Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663964313a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663964313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 2XgMVxuqIpJ5uJWZ/O2f+41oKttEz4RKkCGPsE3E26s=
Subject key identifier: E0:2F:7A:32:5E:68:6B:87:47:C1:21:FC:81:2B:48:D4:94:39:5F:9A
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 49C9512F101BCDD1257616029E6220CAB4989E73
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663964313a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:19 +0000
ROA not before: Thu 26 Jun 2025 12:31:19 +0000
ROA not after: Thu 25 Jun 2026 12:36:19 +0000
asID: 396968
IP address blocks: 2a0f:6287:f9d1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 03:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c9:51:2f:10:1b:cd:d1:25:76:16:02:9e:62:20:ca:b4:98:9e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:19 2025 GMT
Not After : Jun 25 12:36:19 2026 GMT
Subject: CN=E02F7A325E686B8747C121FC812B48D494395F9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9d:fb:84:c2:59:53:79:09:77:d8:b6:3f:5d:
9d:79:24:86:1b:6a:9a:8a:48:b5:80:53:97:1c:8e:
f7:b6:75:f3:38:76:5d:57:38:ba:59:04:90:d1:fc:
10:9e:6f:7f:2a:a5:fe:e6:68:b9:ae:00:5d:13:61:
8f:8e:e5:73:f1:74:09:9f:0c:35:ac:98:19:d4:fd:
c6:e1:5a:64:53:ef:ce:98:26:d5:fa:69:41:80:cb:
aa:e0:d2:10:6f:fd:ac:ef:a4:9d:f0:c0:23:ff:4d:
b4:36:69:71:6c:c9:eb:10:37:3f:ca:a8:d6:93:29:
8e:e6:3d:9f:d5:72:f2:cc:42:3b:38:63:d2:ce:38:
f3:e4:28:af:5d:66:01:cd:8a:6a:8f:af:1e:5a:fa:
ce:a8:96:37:13:3e:9d:32:29:f5:12:5b:58:cc:c5:
9e:9f:a8:0c:2f:08:94:08:44:4d:e6:c4:9a:18:44:
ab:76:c3:f9:40:ad:2c:79:88:52:6f:38:18:95:0d:
82:e0:df:fa:ae:fe:68:ef:83:4d:a6:57:c7:68:50:
50:fb:96:ef:a6:4f:71:bd:95:a1:6d:9d:e0:72:de:
3c:4c:19:f0:44:41:d3:49:45:15:5d:c1:52:4f:03:
8a:3e:4b:96:75:25:23:82:9f:e6:ff:bb:92:4f:9f:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2F:7A:32:5E:68:6B:87:47:C1:21:FC:81:2B:48:D4:94:39:5F:9A
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663964313a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f9d1::/48
Signature Algorithm: sha256WithRSAEncryption
9f:0f:55:55:d2:91:f4:aa:42:74:3e:4f:cd:fa:15:e4:fe:bb:
28:99:e8:a0:e4:65:9d:a3:3e:b3:06:3b:3d:bc:38:30:e5:ef:
62:d2:45:26:46:49:da:d5:09:52:a8:ec:e7:9b:9d:f0:a9:c4:
6e:ed:b8:b3:90:cd:ec:2a:d2:24:33:3e:63:74:22:7f:8f:b9:
67:b5:48:45:d5:77:48:b2:44:c9:71:ed:e1:96:42:d2:4b:17:
0c:34:d1:f0:1a:f1:6a:79:74:55:f6:0a:4a:18:74:33:73:f1:
55:5f:51:96:83:c2:e4:9c:d5:80:98:24:60:78:88:9d:66:86:
23:2a:9a:e6:1c:b0:8f:95:9b:ac:71:a2:7b:76:66:e1:e7:a5:
01:bc:d4:32:2a:f6:2f:7c:a0:ce:e9:f8:9a:8a:a6:f1:a5:12:
9b:8f:21:8a:81:50:81:52:27:7f:2e:4c:e0:a1:80:8b:5a:df:
4a:22:34:e2:4c:63:1e:a5:44:14:05:46:c9:50:8e:8f:f2:b8:
43:40:8e:1e:54:d1:bd:ab:79:9d:14:23:7a:47:83:34:ff:38:
e3:a2:b0:b2:1c:dc:41:ee:de:e7:60:1b:7a:49:e4:ae:8f:ff:
42:7f:26:e5:46:e3:fd:5b:da:fe:46:4f:05:e6:58:89:cd:60:
a1:76:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:42:30 2025 by rpki-client