Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3130303a3a2f34302d3438203d3e20313439303230.roa
File: 326130623a346530373a3130303a3a2f34302d3438203d3e20313439303230.roa (raw, json)
Hash identifier: yHEMDqHdlrbyhdTIYRibLEM3+Q7yArIl7SBWUvJbUbM=
Subject key identifier: B6:E2:0F:C3:13:B5:1D:B0:0B:9E:EE:49:8C:47:DD:BB:C6:01:AA:8C
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 1B92A8955E4D1517F0764FEF150B45537D94ED49
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3130303a3a2f34302d3438203d3e20313439303230.roa
Signing time: Fri 11 Apr 2025 14:27:48 +0000
ROA not before: Fri 11 Apr 2025 14:22:48 +0000
ROA not after: Fri 10 Apr 2026 14:27:48 +0000
asID: 149020
IP address blocks: 2a0b:4e07:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 19:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:92:a8:95:5e:4d:15:17:f0:76:4f:ef:15:0b:45:53:7d:94:ed:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Apr 11 14:22:48 2025 GMT
Not After : Apr 10 14:27:48 2026 GMT
Subject: CN=B6E20FC313B51DB00B9EEE498C47DDBBC601AA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:e5:b4:9c:89:d2:3d:b8:03:b5:ee:9b:ec:
5a:de:b6:2a:75:a4:b8:14:72:7d:84:e6:3c:52:97:
df:1c:42:54:bc:18:90:75:08:57:4e:a4:78:d8:a8:
f1:0f:e9:7e:60:ce:84:c2:ac:18:25:75:40:56:4c:
1d:df:8a:ea:3c:36:47:24:1e:cf:e9:e5:ea:ee:d5:
a1:69:95:ae:0c:f0:ef:3e:a4:c3:33:54:ce:c9:e6:
ef:34:19:2c:09:c8:f9:98:e8:ad:78:00:6e:fa:0f:
a6:13:88:ff:35:72:cb:1e:5f:1e:a2:fc:b9:5d:00:
1c:aa:5f:8d:76:fc:39:67:d1:b0:66:7b:e0:c9:f3:
6b:be:d3:b1:75:2a:bc:a2:49:d5:ba:67:32:f0:03:
c0:fb:19:d6:a0:b4:7d:60:04:30:98:c7:e8:9c:57:
dc:6d:a5:74:8a:5c:41:f2:12:6c:78:43:3e:c2:d1:
4c:80:b9:7d:2e:ed:23:c7:8e:2a:a9:22:15:7b:af:
ba:f7:2d:c2:0b:c4:ab:df:e2:c2:d5:c0:cd:dd:2b:
70:14:d2:4d:67:eb:d1:32:44:08:f8:10:7c:0c:19:
34:22:eb:0f:2a:9c:aa:0b:09:fd:11:80:9b:b5:f5:
bf:d2:d3:9f:5f:ad:b4:64:08:a3:45:01:64:9f:e1:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E2:0F:C3:13:B5:1D:B0:0B:9E:EE:49:8C:47:DD:BB:C6:01:AA:8C
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3130303a3a2f34302d3438203d3e20313439303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:100::/40
Signature Algorithm: sha256WithRSAEncryption
84:ec:cf:e0:ae:7e:41:ee:85:71:22:77:30:63:e3:81:7e:07:
43:eb:05:32:9c:aa:ac:36:db:36:c4:d0:a9:15:71:c7:58:52:
2c:f0:79:ed:e2:dd:49:fe:4f:db:df:cb:0e:11:c9:c0:a0:34:
c7:e5:4a:00:51:47:7d:e0:67:74:78:d5:95:c1:35:84:9c:3e:
de:c2:b8:d2:33:74:0e:d5:62:ba:95:ea:34:27:91:ef:42:48:
22:91:b9:cb:cc:ff:69:31:74:ff:80:37:dc:b5:ac:5d:79:98:
b7:54:ca:dc:aa:1f:c1:71:22:9b:73:a8:05:e4:f9:8d:02:fe:
7e:eb:59:74:f9:74:fe:d4:98:68:59:d2:86:8c:ed:b0:9c:33:
36:20:15:94:49:1e:1b:73:4b:96:9b:0d:3a:b1:72:f5:1a:59:
10:fe:6c:af:27:62:bb:f7:23:8c:68:61:f2:02:d6:b5:fe:70:
43:1c:69:77:bd:0d:8c:7e:3c:9a:37:61:2b:52:ab:9e:4e:b5:
3c:17:27:d8:0b:29:ec:de:4c:34:88:9f:50:e4:d4:f0:97:6f:
50:19:5c:88:57:2d:6f:6a:4a:c2:01:a1:b1:23:cd:44:67:17:
11:dd:31:f5:6e:87:0d:13:fe:d5:d3:62:61:9d:b5:dd:19:c1:
f6:60:31:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:41:47 2025 by rpki-client