Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3230303a3a2f34382d3438203d3e20343031363832.roa
File: 323630343a6361303a3230303a3a2f34382d3438203d3e20343031363832.roa (raw, json)
Hash identifier: Mi0QC8iObnZv0jw+IeObA6oXHP6OyQMvjskZHLKqGKQ=
Subject key identifier: BA:CC:D0:5E:C9:23:0B:EC:2F:4B:AB:D8:6A:9F:E4:30:CD:63:36:53
Certificate issuer: /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Certificate serial: 7E26C749D1DA58B64E9A1D1D82C81CBDB1A6E3D9
Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3230303a3a2f34382d3438203d3e20343031363832.roa
Signing time: Mon 28 Apr 2025 01:04:00 +0000
ROA not before: Mon 28 Apr 2025 00:59:00 +0000
ROA not after: Mon 27 Apr 2026 01:04:00 +0000
asID: 401682
IP address blocks: 2604:ca0:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 28 Apr 2025 01:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:26:c7:49:d1:da:58:b6:4e:9a:1d:1d:82:c8:1c:bd:b1:a6:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Validity
Not Before: Apr 28 00:59:00 2025 GMT
Not After : Apr 27 01:04:00 2026 GMT
Subject: CN=BACCD05EC9230BEC2F4BABD86A9FE430CD633653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:f2:e5:a2:fc:11:16:14:84:49:11:ee:e7:
71:c6:b6:89:74:1c:04:d3:8a:cf:6d:10:a4:01:02:
96:4a:79:65:af:aa:8e:3f:40:ad:fa:80:fb:d5:36:
d0:ed:db:5f:ab:d3:0f:a6:56:68:8a:f8:92:4c:7e:
e5:24:be:72:8c:83:55:a9:37:7d:08:d8:6b:29:1e:
0f:5e:05:29:75:b5:85:2d:08:82:c1:11:2d:d5:e8:
73:60:b2:b6:50:66:4b:2d:2f:b2:c5:81:85:06:c3:
f3:a7:58:67:b6:fe:4f:25:b5:df:49:99:5a:42:0a:
ec:3a:0d:41:99:e6:22:53:0a:ec:57:07:82:6f:6d:
54:84:1f:ad:56:09:47:c1:60:43:3c:d1:a0:5a:fd:
d7:91:e7:6a:30:d0:df:8a:2b:ed:4c:a5:83:e3:64:
fa:0b:eb:95:bc:37:d0:c4:ec:68:7b:68:f2:6d:89:
b6:fd:e0:55:ba:96:04:4c:a4:2b:dd:4c:af:80:e6:
0d:21:a0:9e:ee:a7:d3:02:9d:01:e2:b7:23:ec:d4:
dc:4b:f8:8f:3a:1c:b3:94:eb:58:3f:56:90:28:01:
28:6e:17:4a:cf:89:c6:d8:7a:db:5b:5d:73:2a:82:
67:a9:10:9b:82:c5:e3:05:f5:fc:d2:04:a3:3f:9d:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CC:D0:5E:C9:23:0B:EC:2F:4B:AB:D8:6A:9F:E4:30:CD:63:36:53
X509v3 Authority Key Identifier:
keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3230303a3a2f34382d3438203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:200::/48
Signature Algorithm: sha256WithRSAEncryption
4b:12:0b:d1:ad:df:db:13:70:78:49:c0:b2:18:8f:c6:43:68:
66:f0:0f:0d:62:93:f5:72:31:5e:c3:89:c0:96:49:6f:5d:fe:
38:94:40:22:ef:09:22:da:ca:69:f8:e9:6b:52:a8:64:a4:a9:
d2:9b:70:1d:7d:ee:2d:56:7f:93:a4:29:35:95:11:26:b4:ac:
92:73:16:d2:18:32:44:2f:fd:0b:23:9c:c8:fb:53:00:32:a7:
4e:ef:3b:bf:02:a8:68:fc:95:46:d2:cf:29:5a:4f:05:c2:f9:
82:a0:08:66:e8:db:31:da:95:09:17:8e:c0:e4:54:de:5e:57:
13:40:6e:91:5a:c0:4e:36:98:61:d6:b9:67:4b:8d:ef:97:b7:
92:b1:1b:0a:88:bb:d5:21:e8:11:34:64:79:ae:4b:f4:dc:bb:
d8:ec:af:74:6a:b5:10:4b:6f:dc:10:da:37:57:e6:57:a4:db:
c8:0f:2f:ad:a5:c9:ce:07:3b:9b:3b:ab:ff:d3:24:60:b7:ba:
5d:3c:77:52:4a:ba:70:8f:21:0a:05:9d:bb:ec:7c:40:9d:9b:
0a:e3:5e:1e:aa:63:82:2a:7e:bc:b8:16:5e:91:92:66:c4:53:
a6:f1:0f:b3:0a:5c:dd:f2:fb:bb:cc:d6:7e:d0:17:9a:9d:37:
35:02:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:49:11 2025 by rpki-client