Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20326.roa
File: AS20326.roa (raw, json)
Hash identifier: H92rrauUgvB8452pwePt9cbNHIuHIYiA10qNcCWe96I=
Subject key identifier: D8:D4:6F:48:B5:97:48:3F:7A:F8:4D:AA:50:2F:31:B2:CC:29:A7:DC
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 107C91E1F56C01F2439152A3BF0934263DDBE64A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20326.roa
Signing time: Sat 21 Jun 2025 00:01:58 +0000
ROA not before: Fri 20 Jun 2025 23:56:58 +0000
ROA not after: Sat 20 Jun 2026 00:01:58 +0000
asID: 20326
IP address blocks: 64.50.180.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 22 Jun 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7c:91:e1:f5:6c:01:f2:43:91:52:a3:bf:09:34:26:3d:db:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jun 20 23:56:58 2025 GMT
Not After : Jun 20 00:01:58 2026 GMT
Subject: CN=D8D46F48B597483F7AF84DAA502F31B2CC29A7DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:9c:5e:2b:f0:02:4d:ab:c9:86:81:fd:13:
ea:ee:f9:67:c1:14:8c:bf:a2:34:f6:a5:46:d7:0d:
c7:86:a7:3d:ec:d2:0c:43:9a:65:99:1b:e7:77:0a:
45:cc:d8:d3:de:d9:50:68:e5:92:76:98:18:8f:31:
bc:5d:72:6e:e1:88:52:9e:1e:af:cc:c7:1d:f9:2c:
78:4e:f3:40:47:93:0f:e2:a4:fd:7d:7b:9e:34:68:
8b:02:c1:18:e0:6e:ea:1e:c2:57:96:94:47:06:d7:
83:5f:64:93:8e:f9:f2:9b:d5:a7:0c:c6:a4:b4:f7:
37:3b:f6:95:cd:5b:db:3c:7b:52:dd:70:5c:a1:cd:
e1:37:51:6b:d6:bd:b3:f3:8a:3e:e2:6f:d9:80:2e:
1a:46:89:04:40:8c:49:2a:87:85:d6:32:3f:29:d6:
f2:30:1e:66:17:25:c5:8d:db:e6:62:4b:54:4f:0c:
c2:9c:f3:f9:4a:fb:15:d8:f0:42:4c:d6:38:0a:f0:
60:74:98:e9:73:82:2f:5a:cb:11:9b:d0:46:0f:7b:
c6:90:16:12:d7:e5:0e:75:4c:b3:a7:02:f9:9a:ac:
18:b9:02:33:0f:a9:ae:0d:46:c5:18:93:fa:90:7f:
56:70:6e:56:f8:f0:e7:a6:16:c7:ff:23:c0:43:52:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:6F:48:B5:97:48:3F:7A:F8:4D:AA:50:2F:31:B2:CC:29:A7:DC
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.50.180.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:31:29:e6:b6:d2:3a:7e:c8:63:90:d6:09:20:85:b4:41:49:
d7:1f:e2:3a:07:ea:4f:34:65:f0:f3:a1:cf:24:9c:6e:62:89:
6b:48:6f:b2:62:e2:b9:a2:3a:8c:58:05:90:66:87:07:85:77:
ec:f4:b5:0d:6b:09:9f:a0:65:9d:88:9e:51:f0:20:32:59:6c:
e3:7d:7d:6c:0e:58:e9:ae:ef:5e:1a:49:cc:05:dd:41:16:02:
03:2a:56:6a:88:ca:71:b5:54:6a:57:bd:6e:df:d5:1c:f9:2a:
3a:0c:5e:97:a2:ae:aa:73:16:4b:f7:c9:cb:69:7d:18:d7:af:
ad:4d:a2:f1:cf:b3:dd:36:92:c4:12:06:2a:ca:ee:ce:1a:e8:
10:f0:2b:66:1d:e4:26:6b:b8:6d:ed:71:68:a7:fe:61:25:f1:
f3:f3:0d:d4:3e:1e:c9:61:4d:26:09:98:ad:85:0b:ec:82:95:
0a:62:2b:7a:4b:cb:36:1b:c4:3d:d6:f0:cb:10:fc:d7:70:e5:
c4:bb:37:76:1f:9a:af:88:b8:eb:11:a2:d1:b6:ea:e9:68:88:
0b:16:76:1e:b8:e0:02:d7:27:7c:ae:0c:71:a2:7e:61:79:f4:
49:56:df:04:e8:be:75:94:a7:ee:ab:db:d1:0f:cb:9b:8b:33:
13:f0:f0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:49:04 2025 by rpki-client