e6:31:46:5c:7f:1d:66:4a:b5:26:e3:2b:e8:05:
59:2f:8a:22:cd:17:3f:c1:2f:38:9f:a1:a0:1e:71:c0:20:af:
f9:a5:b3:b2:5b:1d:bc:46:b1:36:36:92:15:bd:bd:2f:da:72:
00:76:be:71:83:65:db:6d:7e:d7:14:c2:0b:d7:a4:9d:3a:6a:
7c:6d:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:46:54 2025 by rpki-client