Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21641.roa
File: AS21641.roa (raw, json)
Hash identifier: c65sZklR7MhXb/2beMbnVKsmWXToI6n0NLJneVCXl1E=
Subject key identifier: 09:ED:D4:8B:7D:DD:EF:B0:45:AD:C7:7F:43:21:AD:E9:55:FC:E1:27
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 2374038D509460A4ACCF500B30E29D93EA627703
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21641.roa
Signing time: Sun 19 Jan 2025 01:25:39 +0000
ROA not before: Sun 19 Jan 2025 01:20:39 +0000
ROA not after: Sun 18 Jan 2026 01:25:39 +0000
asID: 21641
IP address blocks: 23.95.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 09:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:74:03:8d:50:94:60:a4:ac:cf:50:0b:30:e2:9d:93:ea:62:77:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jan 19 01:20:39 2025 GMT
Not After : Jan 18 01:25:39 2026 GMT
Subject: CN=09EDD48B7DDDEFB045ADC77F4321ADE955FCE127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:0a:d4:73:b5:11:63:32:70:c3:10:20:94:
00:17:76:a8:fc:77:4d:1f:ac:43:e4:ac:fe:dd:13:
0a:1a:79:43:9b:67:4a:6c:c2:06:9c:80:19:58:65:
aa:c4:30:b3:e7:ea:f2:da:47:8f:f9:da:58:ab:b0:
ea:d5:df:e9:58:59:4d:3d:d8:54:b5:ed:f5:87:0f:
fa:91:0b:93:10:3a:4f:78:bf:04:e5:e1:29:8e:56:
c5:2f:33:78:7d:2b:c2:5f:50:9a:e3:70:c7:b0:2f:
4d:81:8c:af:af:5e:60:9c:6a:bf:27:9c:a4:c9:69:
ff:cd:95:43:29:70:d4:1b:f8:25:fa:b2:ae:fa:6d:
17:f8:52:10:fc:47:8d:b4:00:b5:42:4f:05:12:41:
59:6f:27:62:a9:4d:30:57:8c:b9:eb:4a:3f:a2:6b:
ea:e3:b7:64:53:3f:2f:4d:f9:d9:09:f6:48:e6:c5:
a0:fe:97:3b:ae:b5:3f:a0:ea:50:7e:8b:88:c9:7a:
0f:0b:ab:fe:84:90:39:7b:08:ac:51:f3:56:cb:94:
8c:2a:d2:aa:ab:01:a7:60:86:06:cc:19:f0:4c:1e:
83:0e:49:6d:70:b0:d7:bd:ab:bc:25:e1:3b:fd:97:
87:43:6f:28:71:fd:a7:8e:84:d5:b6:30:82:58:26:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:ED:D4:8B:7D:DD:EF:B0:45:AD:C7:7F:43:21:AD:E9:55:FC:E1:27
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:1a:74:fd:40:a4:87:55:b1:2d:4d:02:61:7b:24:69:56:73:
4a:39:a9:fb:fa:83:69:15:c8:04:71:4b:5e:55:99:c6:7b:dc:
46:ef:b6:13:9c:e4:ad:47:2c:ed:38:f7:25:ef:95:0b:71:88:
26:0d:21:94:82:11:7d:d8:e6:56:d6:68:26:42:f6:a8:7b:06:
da:e5:bd:d5:45:b0:d3:19:68:77:f4:49:07:e7:f7:98:30:36:
f5:e2:e9:10:a1:5c:2c:24:1e:f3:aa:3e:7e:40:9a:9d:26:99:
3b:33:87:19:f2:24:84:e1:2f:0d:ff:95:f7:70:1f:a3:1e:98:
59:73:28:b8:b8:a3:c4:d9:5b:1b:58:8a:46:3d:9b:ea:d4:c2:
7d:de:41:2f:30:01:7a:ac:b8:f6:51:72:2b:07:99:ec:76:90:
17:63:3a:bd:e1:6d:73:16:5c:1d:b0:42:53:3b:d1:d8:d2:79:
eb:0f:88:5b:47:8e:b5:8e:cb:0b:46:78:59:b2:c9:53:dc:00:
39:31:a9:75:ae:ca:c1:0c:89:7c:ec:06:57:09:05:8d:c1:c1:
a1:8c:50:6b:65:8c:ec:ca:27:dc:60:7e:de:6a:e2:af:84:79:
88:6f:69:17:70:d7:6b:e6:03:01:44:c8:61:28:3f:b2:b9:2c:
f8:89:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:44 2025 by rpki-client