Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214654.roa
File: AS214654.roa (raw, json)
Hash identifier: gDq0S89o8/1TV17okApoJlscHGyh4FtWfRdylzCHx6A=
Subject key identifier: 37:71:5F:4F:D2:E3:AC:34:E2:B9:88:60:93:B4:81:29:D0:FA:D6:45
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: E59366F410F5FF1D32FFEEB866461F7FE84EFC
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214654.roa
Signing time: Tue 31 Dec 2024 13:22:16 +0000
ROA not before: Tue 31 Dec 2024 13:17:16 +0000
ROA not after: Tue 30 Dec 2025 13:22:16 +0000
asID: 214654
IP address blocks: 74.50.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e5:93:66:f4:10:f5:ff:1d:32:ff:ee:b8:66:46:1f:7f:e8:4e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Dec 31 13:17:16 2024 GMT
Not After : Dec 30 13:22:16 2025 GMT
Subject: CN=37715F4FD2E3AC34E2B9886093B48129D0FAD645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:c4:54:93:51:7b:e9:a6:a6:7b:fa:6a:ca:
e1:65:91:b7:96:06:8d:a2:3f:ed:85:d0:00:e5:50:
41:04:9f:d5:ad:bd:9f:cb:3b:fd:1f:7c:d8:36:13:
70:23:de:66:cb:87:d9:65:5e:73:ea:5c:a7:d9:af:
e4:a9:d6:59:38:9e:b8:bc:8e:3c:b0:f8:db:59:4c:
15:f6:cd:c2:4f:c0:6d:58:e8:36:da:58:85:4a:1b:
5e:2b:cb:81:39:5c:8f:1e:c9:ac:33:33:0b:47:50:
f6:60:54:75:7e:a6:39:62:c0:54:7d:15:72:6c:f2:
a3:f8:eb:06:f6:58:39:03:ad:b9:04:ab:88:9b:e0:
e9:46:c2:31:e9:ec:46:87:bc:69:b8:5e:d7:90:9f:
99:3e:2b:e6:4c:c6:eb:1b:f4:4d:f1:f1:76:37:09:
f4:07:7a:5c:34:e9:47:f7:77:4c:eb:f7:ab:2c:3c:
31:db:70:82:69:98:7c:2b:08:ea:f8:f6:27:cd:7e:
df:03:a5:de:91:49:38:54:9f:1d:9b:c9:45:a2:7e:
ea:d2:57:2e:ab:f8:e4:ba:18:44:63:6e:23:04:3c:
6e:98:ca:a5:a4:1e:ff:84:b9:01:5c:c7:22:15:28:
74:39:c6:6f:e3:22:00:27:50:9c:33:a0:c3:a8:d1:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:71:5F:4F:D2:E3:AC:34:E2:B9:88:60:93:B4:81:29:D0:FA:D6:45
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b4:b4:af:ba:86:67:3c:70:75:77:24:76:ef:7f:bf:b9:34:
b7:f6:74:44:7f:56:ba:e3:ba:b6:71:5f:9a:55:d5:3f:2e:b9:
16:d0:57:c5:cb:96:a2:ee:a6:1e:b2:0e:c8:e6:f8:4e:28:20:
16:2e:60:ad:27:00:45:d4:26:59:cb:be:6c:bb:39:d6:db:25:
99:04:d9:1c:71:0e:78:e2:23:83:be:31:5c:01:a4:32:bd:31:
c7:4f:cf:15:5a:e0:c5:a3:48:ce:0d:74:1d:f1:f1:e8:00:49:
63:29:ea:44:7f:11:3c:91:1e:31:48:2b:b0:ca:68:b2:eb:52:
1f:25:31:3c:a4:91:0c:d6:18:77:89:bd:5c:14:e1:dc:cf:05:
29:11:bc:a5:92:fb:8f:24:4d:7b:44:b8:5b:a9:07:85:5d:52:
3d:1a:1d:ff:81:74:f7:fd:e7:cc:7a:21:f8:82:38:c5:49:7a:
c7:42:b8:78:70:06:48:96:38:75:61:21:fd:01:13:c0:50:a5:
99:0e:d3:3e:b5:7d:df:19:cd:4c:56:fc:b1:5a:11:cb:3c:29:
db:43:48:2b:a0:50:0b:dc:40:6c:42:dc:9f:95:2f:fb:01:27:
ed:93:9f:08:ac:da:7c:40:b0:4a:60:7f:c5:c3:ca:6b:4c:b3:
a5:fe:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:15 2025 by rpki-client