Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: Qe37tg/4RY7YrRZCZyZg3cvFwkJYcEKx2M+jrRm9/fY=
Subject key identifier: 05:A1:CE:4C:AC:32:B0:AD:F8:9E:E4:55:08:08:2A:55:BE:FD:4E:A3
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 47AB4D3D828EAB7F102ABA2ED8B78DB7A03079DD
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214025.roa
Signing time: Tue 31 Dec 2024 13:22:16 +0000
ROA not before: Tue 31 Dec 2024 13:17:16 +0000
ROA not after: Tue 30 Dec 2025 13:22:16 +0000
asID: 214025
IP address blocks: 74.50.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ab:4d:3d:82:8e:ab:7f:10:2a:ba:2e:d8:b7:8d:b7:a0:30:79:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Dec 31 13:17:16 2024 GMT
Not After : Dec 30 13:22:16 2025 GMT
Subject: CN=05A1CE4CAC32B0ADF89EE45508082A55BEFD4EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:c9:80:6d:e9:2b:b4:53:b1:4b:6a:83:c8:
1d:7b:84:e0:a1:4a:b3:92:56:d7:0d:31:8f:8a:3d:
92:1f:ea:30:63:c0:43:16:33:76:ea:d7:c3:a1:1f:
a8:4c:55:80:fd:40:8d:6d:e7:6f:fb:58:7f:33:c4:
df:23:d5:51:a0:d6:d5:8f:e7:25:f9:ae:67:7c:fb:
15:12:8f:7e:80:08:d2:ac:39:d8:88:0c:e4:77:3a:
fa:10:45:98:c6:2c:8b:64:6a:31:4b:96:56:ec:c4:
8c:4b:e8:f3:13:49:b9:f7:52:0d:ca:df:5c:e4:1e:
d6:f2:e3:dc:06:83:25:98:e4:55:e1:b0:13:69:98:
bb:70:d0:98:e5:98:bd:ff:47:ea:0c:8a:64:40:a5:
d8:3f:0b:02:dd:c7:c4:04:fd:6b:a7:b9:de:2f:31:
0b:a5:75:2e:da:7c:14:04:c0:16:1c:43:80:a3:d5:
cc:e2:4a:6c:39:d3:09:5d:9a:00:7a:fb:da:5f:1d:
49:85:a3:79:7b:eb:39:1f:d6:b8:50:c1:61:1f:a0:
f5:af:69:04:3a:85:d3:6e:8c:2d:39:2f:3c:bf:b7:
ac:c4:50:f0:5d:21:95:6c:c3:9d:9f:f2:96:cd:a0:
b7:82:ff:19:88:aa:35:7c:a6:2d:34:4c:bc:34:7d:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:CE:4C:AC:32:B0:AD:F8:9E:E4:55:08:08:2A:55:BE:FD:4E:A3
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
57:af:4f:16:a1:c2:43:d6:3b:23:ea:f6:86:78:68:ae:c8:f9:
73:b3:20:8b:21:97:4e:81:c0:bd:cf:2a:08:48:e8:4b:0d:8f:
70:1d:4b:98:c9:4f:42:c8:14:25:5a:c6:b7:34:9f:9e:32:21:
50:9e:f9:d0:a7:ba:8e:f3:53:62:44:e2:b4:c6:b8:52:b9:9b:
bb:c2:e5:53:66:b9:5e:43:b9:bf:c0:70:89:58:a0:2f:1a:6b:
65:e0:b8:de:ca:b4:02:3b:5a:40:64:37:bf:6e:e1:e1:1e:62:
46:68:0c:51:5a:4c:c5:01:2a:b2:87:83:d7:65:5f:e6:00:44:
56:05:6a:fd:4b:50:fa:bc:9b:e0:c7:39:c4:e6:12:38:dd:5d:
1c:7b:da:a6:3a:a9:d5:8f:63:21:a6:07:61:02:fd:f0:05:86:
f4:b9:9b:9e:c4:ce:3f:e4:bb:85:6a:76:d6:a4:d4:74:4f:08:
a6:24:15:a0:61:93:8d:a5:37:5e:d7:a5:e0:64:30:ca:bd:3c:
ca:62:a2:14:da:a1:a5:72:ab:34:d6:ed:24:75:d3:12:fb:93:
6c:93:5c:bc:e4:b5:ee:97:a0:55:d9:70:45:39:b6:4b:24:b9:
e6:1c:17:89:8b:b0:ef:d7:1b:f1:58:39:9f:c1:73:77:c1:b3:
ae:dd:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:53 2025 by rpki-client