Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666130643a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666130643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: khEUiE/cWHI1NRMv+HtKkopTikaXUmLVtO+KFsJsw7E=
Subject key identifier: DB:B4:38:5F:AB:DD:DF:FA:19:00:59:C5:FC:69:31:00:31:E3:A9:83
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 616D2812DFC24F51433D5ACE100834C993A06B93
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666130643a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:56:06 +0000
ROA not before: Thu 26 Jun 2025 12:51:06 +0000
ROA not after: Thu 25 Jun 2026 12:56:06 +0000
asID: 396968
IP address blocks: 2a0f:6287:fa0d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 04:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6d:28:12:df:c2:4f:51:43:3d:5a:ce:10:08:34:c9:93:a0:6b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:51:06 2025 GMT
Not After : Jun 25 12:56:06 2026 GMT
Subject: CN=DBB4385FABDDDFFA190059C5FC69310031E3A983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:dc:b2:50:87:51:d0:67:6c:28:78:ee:2d:
7a:c3:49:e5:a9:b6:05:db:2d:1a:68:f6:15:34:b7:
5d:e9:cc:f7:67:10:a4:cb:eb:66:b0:7b:6a:29:cb:
cd:87:21:2f:06:57:21:f4:ba:18:e0:9a:ab:c0:d2:
07:cf:01:db:5a:77:4f:f4:f6:9b:e1:da:5c:7d:fd:
56:5d:3e:c9:9c:0c:c0:fc:ef:c8:9e:7a:fc:e3:fa:
7a:2c:7a:9a:f2:f5:8c:c5:86:7e:59:bf:18:34:b5:
37:a5:38:14:1c:ce:c6:ed:3f:7a:4f:bc:d1:a4:4f:
2c:6c:8e:5e:66:00:05:7a:5d:4f:db:d7:60:d6:a7:
bd:82:a8:9b:d9:45:bd:19:8c:de:6e:50:ff:67:06:
c1:ed:b3:08:d0:d3:0f:7c:61:e5:c8:ff:f5:76:32:
db:55:e6:5b:c5:32:cd:4f:62:ab:b9:7c:1c:e3:a6:
f1:11:70:28:2d:f4:3b:ac:1c:5b:7c:70:62:e4:b6:
1c:04:36:60:67:9f:6d:41:b3:d0:55:af:e5:0e:eb:
ba:13:b8:05:a8:e3:ed:9a:ee:b4:da:4c:27:55:6e:
52:d6:97:40:0b:8a:f5:88:2d:52:37:44:be:87:50:
7e:6a:55:03:a1:7c:35:14:64:c2:f1:68:8d:94:19:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B4:38:5F:AB:DD:DF:FA:19:00:59:C5:FC:69:31:00:31:E3:A9:83
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666130643a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fa0d::/48
Signature Algorithm: sha256WithRSAEncryption
4a:7b:90:81:b8:74:e4:87:79:9b:3b:66:25:90:47:71:0c:a2:
2a:46:22:5d:76:7d:a5:b0:a5:fc:92:f5:8f:f8:d0:06:68:4b:
09:3c:20:2f:d8:f9:bc:a0:85:65:8d:1b:ad:85:95:9a:4c:dc:
b9:bf:85:51:b6:50:7a:0d:c7:e6:a2:67:6e:a5:4f:a1:45:1f:
5f:95:69:e5:26:90:ed:00:b7:8d:86:76:a6:aa:c2:83:f8:be:
0d:6e:73:04:64:5e:3a:a6:a0:a6:a8:18:2c:7e:4f:f0:a0:7d:
71:f2:01:4b:ac:05:86:29:30:6a:32:83:72:32:b0:eb:b3:15:
c1:7a:e8:f2:59:17:8c:c0:97:b3:73:ad:af:a3:5b:c2:a4:43:
4c:27:48:3f:07:f6:2b:97:0d:d4:86:b3:62:75:7a:3f:f8:5d:
e5:15:6d:d2:40:ff:cb:51:67:c5:f1:3e:ab:85:b9:ce:79:1f:
d2:9a:b7:df:96:bc:73:22:ae:1d:b3:c8:cd:f3:5f:d1:32:c9:
f1:10:68:b6:f1:8c:1c:00:88:cb:b4:8a:1c:a3:34:d4:c3:17:
15:59:73:28:a0:61:5d:ba:62:2a:92:98:f2:7c:b6:7a:51:e6:
02:eb:e8:b6:96:8c:ef:14:fa:0b:bc:95:9c:e9:fb:49:fa:42:
50:ad:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:38:09 2025 by rpki-client