Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
File: AS16909.roa (raw, json)
Hash identifier: IOzswfO7CEl0otmppqE6krTzm2GpKRGqNb4hj2JIQIs=
Subject key identifier: 46:E8:A9:CE:49:DE:5F:95:E5:0E:D6:F5:A0:C9:CC:36:80:42:51:04
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7D32C464B2D4584BDE0FBFB8A1E616C7D4003EC3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
Signing time: Wed 25 Jun 2025 16:06:00 +0000
ROA not before: Wed 25 Jun 2025 16:01:00 +0000
ROA not after: Wed 24 Jun 2026 16:06:00 +0000
asID: 16909
IP address blocks: 2a14:7581:3500::/40 maxlen: 48
2a14:7581:3506::/48 maxlen: 48
2a14:7581:350a::/48 maxlen: 48
2a14:7581:3510::/48 maxlen: 48
2a14:7581:3513::/48 maxlen: 48
2a14:7581:3519::/48 maxlen: 48
2a14:7581:351d::/48 maxlen: 48
2a14:7581:3523::/48 maxlen: 48
2a14:7581:3524::/48 maxlen: 48
2a14:7581:3526::/48 maxlen: 48
2a14:7581:352e::/48 maxlen: 48
2a14:7581:3530::/48 maxlen: 48
2a14:7581:3532::/48 maxlen: 48
2a14:7581:353e::/48 maxlen: 48
2a14:7581:3543::/48 maxlen: 48
2a14:7581:3548::/48 maxlen: 48
2a14:7581:3557::/48 maxlen: 48
2a14:7581:355e::/48 maxlen: 48
2a14:7581:3560::/48 maxlen: 48
2a14:7581:3561::/48 maxlen: 48
2a14:7581:3562::/48 maxlen: 48
2a14:7581:3565::/48 maxlen: 48
2a14:7581:3569::/48 maxlen: 48
2a14:7581:356d::/48 maxlen: 48
2a14:7581:3573::/48 maxlen: 48
2a14:7581:3575::/48 maxlen: 48
2a14:7581:357a::/48 maxlen: 48
2a14:7581:358a::/48 maxlen: 48
2a14:7581:358c::/48 maxlen: 48
2a14:7581:358d::/48 maxlen: 48
2a14:7581:358e::/48 maxlen: 48
2a14:7581:359a::/48 maxlen: 48
2a14:7581:359d::/48 maxlen: 48
2a14:7581:35a0::/48 maxlen: 48
2a14:7581:35a6::/48 maxlen: 48
2a14:7581:35ab::/48 maxlen: 48
2a14:7581:35ac::/48 maxlen: 48
2a14:7581:35b3::/48 maxlen: 48
2a14:7581:35b7::/48 maxlen: 48
2a14:7581:35bd::/48 maxlen: 48
2a14:7581:35c2::/48 maxlen: 48
2a14:7581:35c7::/48 maxlen: 48
2a14:7581:35ca::/48 maxlen: 48
2a14:7581:35d2::/48 maxlen: 48
2a14:7581:35d4::/48 maxlen: 48
2a14:7581:35dc::/48 maxlen: 48
2a14:7581:35e1::/48 maxlen: 48
2a14:7581:35e2::/48 maxlen: 48
2a14:7581:35e3::/48 maxlen: 48
2a14:7581:35e9::/48 maxlen: 48
2a14:7581:35f1::/48 maxlen: 48
2a14:7581:35f4::/48 maxlen: 48
2a14:7581:35f8::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jun 2025 08:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:32:c4:64:b2:d4:58:4b:de:0f:bf:b8:a1:e6:16:c7:d4:00:3e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 25 16:01:00 2025 GMT
Not After : Jun 24 16:06:00 2026 GMT
Subject: CN=46E8A9CE49DE5F95E50ED6F5A0C9CC3680425104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:d7:af:4b:67:8e:4c:5a:2f:5e:59:6f:6f:
04:8c:f5:2c:7b:c6:c8:3e:cb:d8:a4:c0:72:40:d1:
84:ed:60:f2:6c:98:1a:26:8a:2a:3a:96:19:95:5d:
53:ef:f5:ed:e5:30:c7:85:0d:8d:a2:d2:31:dc:1f:
7e:f2:52:41:22:a2:19:a6:2a:76:d5:7c:fa:21:88:
c1:b6:66:23:67:15:a4:92:b2:2e:1d:05:c1:d3:cf:
c8:3a:c8:b3:5f:6b:40:1a:6f:61:4b:a4:9a:9a:43:
31:b5:92:56:0f:85:bb:20:22:dc:a8:08:0f:31:12:
7c:92:c6:6e:bb:1b:ea:53:37:a5:89:aa:e2:f1:4c:
a1:dd:7e:72:8d:f1:d2:6f:ba:66:06:be:aa:5c:8c:
bd:9e:45:fa:23:f6:c2:42:7e:c3:21:e4:31:de:c6:
bf:d7:f8:a7:9f:c1:5e:7a:a9:5d:ef:5c:92:0f:eb:
ee:69:3a:f3:4e:4e:73:29:31:8f:9f:d8:da:2a:79:
fd:a6:e6:c4:ef:63:80:eb:85:ed:41:bb:55:e1:f6:
dc:ce:c9:4a:6a:1c:27:f7:25:f3:c1:f6:5a:e1:3b:
af:cf:45:99:2d:8e:a3:31:b1:e7:21:dd:38:7f:63:
94:11:13:5f:de:cc:37:88:76:0c:53:a5:85:31:66:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E8:A9:CE:49:DE:5F:95:E5:0E:D6:F5:A0:C9:CC:36:80:42:51:04
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3500::/40
Signature Algorithm: sha256WithRSAEncryption
04:60:02:61:c0:c5:96:a1:af:81:2b:47:10:dd:6e:b4:ff:37:
04:a3:26:8d:97:a7:1d:e6:b9:82:db:7d:63:0b:85:47:b9:6f:
6b:68:5e:69:46:85:f5:ff:cf:f7:d6:0f:1e:86:be:51:75:33:
f1:f1:40:73:4e:59:e1:18:5d:98:bd:30:fe:b0:0f:97:33:6e:
5a:fa:d2:98:fd:59:28:b3:bf:f5:a4:c0:e4:08:f9:e6:db:40:
09:c4:61:f7:40:f0:9d:06:7a:0e:60:3b:e0:a5:eb:8b:0b:70:
b0:8f:4f:2b:01:cb:66:c7:4b:45:2e:18:8a:f6:c9:ab:54:c9:
17:83:d2:19:3e:47:bd:be:b6:b8:e1:c5:14:ae:4b:fe:1a:cb:
55:40:a0:90:a8:b9:64:38:31:d8:79:b0:96:86:67:90:df:c3:
b3:71:d2:d4:48:80:af:a8:a6:27:48:cd:ed:ed:0b:0d:82:8d:
56:77:f5:74:8c:c4:ac:a7:a6:88:99:a6:9e:a5:b0:54:27:d6:
02:7c:05:36:13:da:4b:5c:c9:26:1d:5e:f9:1c:e2:c7:38:be:
89:36:dc:7f:e1:f9:ae:24:bb:d0:a5:e7:3e:25:3e:f0:70:6a:
53:67:d5:8a:c0:1c:0b:e2:d3:a1:8c:14:6a:3f:38:99:c1:fe:
00:90:fe:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:24:37 2025 by rpki-client