Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3a2f33362d3336203d3e20333936393933.roa
File: 323630323a663734333a3a2f33362d3336203d3e20333936393933.roa (raw, json)
Hash identifier: evAdeH9Omvp6VFYItzVrWnOiFEwmrnZis4Kf+YucH4o=
Subject key identifier: 11:6A:85:7B:06:23:30:B5:17:30:90:E8:27:6D:01:69:C0:B0:47:55
Certificate issuer: /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial: 33627DDB523F374735AEE1BE7C7B2D5869503868
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3a2f33362d3336203d3e20333936393933.roa
Signing time: Fri 18 Apr 2025 01:14:54 +0000
ROA not before: Fri 18 Apr 2025 01:09:54 +0000
ROA not after: Fri 17 Apr 2026 01:14:54 +0000
asID: 396993
IP address blocks: 2602:f743::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 27 Apr 2025 03:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:62:7d:db:52:3f:37:47:35:ae:e1:be:7c:7b:2d:58:69:50:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Validity
Not Before: Apr 18 01:09:54 2025 GMT
Not After : Apr 17 01:14:54 2026 GMT
Subject: CN=116A857B062330B5173090E8276D0169C0B04755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:99:8b:0a:f9:12:0d:6a:eb:98:f2:00:e5:
68:5a:19:63:25:23:44:8d:13:5a:9a:ef:9f:e0:a6:
6c:66:71:06:7b:d8:32:f1:68:a0:b0:bc:a3:42:24:
41:c4:03:e9:fe:03:0c:94:97:82:f0:b5:d6:70:ab:
d9:41:af:04:5b:d5:f8:c9:4a:d9:11:9c:82:60:92:
96:5b:55:4d:c0:5a:e2:cf:ee:7b:5f:a6:a2:44:c7:
2f:84:5e:16:ca:ca:71:72:8b:b7:50:01:0b:e1:53:
97:ce:f2:a3:1a:c2:e9:46:76:e9:70:ed:db:7f:55:
c2:16:e2:dd:fb:7a:19:34:5a:ba:32:9e:8e:9f:01:
b9:b9:64:6e:71:af:87:74:af:88:bb:de:52:f8:e7:
16:39:18:66:40:65:00:a6:7a:e9:f5:d9:a5:3a:04:
42:39:61:66:37:b6:4a:33:c3:fa:d9:05:ad:99:00:
41:ba:bb:eb:f5:7a:31:40:a9:a5:d2:d6:d3:16:1a:
1b:05:41:b3:8e:8f:b6:a0:c1:cf:70:e4:5d:4b:49:
53:a0:a8:37:d8:7e:e7:bd:a9:02:8c:3a:bd:25:83:
04:ed:c2:7d:6a:7b:cd:45:0d:5c:ee:d9:e0:a5:c4:
25:6d:15:14:d1:cc:9f:f0:38:a1:52:0b:6d:6e:75:
92:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6A:85:7B:06:23:30:B5:17:30:90:E8:27:6D:01:69:C0:B0:47:55
X509v3 Authority Key Identifier:
keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3a2f33362d3336203d3e20333936393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f743::/36
Signature Algorithm: sha256WithRSAEncryption
40:e4:1d:64:0b:fb:0a:ed:bb:fe:f2:f9:95:fd:e7:1e:18:97:
db:95:84:9c:6a:02:18:3c:2d:cc:b0:ac:fb:81:3b:31:b3:9c:
44:5f:14:47:05:57:d3:75:e7:f3:2f:fc:cc:af:4b:7e:f6:d3:
a7:15:eb:6b:53:11:34:ab:06:5a:41:5a:2b:c9:c3:09:37:26:
ba:7a:81:b9:eb:e0:e2:56:9f:48:89:37:8d:a2:2e:50:71:3b:
43:4e:7a:0d:c6:e4:fc:54:66:e2:a7:19:01:5a:b6:02:fb:71:
81:02:0e:59:c0:eb:f4:b8:2a:c3:3d:d7:bb:95:00:05:e1:3d:
4d:dd:a6:ed:32:69:9a:77:85:77:3b:72:18:f1:f3:10:7b:11:
ca:ef:40:20:e5:71:ac:b1:57:3c:aa:5f:4b:2b:7e:56:6f:cb:
05:6f:6d:5f:ec:c2:af:f0:f8:d4:43:e1:da:e2:1a:3a:b7:3f:
ba:9e:3f:43:98:e8:5a:02:90:49:ed:17:96:19:98:20:fb:88:
12:e7:9a:3b:72:2e:8b:4d:9f:e1:8d:9a:d1:94:2e:24:f6:cd:
90:d9:ba:47:3d:56:3b:1f:02:8a:18:23:22:02:3e:7a:5d:c8:
63:6a:15:c3:42:1b:53:43:b8:9c:71:9f:52:a2:79:d7:d0:7b:
68:e8:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:55:45 2025 by rpki-client