Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: gj5asdGYnfQp+KOekUnA4PfjKgtjopdwQdc1C0YNXGY=
Subject key identifier: D5:B5:90:20:E5:55:9D:CC:98:5A:3D:7A:F9:99:7D:22:C4:54:43:27
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 3BDC3AC0DB7F76BE8F1687585372626D3CB6CF79
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS21859.roa
Signing time: Tue 31 Dec 2024 04:12:59 +0000
ROA not before: Tue 31 Dec 2024 04:07:59 +0000
ROA not after: Tue 30 Dec 2025 04:12:59 +0000
asID: 21859
IP address blocks: 66.225.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:dc:3a:c0:db:7f:76:be:8f:16:87:58:53:72:62:6d:3c:b6:cf:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Dec 31 04:07:59 2024 GMT
Not After : Dec 30 04:12:59 2025 GMT
Subject: CN=D5B59020E5559DCC985A3D7AF9997D22C4544327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:03:43:e1:e2:20:a7:87:a3:bc:d1:d6:b5:
e2:08:c9:62:fa:47:cc:c6:d2:a6:49:71:c4:c1:c3:
a6:0c:bd:48:81:4c:6f:8a:3c:2c:0c:8a:3b:f8:ff:
5b:e9:73:1f:91:49:e4:c2:0f:29:32:9f:92:54:af:
1f:21:9f:54:51:43:a6:83:52:d0:b2:90:ca:08:9a:
e7:f6:24:a9:4b:ed:a8:77:e0:8e:80:73:2e:f1:00:
43:c8:76:96:b0:04:ba:09:26:c3:26:a4:8d:88:fc:
32:a2:ff:3e:cf:21:2c:62:90:d0:ab:84:60:ab:f1:
6f:fe:08:38:d3:d5:d8:89:d5:3c:e3:a1:3e:ea:4f:
10:c3:24:45:dc:c8:0f:90:16:34:37:d1:19:44:8c:
41:bf:5b:a7:2d:a2:87:38:3f:61:89:56:78:40:2b:
85:1e:29:de:54:89:bf:18:0b:e2:87:4a:e7:b6:db:
08:77:cc:75:a9:ec:9a:dd:1b:5c:49:8c:94:93:ad:
f0:90:8e:52:21:15:1f:0b:ff:7b:4f:e8:2a:62:6c:
7e:63:5d:25:4a:dc:79:89:fd:82:ac:ef:6d:9a:52:
de:14:bc:94:f6:a8:b4:b8:cb:4d:bd:e9:3f:ee:f0:
6e:ab:f6:e7:cf:29:73:46:e6:b8:fb:6a:34:5e:05:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B5:90:20:E5:55:9D:CC:98:5A:3D:7A:F9:99:7D:22:C4:54:43:27
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.234.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1a:f3:04:a4:b9:b9:4c:83:ff:17:91:3b:19:58:e9:e8:59:
ac:87:9e:f9:6e:f7:f1:09:55:45:94:b6:1e:08:f0:1f:98:b9:
05:ac:31:1e:09:ab:75:fc:c9:d8:25:2c:4a:0e:10:26:cd:20:
8d:77:32:82:a1:69:28:7a:9f:95:3e:f3:ea:d0:55:93:c7:d9:
2a:0f:76:37:7a:19:26:9b:43:a1:bf:21:1a:66:47:4e:b7:d3:
49:62:a5:26:f4:f0:c6:df:74:9c:ed:e0:c6:9f:ee:70:9d:49:
5a:22:68:f0:a6:59:b1:10:ee:31:2c:52:cd:18:2b:b0:60:92:
51:37:33:da:6b:29:8f:a3:62:64:0f:a0:39:ae:7c:80:aa:06:
36:dc:15:f5:5d:69:fc:5c:da:ca:bc:e9:38:a6:3e:de:cc:16:
68:58:40:a4:a3:44:a5:2a:64:3a:bf:1e:88:be:e0:4e:da:eb:
20:08:5e:fd:2c:85:36:e5:60:0a:ab:0b:18:84:18:22:a6:c3:
30:c1:e2:26:37:e8:19:e3:4a:e0:5a:60:48:78:b3:2c:52:14:
f4:04:a7:2e:34:88:89:1e:fe:87:fd:54:bc:3d:32:18:b5:4e:
2e:ae:bb:c1:5a:a5:8f:92:72:98:c2:ea:f1:71:1f:83:f1:8c:
aa:48:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:14 2025 by rpki-client