Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3330303a3a2f34342d3438203d3e20323134363735.roa
File: 326130623a346530373a3330303a3a2f34342d3438203d3e20323134363735.roa (raw, json)
Hash identifier: EscmMgF7mS0oQeWVAwlrhPNgcdoLapyoABlneCKNdYo=
Subject key identifier: 38:B8:06:2F:68:76:B1:A6:85:86:CA:B4:7F:82:09:18:1A:16:7A:B3
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 6AE5502BED723EB313BB4BDC6E0D393304A5CF71
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3330303a3a2f34342d3438203d3e20323134363735.roa
Signing time: Fri 11 Apr 2025 14:29:34 +0000
ROA not before: Fri 11 Apr 2025 14:24:34 +0000
ROA not after: Fri 10 Apr 2026 14:29:34 +0000
asID: 214675
IP address blocks: 2a0b:4e07:300::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 20:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e5:50:2b:ed:72:3e:b3:13:bb:4b:dc:6e:0d:39:33:04:a5:cf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Apr 11 14:24:34 2025 GMT
Not After : Apr 10 14:29:34 2026 GMT
Subject: CN=38B8062F6876B1A68586CAB47F8209181A167AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:b0:2c:c5:c1:5e:2f:7e:f8:38:06:a8:3b:
20:7b:ce:8e:8b:c8:a6:eb:c6:3e:9b:72:bb:f4:d9:
a8:49:a2:ad:d5:47:e0:87:cb:47:b6:b0:fb:4d:3e:
1b:27:78:58:b6:5c:f3:92:eb:79:ed:0a:c7:f7:4c:
dd:3b:f3:81:27:b1:34:1d:48:52:17:48:c8:d5:28:
5a:31:fd:f3:4b:75:26:e7:ff:7f:5d:a6:18:a9:7f:
ed:bc:01:19:58:fe:ff:cf:f0:5e:e1:dd:41:7a:75:
a2:81:0d:73:91:38:15:6a:bd:39:0f:ab:f0:3e:eb:
8e:95:4b:40:71:f2:97:a4:46:7b:f6:3e:e9:ff:48:
06:63:8e:fd:e6:a4:c5:ba:b8:2b:0c:11:32:0a:e9:
07:42:32:7c:50:e6:a6:24:a6:9d:25:cc:10:ae:3d:
bc:c2:9d:9d:66:e0:6d:93:65:70:4f:63:8b:ac:54:
6b:76:58:b4:9a:0e:b9:ce:ba:0c:89:f0:cc:0a:b0:
5f:74:b7:3b:a4:6c:a5:d5:07:e0:39:ab:f6:c1:12:
76:5e:23:09:9d:fc:43:43:44:2b:cc:af:65:cc:72:
c0:cc:18:bb:f3:b6:54:c7:6a:2e:c0:10:83:de:6e:
79:96:2b:de:47:8a:75:d7:e6:5a:e8:61:8f:0c:f5:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B8:06:2F:68:76:B1:A6:85:86:CA:B4:7F:82:09:18:1A:16:7A:B3
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3330303a3a2f34342d3438203d3e20323134363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:300::/44
Signature Algorithm: sha256WithRSAEncryption
26:80:64:72:03:31:36:99:07:76:de:d2:7e:56:51:10:24:51:
ab:cd:06:ed:df:fa:b3:a9:25:e4:29:0c:0c:6c:e8:5c:30:5e:
aa:63:c9:41:69:c5:d2:5b:5a:97:59:86:60:38:36:71:ef:88:
15:9b:fe:11:8a:38:14:44:97:a0:b9:49:d3:e5:f0:4d:59:18:
48:e2:2f:8b:a5:69:5e:7c:18:d7:07:63:02:cf:85:d7:7a:24:
ad:55:86:09:cb:32:ec:d3:29:6c:db:9e:a6:d7:ed:01:fa:0a:
c5:ce:08:4a:d6:93:5c:24:62:71:76:d2:61:4b:98:13:c4:64:
07:15:e8:12:7e:8b:e8:3f:88:01:2b:e8:9a:b0:30:b1:4b:62:
33:b4:d9:74:27:fb:1f:71:a2:d9:a1:d7:5f:4a:f5:cd:dc:79:
60:1e:a1:33:ae:cd:05:0a:c4:ed:c0:ce:ee:10:c8:2b:5e:51:
9a:b8:95:22:f8:e3:5f:28:14:91:b3:65:76:77:a6:ab:e0:85:
e5:6f:bc:82:d0:c6:9e:1b:f8:9b:10:a6:08:c0:07:5e:2e:68:
bd:af:55:4a:d8:d2:0a:31:a7:3d:0d:3f:c3:8a:82:5b:aa:b7:
7b:52:08:b3:30:77:53:fe:97:a1:b0:c1:95:06:cd:bd:c9:b6:
87:64:9e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:52:10 2025 by rpki-client