Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS402671.roa
File: AS402671.roa (raw, json)
Hash identifier: DKQtJsSKRHyc6sx8Prbi0/oNBT/GmK7RpFTmrb4K1IU=
Subject key identifier: F0:64:CA:26:E7:9E:E4:6B:1E:FA:3A:0C:62:9B:C2:5B:82:BB:24:84
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 2BD5A5A67FF51D6C95E1977DEAEA9556C3E81FBD
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS402671.roa
Signing time: Thu 29 Oct 2026 17:12:33 +0000
ROA not before: Thu 29 Oct 2026 17:07:33 +0000
ROA not after: Thu 28 Oct 2027 17:12:33 +0000
asID: 402671
IP address blocks: 199.235.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Nov 2026 14:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d5:a5:a6:7f:f5:1d:6c:95:e1:97:7d:ea:ea:95:56:c3:e8:1f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Oct 29 17:07:33 2026 GMT
Not After : Oct 28 17:12:33 2027 GMT
Subject: CN=F064CA26E79EE46B1EFA3A0C629BC25B82BB2484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:b6:2e:cb:7a:b8:45:92:b5:f0:d1:1b:c1:
11:73:ac:89:40:40:2a:8d:af:bd:0c:bd:8f:3b:ba:
cb:7d:d2:29:e9:1e:51:13:4a:c5:9f:7d:80:aa:ad:
36:86:a6:13:d3:cf:6f:5f:9e:0f:a3:92:7b:19:8f:
48:67:07:ba:a9:59:a5:86:ec:69:dd:a9:23:20:49:
bc:3f:5c:f9:80:cf:b2:c6:4e:75:67:87:37:0d:4e:
39:59:aa:0b:fa:4e:10:03:88:31:db:1b:38:f3:ad:
64:05:55:93:67:0b:38:9d:de:34:2a:a6:2f:a5:c7:
7a:4e:9e:53:88:af:52:a5:4b:9b:84:f5:4e:f7:35:
9d:cb:de:86:00:e6:78:40:ea:ca:ab:7f:12:5b:7b:
98:53:3e:a1:b6:a4:0f:17:c9:ae:e1:ae:79:6f:18:
16:c4:36:cf:9c:56:97:91:b7:e3:1b:03:a3:79:72:
56:8d:53:73:30:f3:8a:f1:17:83:6f:d2:70:32:3b:
0e:2c:19:47:fc:2f:7a:55:91:f7:69:54:93:5d:0d:
09:15:64:7c:41:0d:99:77:6a:dd:aa:bf:e4:07:e6:
41:3d:a2:90:4e:28:45:d0:61:93:c1:82:da:6e:7d:
f6:19:22:7c:cd:d9:29:5c:ca:32:40:09:14:f4:a0:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:64:CA:26:E7:9E:E4:6B:1E:FA:3A:0C:62:9B:C2:5B:82:BB:24:84
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS402671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a6:ae:fc:7e:a1:dd:dc:90:c0:15:8c:47:fd:eb:e2:ab:4a:
5f:0e:01:89:2b:64:92:ab:35:8d:37:9f:15:08:36:15:c3:5d:
c3:95:12:d0:82:0d:d8:25:8b:94:2b:1c:c4:30:b8:13:a9:a8:
68:3c:a0:5b:12:16:a4:2a:49:07:1b:9b:74:e2:7a:c8:07:5c:
66:bf:dd:af:ed:a5:51:6b:f8:cd:3a:fa:6a:4f:13:9b:aa:61:
a6:3b:d8:ad:6b:76:7a:5c:c6:b2:77:2e:7c:68:65:41:2b:0a:
9f:45:40:bf:1d:19:3f:6d:a1:ef:01:9a:41:46:0a:30:10:83:
aa:ad:79:2f:1c:61:0e:14:56:30:da:17:6b:bc:fe:28:35:26:
fc:1a:a5:08:a3:1e:87:99:66:8f:2c:bb:f0:e6:60:dd:d0:5e:
19:c2:a7:9b:bf:78:11:11:88:00:80:f5:68:ab:df:3d:5f:a4:
19:7f:84:40:36:8f:7d:5a:64:80:fc:0b:a6:af:e0:ff:1e:2f:
63:6a:6d:ec:c4:38:28:e1:17:11:86:b8:1a:4d:7c:90:41:5c:
51:15:d0:2e:15:b9:5f:e0:43:aa:96:a2:3a:a4:d5:13:38:fe:
8c:a7:0a:db:df:20:bf:4d:55:88:7b:ad:ce:46:22:44:2b:e3:
36:41:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:21 2026 by rpki-client