Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS132750.roa
File:                     AS132750.roa (raw, json)
Hash identifier:          C3kgLqgVIVjtQL4h8LVyc/IL5090+s9ksHVIHi1N4/U=
Subject key identifier:   BD:B5:CF:D4:C9:C5:24:F4:78:BF:C0:75:04:77:6B:E6:AC:A4:7E:59
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       65946CC3BA297158BA7240AA8D2973BBD95C0025
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS132750.roa
Signing time:             Thu 29 May 2025 04:40:58 +0000
ROA not before:           Thu 29 May 2025 04:35:58 +0000
ROA not after:            Thu 28 May 2026 04:40:58 +0000
asID:                     132750
IP address blocks:        64.50.185.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 04 Jun 2025 11:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:94:6c:c3:ba:29:71:58:ba:72:40:aa:8d:29:73:bb:d9:5c:00:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 29 04:35:58 2025 GMT
            Not After : May 28 04:40:58 2026 GMT
        Subject: CN=BDB5CFD4C9C524F478BFC07504776BE6ACA47E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:4c:5c:36:33:be:c2:58:7f:9a:a0:6e:c5:
                    82:9b:03:a8:e9:99:bd:a2:40:c3:40:ce:b4:5a:2e:
                    27:c2:bf:9b:1e:0f:0a:fb:06:54:58:97:e0:7f:fd:
                    c4:e2:23:58:aa:ec:a5:56:32:ca:42:d6:23:14:27:
                    98:38:02:0b:4e:4a:c0:50:ad:2b:e1:e4:9e:c8:e2:
                    b5:66:6e:89:b1:8e:b0:76:97:19:9f:c6:9f:a7:d0:
                    0c:90:e4:37:b5:d3:ff:59:64:64:2a:ce:07:2b:3b:
                    1b:d6:57:4e:01:24:c1:85:e1:75:f0:39:45:11:18:
                    29:c6:5c:ea:1c:50:d0:92:66:6c:52:c4:64:88:25:
                    57:fe:2e:60:0d:54:53:51:26:b8:c9:e3:d5:a3:73:
                    5b:88:98:8d:13:50:f8:da:7f:d9:56:aa:16:20:57:
                    dc:05:2f:04:e3:f5:31:b2:aa:1b:4a:3d:cf:29:4a:
                    99:45:91:15:74:b7:56:dc:5a:52:7c:f0:c6:69:82:
                    0d:bf:d4:02:85:24:27:29:89:c8:07:1f:3f:a0:e0:
                    b7:f2:72:96:91:a2:d8:51:81:a9:9f:0c:a0:a2:4b:
                    46:92:7e:63:7c:9c:2e:94:23:7f:d8:10:17:4a:9b:
                    a9:b2:65:26:6c:8e:23:de:19:bd:a4:ea:2d:37:a8:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B5:CF:D4:C9:C5:24:F4:78:BF:C0:75:04:77:6B:E6:AC:A4:7E:59
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS132750.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:ee:21:12:91:46:33:54:d1:f2:c6:a2:41:e6:d6:ce:72:d3:
         c7:4f:29:53:ae:d4:44:02:ea:11:4f:a7:41:2f:41:c5:61:e2:
         f4:3b:ec:de:c5:95:3d:67:63:07:f4:77:d5:d4:4c:3a:eb:1e:
         74:0b:1b:88:c5:56:f4:be:66:69:47:46:d4:15:92:88:26:22:
         32:a5:b1:1b:55:de:43:8d:7f:e8:da:8b:8e:97:76:a6:30:16:
         99:b4:01:69:65:e7:0b:9a:8a:8e:80:13:f9:40:2b:3a:2e:85:
         cd:22:c4:d8:c3:e3:c8:94:b4:51:f7:05:2f:59:b6:4c:e7:68:
         c0:3c:7f:99:8c:2d:0e:29:c6:c9:a5:2b:c5:48:f6:2a:2f:3e:
         bc:95:1e:8e:1e:30:a0:8d:ee:92:13:36:cd:2d:bd:3d:d7:7f:
         2a:27:7f:4e:de:88:93:a0:ba:14:bf:28:4c:29:e9:f4:40:2f:
         ed:73:24:96:39:ec:ac:20:8e:76:b1:29:7e:dc:cc:d7:f0:b2:
         91:34:1c:5e:a1:a5:a4:40:83:12:2b:b2:80:8d:c4:95:18:cd:
         c4:e0:0f:53:d5:72:42:18:31:3d:32:d8:c4:7c:a9:17:45:6a:
         ce:84:e6:25:03:82:d7:9f:6b:dc:d4:e3:64:ea:60:65:a6:e3:
         e9:96:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:18:16 2025 by rpki-client