Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: 50mYu/xCpR9Y2ENG9E45gvScow5SzuWQRNvS0/e0gbg=
Subject key identifier: E1:47:3F:C8:AC:AA:BC:15:5A:79:7B:1F:CA:B9:C9:19:0E:DE:92:ED
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 6F6A0B303D33C8912FDA0352E2BAF7D967D9E09F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa
Signing time: Thu 16 Jan 2025 09:22:06 +0000
ROA not before: Thu 16 Jan 2025 09:17:06 +0000
ROA not after: Thu 15 Jan 2026 09:22:06 +0000
asID: 36530
IP address blocks: 74.50.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6a:0b:30:3d:33:c8:91:2f:da:03:52:e2:ba:f7:d9:67:d9:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jan 16 09:17:06 2025 GMT
Not After : Jan 15 09:22:06 2026 GMT
Subject: CN=E1473FC8ACAABC155A797B1FCAB9C9190EDE92ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7a:1b:fa:91:7a:55:73:3a:c0:8d:db:22:4e:
92:31:95:a2:4c:db:df:b2:83:56:3b:d0:42:98:97:
44:15:cb:07:91:3e:c9:a3:36:0c:43:b5:88:da:e1:
43:84:8d:90:a9:27:ab:ad:b1:69:67:85:45:a4:1c:
95:80:42:77:67:2b:f0:64:94:76:e0:a2:f6:11:97:
38:58:2e:be:5f:c2:55:e4:37:20:16:25:f0:0d:46:
95:f7:f4:48:16:41:01:be:b0:79:31:53:a8:1c:b5:
2e:58:80:f7:3d:ea:19:a9:49:2a:93:1c:24:cd:27:
cd:fb:75:ff:25:f6:26:b4:e1:16:d9:21:b6:ed:b9:
0b:dd:ae:45:f4:4a:38:8a:66:55:bc:dd:62:c7:12:
74:6f:89:aa:50:ab:78:18:0a:e5:78:03:31:01:d1:
04:41:2a:8f:ac:bb:6e:93:73:35:c9:30:75:5b:88:
39:ab:2c:36:3a:a2:c9:1d:7c:79:63:f1:94:aa:7b:
17:92:8e:4b:48:ba:61:6b:57:98:ca:1f:95:81:0f:
12:11:95:e8:ae:46:c5:50:2b:1f:0e:07:88:a8:ec:
69:c0:50:02:3b:de:57:14:88:16:77:0d:c2:32:e7:
5f:f5:75:e3:80:5f:5c:94:1f:2e:7d:0f:da:72:9e:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:47:3F:C8:AC:AA:BC:15:5A:79:7B:1F:CA:B9:C9:19:0E:DE:92:ED
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f7:ff:40:34:86:75:44:70:62:8d:c0:a1:98:1a:a0:01:ea:
c8:82:4b:3a:37:22:ac:af:e6:26:0c:99:59:22:44:40:88:da:
68:73:ee:a8:43:9f:6f:bf:af:73:8f:ef:40:6b:af:96:52:b1:
95:2a:f6:52:dc:29:e5:e1:21:a1:ac:98:81:75:67:3d:ac:12:
b8:6c:de:cd:f5:0f:d7:f8:53:ab:17:03:fd:60:11:5e:1e:8e:
ab:13:fa:82:b0:c9:ce:de:04:b2:e1:57:f9:39:d7:7b:0d:96:
23:8e:90:0e:f8:77:85:08:bc:30:e2:55:d8:af:e4:1b:a6:23:
27:70:f6:1b:da:35:70:9e:7d:c2:74:4c:c2:aa:56:81:81:d2:
34:36:31:20:75:1a:0a:82:35:3c:3e:8d:ab:78:ee:6e:45:1b:
e4:1c:2a:2a:3b:02:d8:7f:04:4f:78:a5:82:44:c4:fc:2c:10:
a2:94:cd:09:d3:63:28:f0:2d:db:f1:27:09:0d:dc:99:90:27:
a5:97:50:dd:62:1f:13:0f:6a:53:22:f0:73:66:48:06:e1:a0:
ef:76:f9:b1:ad:c4:c3:ab:bf:7d:df:f2:1b:be:25:da:8b:28:
65:d6:5d:e1:e4:2d:5d:66:8d:39:e8:29:53:fd:74:e4:13:c9:
eb:98:a3:93
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUb2oLMD0zyJEv2gNS4rr32WfZ4J8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMTE2MDkxNzA2WhcNMjYwMTE1MDkyMjA2
WjAzMTEwLwYDVQQDEyhFMTQ3M0ZDOEFDQUFCQzE1NUE3OTdCMUZDQUI5QzkxOTBF
REU5MkVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Hob+pF6VXM6
wI3bIk6SMZWiTNvfsoNWO9BCmJdEFcsHkT7JozYMQ7WI2uFDhI2QqSerrbFpZ4VF
pByVgEJ3ZyvwZJR24KL2EZc4WC6+X8JV5DcgFiXwDUaV9/RIFkEBvrB5MVOoHLUu
WID3PeoZqUkqkxwkzSfN+3X/JfYmtOEW2SG27bkL3a5F9Eo4imZVvN1ixxJ0b4mq
UKt4GArleAMxAdEEQSqPrLtuk3M1yTB1W4g5qyw2OqLJHXx5Y/GUqnsXko5LSLph
a1eYyh+VgQ8SEZXorkbFUCsfDgeIqOxpwFACO95XFIgWdw3CMudf9XXjgF9clB8u
fQ/acp5nfQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFOFHP8isqrwVWnl7H8q5yRkO
3pLtMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzM2NTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjIAMA0GCSqGSIb3DQEBCwUAA4IB
AQA19/9ANIZ1RHBijcChmBqgAerIgks6NyKsr+YmDJlZIkRAiNpoc+6oQ59vv69z
j+9Aa6+WUrGVKvZS3Cnl4SGhrJiBdWc9rBK4bN7N9Q/X+FOrFwP9YBFeHo6rE/qC
sMnO3gSy4Vf5Odd7DZYjjpAO+HeFCLww4lXYr+QbpiMncPYb2jVwnn3CdEzCqlaB
gdI0NjEgdRoKgjU8Po2reO5uRRvkHCoqOwLYfwRPeKWCRMT8LBCilM0J02Mo8C3b
8ScJDdyZkCell1DdYh8TD2pTIvBzZkgG4aDvdvmxrcTDq7993/IbviXaiyhl1l3h
5C1dZo056ClT/XTkE8nrmKOT
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:22 2025 by rpki-client