Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63025.roa
File: AS63025.roa (raw, json)
Hash identifier: f64kv5ctFA7d7YSQJa+2ABnews3jruJvIyjBaM6TajI=
Subject key identifier: B9:61:73:47:5B:EE:61:5C:78:12:71:EA:CE:15:FB:E3:6E:DE:0F:4D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1B905D0FDB49F2C2F1F90A0C7719485AD9864A0A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63025.roa
Signing time: Thu 08 May 2025 00:00:04 +0000
ROA not before: Wed 07 May 2025 23:55:04 +0000
ROA not after: Thu 07 May 2026 00:00:04 +0000
asID: 63025
IP address blocks: 104.234.66.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:90:5d:0f:db:49:f2:c2:f1:f9:0a:0c:77:19:48:5a:d9:86:4a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: May 7 23:55:04 2025 GMT
Not After : May 7 00:00:04 2026 GMT
Subject: CN=B96173475BEE615C781271EACE15FBE36EDE0F4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:d2:11:a6:3d:2d:b2:05:9f:8b:f1:fe:97:
a3:c1:a0:98:db:7e:8f:29:ba:f4:c3:88:63:84:4a:
fd:2c:62:1f:29:3c:ef:54:7f:33:80:ca:37:40:56:
bf:43:2b:f7:33:6b:ff:ef:c9:10:50:7a:0b:91:12:
7a:85:9a:fd:34:9f:74:40:db:74:29:36:f6:74:56:
ca:9d:8d:32:6a:6d:25:ec:b8:4f:92:0e:78:ab:d9:
c8:e3:c9:8f:30:1d:cc:b4:96:0d:a2:c8:c1:ec:9b:
71:77:c9:f3:c4:49:d2:d8:4a:d4:7f:d5:4d:26:26:
cb:e9:4c:12:9c:2a:b8:89:d5:91:75:9c:ab:9f:70:
e5:cf:09:3e:c8:a9:26:7c:11:b6:b5:36:40:c0:68:
30:92:d2:5b:d4:54:3d:d5:bc:37:72:14:1e:00:9f:
ea:78:66:2e:e2:65:d2:6f:67:66:8e:39:48:be:5b:
9f:8c:d7:ac:7d:99:5d:74:8e:f8:3e:99:73:18:f9:
46:43:1f:54:cb:6f:bc:84:6b:9d:45:c8:04:87:42:
a8:03:76:24:b6:bb:84:79:5d:71:ac:69:8c:95:54:
88:00:4d:93:8a:d9:d4:18:50:1e:d9:78:00:8e:36:
7f:e4:66:d8:a0:f8:3e:c7:9c:aa:2f:70:db:7a:3d:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:61:73:47:5B:EE:61:5C:78:12:71:EA:CE:15:FB:E3:6E:DE:0F:4D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.66.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:82:69:9a:b2:fe:70:cd:57:24:32:ef:56:d9:fd:ed:f8:2f:
2d:27:bd:3f:ff:88:f9:af:63:09:c6:75:be:04:46:6d:5d:81:
17:e2:95:83:39:2e:1d:ae:fc:95:dc:8c:5e:21:37:4a:2a:69:
3b:b2:c8:1d:33:b2:56:13:a3:df:e0:1d:66:fa:f8:6a:06:ce:
f0:6c:1a:9b:ad:ea:bf:f4:ba:1b:91:91:fc:ef:99:2d:aa:6e:
d6:5a:ad:29:8f:d7:5a:4b:18:8a:55:59:fc:4b:45:2a:d6:ad:
0e:77:86:c6:4e:15:a1:62:74:ad:d8:07:0a:f5:73:58:bd:8c:
ba:25:be:7d:42:70:99:ea:62:4d:e5:ce:d7:1e:06:9c:93:45:
97:58:cf:32:65:da:9a:06:0f:ae:2d:a0:d4:bc:ed:ba:c8:cd:
0b:72:25:71:41:3d:a4:c9:ee:bf:c5:e4:41:5f:c4:3c:43:3e:
1d:91:92:39:b8:6a:00:ab:eb:3d:68:12:54:97:55:9c:f8:9c:
ed:de:2e:3a:4f:8e:ec:40:9c:88:5e:33:51:ee:98:4c:fc:17:
53:e9:2e:07:92:ca:d8:90:28:31:9f:18:a6:6d:2b:7e:f3:de:
74:e1:a5:07:52:2c:d2:63:e5:c2:fd:78:37:4e:6c:ce:5e:18:
8d:dd:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:33:46 2025 by rpki-client