Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3330303a3a2f34382d3438203d3e20343031363832.roa
File: 323630343a6361303a3330303a3a2f34382d3438203d3e20343031363832.roa (raw, json)
Hash identifier: tCLTityA57F5wE7C7ZsgfQyD/v4e6Ea9qUiXex1UBsc=
Subject key identifier: A5:96:2F:51:93:BC:66:B4:47:83:AE:0C:F7:25:C6:B4:EB:7F:FF:D7
Certificate issuer: /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Certificate serial: 070903E4701E38A84A27EC64C69CB9BAAEAA4AC6
Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3330303a3a2f34382d3438203d3e20343031363832.roa
Signing time: Mon 28 Apr 2025 01:04:07 +0000
ROA not before: Mon 28 Apr 2025 00:59:07 +0000
ROA not after: Mon 27 Apr 2026 01:04:07 +0000
asID: 401682
IP address blocks: 2604:ca0:300::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 28 Apr 2025 01:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:09:03:e4:70:1e:38:a8:4a:27:ec:64:c6:9c:b9:ba:ae:aa:4a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Validity
Not Before: Apr 28 00:59:07 2025 GMT
Not After : Apr 27 01:04:07 2026 GMT
Subject: CN=A5962F5193BC66B44783AE0CF725C6B4EB7FFFD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:36:ab:05:ff:ce:20:fe:47:ea:6e:85:15:
7f:1e:92:5f:fb:7f:76:7d:7e:0e:4a:53:05:c1:8a:
5b:98:bf:a3:35:2f:c1:cd:8e:34:08:d9:28:d1:c7:
fa:18:b1:ff:a9:56:48:0a:52:09:68:88:4b:76:cd:
a8:0b:8f:08:49:84:9a:1f:51:39:54:2c:08:98:55:
ca:15:78:50:e8:cb:9f:2b:fb:84:25:f8:5e:9b:76:
43:79:32:b8:a7:60:19:c6:51:c9:30:f3:fd:34:30:
df:d3:b5:2e:9f:e6:8f:50:52:ea:00:96:72:42:8d:
bb:58:4a:c2:73:40:2e:43:a0:57:0c:42:d9:94:fa:
ff:98:d9:6f:b2:74:c7:a0:d1:62:80:91:71:e5:5e:
75:c2:c1:4c:3f:63:09:0f:b0:56:8d:12:2d:63:fd:
dd:b2:14:10:85:eb:6b:55:09:87:2a:29:cc:43:76:
71:78:f2:62:58:27:31:a6:58:ea:5b:87:5c:5b:58:
4b:28:69:99:b3:37:4a:bc:f4:81:a7:dc:89:69:3d:
6c:2a:fc:74:00:69:90:4d:ae:18:b1:0e:5e:f8:de:
18:7b:b9:2c:d8:42:ff:5a:22:4e:a9:b6:b4:36:76:
98:7c:01:03:07:15:98:51:b7:65:06:83:0e:65:67:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:2F:51:93:BC:66:B4:47:83:AE:0C:F7:25:C6:B4:EB:7F:FF:D7
X509v3 Authority Key Identifier:
keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3330303a3a2f34382d3438203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:300::/48
Signature Algorithm: sha256WithRSAEncryption
a1:83:45:46:13:a7:a0:ac:9f:3d:32:8a:bf:53:50:47:e9:b1:
79:1c:11:33:b0:b7:e7:d5:5d:63:f1:12:69:81:5a:1f:cc:2c:
34:c4:c5:d4:5c:77:cc:04:4e:02:04:a3:05:f9:60:45:73:c3:
98:b1:a3:ee:4b:4b:5a:ff:09:41:4e:9c:be:13:b5:9e:51:8a:
d2:78:dc:ff:70:a7:42:c7:01:aa:8b:5a:d7:3f:63:ba:e5:1b:
08:fd:29:86:c1:48:c7:b3:13:24:15:44:b7:e7:32:26:84:aa:
b8:86:f7:f9:a0:66:55:87:c6:71:39:3f:af:e2:05:8d:5d:ce:
e3:77:22:ab:e8:9d:67:1b:7a:c8:01:de:c0:c0:94:37:40:0e:
9a:b2:d5:e2:27:37:8c:f9:09:99:cc:9b:1c:49:f2:38:4e:15:
61:60:cb:95:8d:d5:10:41:04:2b:78:65:8b:b3:3e:d8:a0:7f:
fb:05:5f:af:3a:76:cb:b1:d8:0e:13:1b:4f:dc:bd:06:d9:38:
ac:5d:49:40:b0:94:13:51:b7:f1:7f:13:38:de:f2:0c:60:84:
3b:80:0b:3c:70:8a:7d:5e:ec:67:be:dc:c7:23:ff:04:bf:41:
6b:10:9f:16:89:70:93:5f:e4:50:08:89:5f:a0:e0:78:0e:64:
7e:db:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:45:48 2025 by rpki-client