Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215287.roa
File:                     AS215287.roa (raw, json)
Hash identifier:          QclJmu049oYhrv0OI3fuTXb4PfMQw9AON2uMvBSawzk=
Subject key identifier:   E5:6B:ED:CB:25:21:13:7F:76:90:BC:7F:08:9B:E4:A2:C8:E1:90:A9
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       351BF0C5EC9BAB67D6890AC9B6DDC663A116ACC8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215287.roa
Signing time:             Sun 27 Apr 2025 15:56:07 +0000
ROA not before:           Sun 27 Apr 2025 15:51:07 +0000
ROA not after:            Sun 26 Apr 2026 15:56:07 +0000
asID:                     215287
IP address blocks:        74.50.7.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 27 May 2025 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1b:f0:c5:ec:9b:ab:67:d6:89:0a:c9:b6:dd:c6:63:a1:16:ac:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 27 15:51:07 2025 GMT
            Not After : Apr 26 15:56:07 2026 GMT
        Subject: CN=E56BEDCB2521137F7690BC7F089BE4A2C8E190A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:62:8a:27:35:69:bc:a1:40:d6:c2:68:d3:
                    83:af:bd:cf:95:04:e0:68:97:41:fd:50:e2:98:70:
                    56:6e:f5:3b:8f:16:46:ef:b1:c9:d2:98:90:9b:48:
                    42:5d:47:7d:b0:92:c8:3b:ad:49:74:c1:5e:12:25:
                    7b:82:de:bc:4a:05:6e:d2:7e:1b:40:b1:46:9c:1d:
                    76:d9:47:3b:a8:50:70:ee:db:5a:3d:20:63:a3:54:
                    07:9f:60:1b:71:38:0d:75:75:46:02:32:e0:bc:9c:
                    a2:84:93:8c:e0:af:df:e2:6a:75:2f:9c:77:e2:8b:
                    96:a8:93:5f:bf:a1:bf:53:c4:3a:7a:2c:96:03:67:
                    ef:62:be:38:c0:76:e2:0c:6d:be:9a:9d:d7:2b:64:
                    3d:b9:6d:62:7e:87:f5:6e:d9:19:ea:6d:15:0f:41:
                    f2:62:9d:8a:4b:0d:75:5b:76:4a:91:3d:5e:0e:b1:
                    eb:e0:aa:86:15:2e:93:70:cb:f7:e0:ff:9b:33:5d:
                    2b:36:93:1c:d5:e6:16:1d:4e:b4:f1:92:a6:00:e0:
                    e7:d5:6b:08:fa:24:aa:68:3d:42:f6:26:af:5a:23:
                    6b:7b:45:ea:56:e4:31:b3:8a:8f:eb:1c:cc:34:69:
                    bd:6c:b8:3c:52:9d:39:61:61:74:ee:c1:42:8b:df:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6B:ED:CB:25:21:13:7F:76:90:BC:7F:08:9B:E4:A2:C8:E1:90:A9
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:74:d0:8b:fd:ff:d1:fc:d6:1a:4d:3d:6e:02:3e:30:99:
         49:76:6b:5f:0c:4f:da:7b:46:0d:49:07:68:17:4c:b6:fe:60:
         8b:97:94:ac:8c:98:db:86:17:b4:73:ce:c7:d3:83:79:02:57:
         70:18:d0:95:7d:c2:af:8d:60:e1:22:b8:33:99:b0:7d:43:01:
         2e:65:d2:bf:d5:a3:aa:bb:44:a9:c8:49:fd:75:0a:5f:37:3b:
         77:bb:a3:e6:66:2c:32:c0:83:27:92:0c:80:5e:dd:df:76:54:
         87:ef:48:ff:eb:af:9f:3c:87:43:44:82:a8:a0:78:e8:69:a9:
         94:2a:14:86:9a:08:30:dd:03:55:49:d3:59:ee:e5:97:f1:84:
         de:05:44:b9:68:39:a9:6d:f6:af:32:08:df:3b:70:a4:bb:ed:
         6d:00:45:ec:f4:fe:1f:ae:2e:a0:48:2a:0a:83:94:06:9b:56:
         9c:9a:17:c1:d7:ad:df:f9:47:48:5d:7e:21:3c:ee:7d:07:92:
         a8:b7:6b:bc:9c:5c:e2:8f:32:12:bf:6d:5c:d0:81:65:3c:1b:
         e9:7c:6f:7e:94:15:8a:ea:7e:f1:d5:b4:c9:d5:65:b6:a4:8e:
         32:29:f7:33:64:90:6e:94:56:2b:07:02:9b:7a:0e:fa:5e:1d:
         50:e8:77:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:57 2025 by rpki-client