Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613834303a3a2f34342d3434203d3e203533333433.roa
File: 326130613a363034343a613834303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier: 4htuT8fBbu7XzHiFBr5VZRgRjCIeNLz+az7l0OKeXdc=
Subject key identifier: 04:08:F0:1B:DE:FF:A9:2C:E0:92:E0:3D:9C:DE:69:C6:B1:59:38:36
Certificate issuer: /CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Certificate serial: 705E8588F1998F7861200D0FE5219AFC0A5BF795
Authority key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613834303a3a2f34342d3434203d3e203533333433.roa
Signing time: Tue 11 Feb 2025 18:46:10 +0000
ROA not before: Tue 11 Feb 2025 18:41:10 +0000
ROA not after: Tue 10 Feb 2026 18:46:10 +0000
asID: 53343
IP address blocks: 2a0a:6044:a840::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 13 Feb 2025 02:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:5e:85:88:f1:99:8f:78:61:20:0d:0f:e5:21:9a:fc:0a:5b:f7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Validity
Not Before: Feb 11 18:41:10 2025 GMT
Not After : Feb 10 18:46:10 2026 GMT
Subject: CN=0408F01BDEFFA92CE092E03D9CDE69C6B1593836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:83:b9:d2:84:8d:e7:83:62:e1:67:f2:14:
b7:7f:9e:ab:c6:b3:ff:af:30:10:80:bf:b9:2d:1d:
80:78:b9:78:c0:d2:f1:4f:69:d4:bd:c0:70:e7:19:
93:31:ba:f8:7a:23:4f:db:83:f4:64:0c:f5:1d:24:
d0:23:d8:16:1e:1a:ab:3b:47:99:69:32:8d:88:8c:
6f:93:25:0d:f3:bf:51:59:24:04:4a:f6:43:3e:77:
fd:ee:f5:86:ba:fb:26:e0:39:8b:38:c4:a7:ac:f9:
62:77:95:9f:24:1b:0e:14:66:73:6f:3a:9a:a7:9f:
d7:4f:27:a8:87:80:ba:27:1c:72:ab:16:fa:17:42:
8b:39:9a:ff:35:56:2e:bf:a8:75:20:a0:2e:3d:a7:
f4:07:48:f7:30:63:48:4b:7d:87:ef:90:1a:ae:25:
ca:67:4a:b3:9a:f5:c0:f2:b0:6a:e3:6b:44:b9:0d:
05:a1:8a:55:8e:d3:56:d2:28:e0:ea:0f:50:4e:0e:
b9:f5:84:9d:77:d0:eb:85:f6:4d:60:09:27:9c:a8:
6f:df:07:36:a6:17:60:d8:00:0e:a8:18:66:35:a9:
d6:ce:51:2d:60:19:47:50:36:78:ae:56:6a:45:c1:
71:e7:32:a7:2d:82:09:95:3a:85:30:bf:30:6b:43:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:08:F0:1B:DE:FF:A9:2C:E0:92:E0:3D:9C:DE:69:C6:B1:59:38:36
X509v3 Authority Key Identifier:
keyid:6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613834303a3a2f34342d3434203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a840::/44
Signature Algorithm: sha256WithRSAEncryption
39:aa:5f:5f:07:38:28:79:8e:ff:79:0f:82:94:bd:bc:66:d8:
f8:47:e7:1e:f3:8f:41:0e:50:ad:0c:08:29:10:aa:99:36:48:
3f:1f:73:cf:88:c1:0a:61:e0:cd:c2:8d:c2:5b:0a:e2:d6:30:
e5:8d:2a:70:97:5e:e0:37:d7:b9:77:f8:46:e3:27:c2:61:16:
32:94:a1:0b:05:71:5a:8a:5d:e5:aa:da:b6:b8:7d:ba:78:0a:
7e:25:e8:93:08:91:4f:ef:75:5c:47:93:34:34:fe:97:bd:f1:
d3:bb:0a:31:58:45:83:de:d8:3a:a1:d0:0a:48:46:be:ec:12:
cb:06:b6:b0:c4:18:46:fe:28:0e:c2:58:c4:ca:50:0d:ef:f3:
93:d3:32:5e:2b:4c:5d:60:9b:14:7f:82:4f:1f:29:7c:40:51:
76:66:a5:e1:70:0a:77:54:36:4f:14:96:bb:3a:d4:f8:68:f4:
70:bc:c0:76:c0:bc:19:80:4c:0f:81:a0:c4:7b:09:91:8d:d1:
0a:af:7a:a1:98:22:81:80:00:3b:0a:1d:95:88:5e:2a:fd:27:
65:d5:22:8d:da:c5:62:af:1c:43:81:a9:d1:85:96:ef:9c:63:
05:51:82:9e:f7:ef:c7:48:39:ec:ec:af:6b:ac:8e:d5:ba:4f:
e0:b6:4b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:53 2025 by rpki-client