Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666466353a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666466353a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: Bm0e3Nz7UDOBq3ksBAlpfZsMY5kv+fXjfgx1NIc9Nt0=
Subject key identifier: A1:0F:C0:21:96:60:7C:2B:3E:B9:10:ED:4B:20:38:D8:08:63:9C:10
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 51223EA1304F6777E02D3344446D147797E2A73E
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666466353a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:37:34 +0000
ROA not before: Thu 26 Jun 2025 12:32:34 +0000
ROA not after: Thu 25 Jun 2026 12:37:34 +0000
asID: 396968
IP address blocks: 2a0f:6287:fdf5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 04:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:22:3e:a1:30:4f:67:77:e0:2d:33:44:44:6d:14:77:97:e2:a7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:32:34 2025 GMT
Not After : Jun 25 12:37:34 2026 GMT
Subject: CN=A10FC02196607C2B3EB910ED4B2038D808639C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:1d:58:08:6e:dc:5b:e4:5a:54:ab:ad:f6:
e4:17:df:57:fe:2b:52:47:5a:b1:dc:0b:56:e4:c3:
91:51:11:bf:8c:97:a4:6a:ad:66:59:ce:9a:f8:ae:
57:37:82:0f:21:da:f5:46:48:24:a7:8e:e2:cb:dc:
68:18:06:bd:55:e8:4c:dd:bb:ae:b9:85:61:69:88:
1e:bd:76:3d:80:16:01:58:ef:4e:ae:88:c8:1c:a3:
9b:06:a4:a6:a6:9f:c9:53:a9:ce:40:90:55:c8:0c:
1d:b7:bb:a0:c7:b1:33:ad:76:8b:c9:19:f7:00:93:
23:40:c2:03:de:34:23:7f:13:ec:8d:40:ec:8c:cd:
3f:6a:d6:24:a7:67:04:91:94:7b:26:30:d6:b5:66:
0f:35:57:32:93:e9:8d:51:58:0f:81:55:7d:87:33:
6f:e6:7b:5c:e8:77:74:8b:e6:67:30:81:21:69:36:
80:9b:09:ee:e9:4e:58:ee:46:0d:cf:34:98:db:67:
d0:42:dd:d0:84:a5:06:f0:68:f2:07:86:01:d3:16:
42:59:7c:07:71:39:1c:4f:60:6e:b7:98:9b:ab:21:
de:56:1d:ee:84:6f:c6:2e:d1:95:a3:6b:76:29:83:
bf:82:9c:c2:6d:05:23:14:91:0b:35:df:83:38:f1:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0F:C0:21:96:60:7C:2B:3E:B9:10:ED:4B:20:38:D8:08:63:9C:10
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666466353a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fdf5::/48
Signature Algorithm: sha256WithRSAEncryption
a9:e3:af:7f:c7:e6:97:a7:44:3f:56:70:17:6a:8c:39:5b:3e:
34:61:4a:0d:ed:cb:8a:8e:79:46:f3:ce:df:0c:75:4e:4d:75:
6d:fb:8e:2b:c1:8f:d7:3c:67:2c:b4:1b:70:51:d7:79:88:50:
03:e9:39:2c:92:16:a2:02:a8:56:f0:a2:dd:f2:9a:cf:09:6e:
3c:7d:de:78:08:f1:c4:e4:2e:1a:9b:10:33:80:b5:aa:f5:d8:
d3:81:0b:a8:51:82:51:bc:a6:62:43:e5:4d:ad:7d:7c:5f:27:
83:02:16:37:a2:16:e9:74:15:61:72:2a:00:60:fb:e2:9f:49:
10:d5:35:fd:cc:bc:33:fd:35:ef:c4:45:37:37:66:90:b2:00:
f3:4f:4c:00:0d:4a:14:77:2b:63:b1:9b:dc:22:71:64:9f:85:
5a:23:05:e1:b3:6b:93:da:07:9f:0f:29:30:9c:4b:6f:e4:e0:
6b:54:99:e3:aa:61:80:87:bb:73:d9:51:93:55:27:08:25:a8:
b2:d4:bf:5b:71:81:04:18:5d:97:bf:2b:b3:78:ce:09:18:f9:
10:af:d0:e5:6f:0c:23:65:b1:40:d9:92:31:d4:00:bd:9a:7d:
73:f4:0e:51:1b:1c:a6:6c:a7:92:9e:ea:dc:e8:93:8d:03:c9:
2b:d8:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:29:58 2025 by rpki-client