Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613833303a3a2f34342d3434203d3e203533333433.roa
File: 326130613a363034343a613833303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier: IRPCukldcUIi41rztdSBQk0EchIQDd/93j49pDmdNKk=
Subject key identifier: 92:70:25:9C:8D:3D:B2:91:82:E5:D6:AE:F2:27:AA:70:31:5C:94:20
Certificate issuer: /CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Certificate serial: 60C368B9FF60A3CFEB58BF3E2F61D89D8EC54878
Authority key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613833303a3a2f34342d3434203d3e203533333433.roa
Signing time: Tue 11 Feb 2025 18:46:10 +0000
ROA not before: Tue 11 Feb 2025 18:41:10 +0000
ROA not after: Tue 10 Feb 2026 18:46:10 +0000
asID: 53343
IP address blocks: 2a0a:6044:a830::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 13 Feb 2025 02:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c3:68:b9:ff:60:a3:cf:eb:58:bf:3e:2f:61:d8:9d:8e:c5:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Validity
Not Before: Feb 11 18:41:10 2025 GMT
Not After : Feb 10 18:46:10 2026 GMT
Subject: CN=9270259C8D3DB29182E5D6AEF227AA70315C9420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:df:07:5b:83:91:a3:c0:95:92:bc:99:a8:
aa:50:c8:30:9a:f1:9b:db:f3:73:fe:d6:66:fe:13:
70:e7:7c:5b:2a:08:27:e4:99:aa:66:9f:2a:20:60:
d5:3a:c9:2e:50:7e:92:f6:b9:e9:54:51:bb:0d:52:
26:ac:81:11:c0:f8:4e:27:33:7f:f1:0f:27:09:42:
c1:37:ef:95:19:d1:9b:bb:96:86:35:81:6b:51:06:
fe:fb:c1:0c:62:9b:5b:42:a9:39:90:9f:f1:e6:56:
8b:14:03:da:fb:82:e7:4f:87:51:8d:f0:6f:c0:23:
88:ff:b4:8d:0e:e8:da:ed:1f:69:de:5d:d5:02:c9:
28:50:9e:1e:63:6f:fe:6c:3a:df:e4:f7:c1:6b:00:
da:d7:52:ec:28:fd:5b:c7:ba:3e:0a:77:8b:df:dc:
d3:fd:f6:0a:d6:95:c6:55:2a:77:05:8c:74:56:90:
cb:2c:40:6e:75:6d:73:63:b8:10:33:0b:df:0f:83:
30:73:96:07:62:56:84:d1:2c:6d:c0:aa:83:78:54:
ee:67:b0:2f:bc:da:43:d9:cc:5a:3e:b3:b0:a4:f2:
31:0f:91:78:1e:a4:14:2d:4e:9a:e5:88:25:23:03:
5b:f6:77:7d:c6:92:f3:7f:a2:08:22:a5:35:68:be:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:70:25:9C:8D:3D:B2:91:82:E5:D6:AE:F2:27:AA:70:31:5C:94:20
X509v3 Authority Key Identifier:
keyid:6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613833303a3a2f34342d3434203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a830::/44
Signature Algorithm: sha256WithRSAEncryption
2c:c0:b9:67:cd:07:c2:bf:9a:32:4f:ef:97:37:2c:14:e5:fa:
f4:a9:f5:45:34:ec:3a:a1:0d:3c:40:fd:54:a3:3b:ea:61:4a:
