Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214024.roa
File: AS214024.roa (raw, json)
Hash identifier: 69acBvUCOSLPO2WEnSmJVu/3PK4rqbZCIu9ua4/jczI=
Subject key identifier: 2A:FE:1B:2A:0A:D3:D8:49:FF:DE:E7:8A:55:D8:65:63:9C:AC:CB:68
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 67347E1A148295F0771A220BDCB4BA4F25390195
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214024.roa
Signing time: Tue 31 Dec 2024 13:22:16 +0000
ROA not before: Tue 31 Dec 2024 13:17:16 +0000
ROA not after: Tue 30 Dec 2025 13:22:16 +0000
asID: 214024
IP address blocks: 74.50.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:34:7e:1a:14:82:95:f0:77:1a:22:0b:dc:b4:ba:4f:25:39:01:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Dec 31 13:17:16 2024 GMT
Not After : Dec 30 13:22:16 2025 GMT
Subject: CN=2AFE1B2A0AD3D849FFDEE78A55D865639CACCB68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:34:ae:3a:d3:25:00:47:b4:06:c8:36:8a:
0a:8e:a2:cf:64:df:cf:79:61:c9:fc:c7:07:17:bf:
46:5f:49:47:fc:7e:4f:d5:42:56:79:ef:f9:28:ef:
a3:db:c7:b2:0a:2f:08:40:ce:49:d4:cb:61:2f:65:
70:d2:e6:64:4a:9c:29:86:b6:de:26:30:e0:3f:e0:
91:31:cd:67:c0:c5:71:c0:58:6d:ce:28:c3:7a:47:
b9:52:32:9e:c4:fa:89:21:f0:8e:10:1c:85:64:f0:
85:18:cf:a8:84:dd:81:b4:5a:4c:b5:e9:6f:ba:9c:
04:92:9d:07:9c:3d:52:9a:7f:e3:a2:91:b2:1e:f8:
56:e2:7b:83:8f:a3:24:f9:b2:9b:5b:f0:63:42:ea:
3b:3a:06:52:58:46:84:cd:0f:0d:75:0a:40:cf:69:
e9:b3:00:1f:0f:99:15:89:41:2d:a3:62:16:0e:0f:
37:70:fa:67:b1:7c:bd:ca:bd:a3:82:e6:a3:07:9e:
79:b1:28:cb:6b:ad:48:cd:98:6e:80:c5:8e:6b:04:
55:4c:be:98:cd:82:68:f4:89:00:65:46:ce:11:51:
d0:3d:31:27:be:ed:c8:8d:2d:db:6c:f8:55:8a:2a:
ac:a8:32:76:55:b7:9b:d3:2b:b7:d8:e5:24:f1:6b:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FE:1B:2A:0A:D3:D8:49:FF:DE:E7:8A:55:D8:65:63:9C:AC:CB:68
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
42:71:fe:06:dd:b9:d7:ce:1e:e4:54:2b:07:22:2a:66:b4:45:
25:23:21:d2:74:fc:66:2c:d9:a2:27:61:17:d4:11:dc:67:19:
4a:a5:34:a6:05:0c:dc:25:a0:3d:99:6c:0e:1c:5b:f6:fb:c8:
0a:e6:0b:0a:79:b7:1b:c9:fe:de:2f:46:dc:ef:c2:98:b7:72:
21:2e:e8:d9:9e:2d:95:80:5a:8b:57:bd:d3:02:d0:ec:12:89:
00:0c:84:cd:c1:af:d0:ee:34:bc:cf:1c:93:ca:75:23:bb:69:
45:1e:19:27:03:db:80:d1:97:cc:2b:27:d8:8f:41:07:62:4d:
0b:44:41:8f:fb:3f:2b:7b:28:48:cd:de:96:a7:28:a2:ae:6a:
bd:07:b2:01:ed:1f:0d:fb:91:ab:40:f6:2e:d1:f8:8d:75:4d:
f7:ea:7e:52:d0:13:c1:e5:13:36:2d:f5:fd:3b:d5:03:e1:23:
cd:40:e8:d8:37:7f:76:19:89:1b:aa:aa:fd:a7:49:c2:57:6f:
8c:f0:9a:63:0e:d6:f1:43:61:b3:6c:9a:bb:45:a3:54:84:25:
41:e9:26:a0:63:f6:6b:f9:81:0a:d7:66:c3:37:94:87:00:f7:
c4:af:27:61:5c:e4:d5:30:2b:bf:ab:c6:9d:54:8d:aa:12:10:
e9:81:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:47 2025 by rpki-client