Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237653a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666237653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: XszdVfLMlh2LmjZIM4EXqsUGLDP+tZKS8DFORiAaPwA=
Subject key identifier: 0E:3A:7F:2A:89:84:72:34:37:B4:0D:51:39:B2:20:8F:0E:8D:B6:12
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 47F7501E3BF08360F7D31DAD5706ECC8163BC952
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237653a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:58:05 +0000
ROA not before: Thu 26 Jun 2025 12:53:05 +0000
ROA not after: Thu 25 Jun 2026 12:58:05 +0000
asID: 396968
IP address blocks: 2a0f:6287:fb7e::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 17:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f7:50:1e:3b:f0:83:60:f7:d3:1d:ad:57:06:ec:c8:16:3b:c9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:53:05 2025 GMT
Not After : Jun 25 12:58:05 2026 GMT
Subject: CN=0E3A7F2A8984723437B40D5139B2208F0E8DB612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:86:89:df:9a:e3:2e:4b:e3:b2:d2:25:1d:d6:
f9:d2:2d:be:ea:62:8e:20:3c:f8:c7:e9:cb:47:52:
e9:19:fd:8d:ce:4e:ae:df:8a:13:3a:f4:30:3a:19:
c5:9e:d4:2c:7b:23:a7:a5:f3:75:bf:9e:4a:bd:8b:
61:7b:2e:ef:32:c1:41:e0:04:19:34:d3:3a:21:ca:
a2:89:98:f0:84:38:f9:27:09:a7:1e:1b:de:da:ba:
60:7d:d2:9c:81:68:67:ff:d3:a0:42:03:ed:23:70:
56:ea:4f:b6:7d:5c:64:c9:c1:ef:10:11:09:a0:73:
d5:62:b5:fa:d4:b0:69:f3:bf:86:a6:05:1a:43:28:
7a:39:51:ee:b9:c4:b8:3a:c2:a9:6d:ae:72:83:24:
cb:d4:36:25:7a:51:9d:16:11:8f:2c:c3:5b:05:8e:
15:65:94:e9:1c:f3:cb:ac:bd:5f:4f:22:51:de:85:
1f:62:30:ae:f6:51:1e:cf:fc:65:19:86:df:3c:94:
d3:38:bf:fa:bd:ea:02:d3:60:3b:b3:33:23:1f:ef:
42:d5:1b:76:c7:7e:8b:be:a2:8f:56:f0:b3:fa:52:
be:b5:fd:d4:64:5e:68:53:23:1f:f6:36:b3:0d:92:
55:5a:ea:90:46:a5:37:94:e6:d1:14:e1:78:09:0e:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:7F:2A:89:84:72:34:37:B4:0D:51:39:B2:20:8F:0E:8D:B6:12
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237653a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fb7e::/48
Signature Algorithm: sha256WithRSAEncryption
9b:7d:27:5a:d8:c9:af:8a:ff:73:85:61:c1:0e:95:dd:c6:db:
2d:3c:69:60:84:52:cf:f9:c6:a9:e2:13:37:5c:58:34:69:79:
6d:d4:7f:79:54:d8:0e:15:7e:ba:8b:4c:6b:00:33:6c:96:3a:
40:c1:63:85:40:44:c1:c9:80:5d:2b:af:ad:61:40:1e:cd:4f:
20:14:30:34:43:59:db:de:ce:be:3d:63:6a:7f:e6:f4:87:bd:
e5:ee:fa:3a:8f:a6:f9:ac:a8:58:99:4c:0e:cf:1f:b7:45:34:
87:5d:c6:3f:de:50:db:de:5d:4e:eb:90:ca:6e:0f:85:30:d7:
a0:ca:8d:db:cb:ac:59:52:88:ba:ed:d3:a3:40:7d:56:ac:3e:
85:bc:ce:7a:09:13:fe:f1:33:fb:ed:9b:77:f1:29:1e:10:24:
6b:a6:5a:80:e7:0c:c5:4b:69:65:da:fc:e0:1f:a8:ef:68:db:
49:c8:50:dd:bd:32:64:79:54:a0:e1:34:77:20:49:4f:2c:f9:
13:aa:e1:09:85:9d:10:c2:c6:41:2a:80:ee:5d:ac:a6:48:cd:
df:ba:d9:ef:4f:66:c2:dc:0b:2b:ee:42:63:b7:ba:40:db:09:
a0:0e:69:be:e3:1b:fd:33:7f:43:20:30:47:7d:5d:4c:db:f1:
7e:d6:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:49:09 2025 by rpki-client