cc:80:05:4d:36:41:1d:b4:ad:c8:13:ad:33:6a:5e:50:c6:66:
ad:13:cf:bc:d7:72:27:99:14:5e:3e:52:ec:92:03:d8:f2:9a:
99:d8:59:51:b9:a4:01:da:d5:db:36:50:db:b2:b1:68:4f:7c:
9b:48:bd:da:1d:1a:99:1c:16:03:f8:74:dd:e9:cc:1d:20:ee:
61:23:36:26:8d:3d:39:0c:86:4a:42:10:53:84:47:54:e0:47:
30:06:83:c0:67:1a:32:70:54:b5:b6:1f:fa:c5:4b:75:7f:e7:
ba:00:ef:3a:8c:24:a0:00:f0:84:5d:76:65:2f:ba:b7:45:28:
ca:0d:18:a3:82:e9:3c:bb:1b:92:58:c9:50:45:2a:33:fe:a6:
5a:3f:79:f2:84:4a:3e:e6:4d:bd:c8:24:45:8d:4c:df:8a:2a:
47:3b:bf:2f:6a:98:b7:ae:1b:35:f0:11:d5:4b:f1:e1:41:4c:
b6:79:c9:04:6a:e5:84:0f:28:44:4d:19:2c:2a:57:0b:75:88:
63:72:5a:22:e9:23:1b:c2:97:a6:24:14:d0:5e:31:c1:c1:00:
6f:2e:6e:07
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYMNouf9go8/rWL8+L2HYnY7FSHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI3RDY2QzIzMTQxRTc3OUI1RjQ5QkRCMzBEOTlBMTVG
QzQzODkxQjAeFw0yNTAyMTExODQxMTBaFw0yNjAyMTAxODQ2MTBaMDMxMTAvBgNV
BAMTKDkyNzAyNTlDOEQzREIyOTE4MkU1RDZBRUYyMjdBQTcwMzE1Qzk0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Dt8HW4ORo8CVkryZqKpQyDCa
8Zvb83P+1mb+E3DnfFsqCCfkmapmnyogYNU6yS5QfpL2uelUUbsNUiasgRHA+E4n
M3/xDycJQsE375UZ0Zu7loY1gWtRBv77wQxim1tCqTmQn/HmVosUA9r7gudPh1GN
8G/AI4j/tI0O6NrtH2neXdUCyShQnh5jb/5sOt/k98FrANrXUuwo/VvHuj4Kd4vf
3NP99grWlcZVKncFjHRWkMssQG51bXNjuBAzC98PgzBzlgdiVoTRLG3AqoN4VO5n
sC+82kPZzFo+s7Ck8jEPkXgepBQtTprliCUjA1v2d33GkvN/oggipTVovjaJAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUknAlnI09spGC5dau8ieqcDFclCAwHwYDVR0j
BBgwFoAUa31mwjFB53m19JvbMNmaFfxDiRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvMy82QjdENjZDMjMx
NDFFNzc5QjVGNDlCREIzMEQ5OUExNUZDNDM4OTFCLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzZCN0Q2NkMyMzE0MUU3NzlCNUY0OUJEQjMwRDk5QTE1RkM0Mzg5MUIu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQz
ZDU4MzZmZjFiMjkvMy8zMjYxMzA2MTNhMzYzMDM0MzQzYTYxMzgzMzMwM2EzYTJm
MzQzNDJkMzQzNDIwM2QzZTIwMzUzMzMzMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoKYESoMDAN
BgkqhkiG9w0BAQsFAAOCAQEALMC5Z80Hwr+aMk/vlzcsFOX69Kn1RTTsOqENPED9
VKM76mFKzIAFTTZBHbStyBOtM2peUMZmrRPPvNdyJ5kUXj5S7JID2PKamdhZUbmk
AdrV2zZQ27KxaE98m0i92h0amRwWA/h03enMHSDuYSM2Jo09OQyGSkIQU4RHVOBH
MAaDwGcaMnBUtbYf+sVLdX/nugDvOowkoADwhF12ZS+6t0Uoyg0Yo4LpPLsbkljJ
UEUqM/6mWj958oRKPuZNvcgkRY1M34oqRzu/L2qYt64bNfAR1Uvx4UFMtnnJBGrl
hA8oRE0ZLCpXC3WIY3JaIukjG8KXpiQU0F4xwcEAby5uBw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:53:50 2025 by rpki-client