Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62623a3a2f34382d3438203d3e20323132343730.roa
File: 326130623a346530373a62623a3a2f34382d3438203d3e20323132343730.roa (raw, json)
Hash identifier: zIaBfdGKUWXv11nPiH+4ZJV3HPVrPD28syjqpGIbeHo=
Subject key identifier: C9:7E:3B:6A:1A:E1:B2:8E:11:B0:75:B1:1B:63:7D:5F:78:EA:76:10
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 08C3415525AF0D639B50AE9683761C98C73396CE
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62623a3a2f34382d3438203d3e20323132343730.roa
Signing time: Fri 11 Apr 2025 14:28:24 +0000
ROA not before: Fri 11 Apr 2025 14:23:24 +0000
ROA not after: Fri 10 Apr 2026 14:28:24 +0000
asID: 212470
IP address blocks: 2a0b:4e07:bb::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 19:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c3:41:55:25:af:0d:63:9b:50:ae:96:83:76:1c:98:c7:33:96:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Apr 11 14:23:24 2025 GMT
Not After : Apr 10 14:28:24 2026 GMT
Subject: CN=C97E3B6A1AE1B28E11B075B11B637D5F78EA7610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:5f:c6:4e:00:4b:bd:3f:b4:64:c0:83:bf:
a6:06:c1:8b:59:50:88:06:2f:e3:ba:58:9f:7d:eb:
9e:cd:41:87:10:21:81:85:40:5e:59:d0:41:2b:2b:
16:ed:7d:71:2f:8d:63:d8:29:7c:b2:82:22:65:e1:
d2:29:5a:53:ab:1c:f9:c2:d8:ed:5f:81:af:da:20:
bb:02:60:62:11:29:cb:bd:67:eb:ad:58:31:b4:01:
2c:7c:f2:d6:e3:23:9d:92:5f:69:fe:89:ab:07:78:
8b:b8:7d:9c:fe:12:9d:7f:08:34:78:70:ad:a4:98:
e7:36:89:a6:b1:33:2d:84:ce:cb:35:94:a5:d3:46:
ed:0c:58:17:d0:fd:67:6c:1f:73:29:23:88:0d:f4:
5e:03:f9:d4:c9:50:a4:82:1e:26:30:c1:4a:f2:b8:
64:79:90:a3:c0:c5:15:36:e8:52:7b:ad:2c:cb:37:
10:11:44:a6:89:7c:a4:40:44:4e:6d:63:b3:05:b5:
ac:04:36:62:f0:0a:d1:63:f5:0a:69:63:a2:67:ec:
31:86:77:e5:00:6e:38:4a:fb:e6:e0:36:97:cb:ab:
26:90:a6:fa:e5:26:14:91:28:55:02:f7:d2:4b:1a:
26:55:f1:a6:e0:c9:63:33:93:5b:6f:95:3e:0c:26:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7E:3B:6A:1A:E1:B2:8E:11:B0:75:B1:1B:63:7D:5F:78:EA:76:10
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62623a3a2f34382d3438203d3e20323132343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:bb::/48
Signature Algorithm: sha256WithRSAEncryption
84:94:8c:93:c4:f3:1b:26:c6:0d:eb:4f:42:db:49:7b:2f:ee:
2c:a5:3b:f0:14:45:35:c3:0f:72:44:4b:df:a3:70:30:bb:1b:
63:64:8a:52:d8:f7:93:88:9a:d9:65:26:93:bb:68:56:24:5e:
26:80:52:9c:90:d1:7b:01:d4:e7:c8:3c:3c:9b:52:9c:54:81:
d6:4f:1e:88:d2:f7:89:a1:e5:d1:02:8b:4b:7a:57:44:07:80:
7f:40:b6:0f:f3:b7:07:57:e5:1d:26:7a:fa:99:ec:7b:47:89:
59:81:a7:ea:63:0e:83:c9:d7:e6:65:fb:34:61:b2:6d:f4:18:
e7:29:6b:3b:a2:04:4f:46:c7:8f:3c:b6:6f:8a:cf:17:05:11:
95:6b:55:41:a5:3e:77:f9:41:79:74:22:0a:a6:df:ab:64:e9:
5a:de:11:2e:e1:fe:aa:6b:cd:c6:31:f2:9c:6f:3f:39:21:51:
f3:d0:66:19:11:08:49:07:ef:5b:33:31:a6:7b:d7:7f:0f:b8:
b6:af:e7:f4:50:d9:db:80:7b:16:ab:ea:6a:f5:e1:6f:57:af:
e7:cc:c2:da:19:17:b7:44:a3:43:07:46:08:31:97:f7:cc:6a:
14:5f:ac:e1:6e:3b:de:de:c7:dc:43:5e:d3:79:45:b4:b4:22:
19:f2:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:21:28 2025 by rpki-client