This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203230343733.roa
File:                     3231322e3131352e3132362e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          nTPtgb7UO7hzGsnMtIgGvivq0m2QUwkCnoyMiIBWrYA=
Subject key identifier:   3B:5B:58:C9:ED:97:F4:79:31:9D:C0:58:12:AA:15:63:FE:38:5B:1E
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       3E6633EF79CC963D04F02C45FBCA2B2F4DC20FBE
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203230343733.roa
Signing time:             Thu 26 Jun 2025 19:12:28 +0000
ROA not before:           Thu 26 Jun 2025 19:07:28 +0000
ROA not after:            Thu 25 Jun 2026 19:12:28 +0000
asID:                     20473
IP address blocks:        212.115.126.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 19 Jul 2025 00:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:66:33:ef:79:cc:96:3d:04:f0:2c:45:fb:ca:2b:2f:4d:c2:0f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jun 26 19:07:28 2025 GMT
            Not After : Jun 25 19:12:28 2026 GMT
        Subject: CN=3B5B58C9ED97F479319DC05812AA1563FE385B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:0b:b3:35:ca:77:78:a0:42:f5:d3:fc:1b:
                    1d:f7:4f:0f:02:99:fd:54:f2:36:9c:e6:20:7f:0a:
                    ac:b4:0c:48:84:2c:02:f8:28:9a:24:a7:33:3c:65:
                    a4:cd:e8:cb:f2:31:fd:f3:88:f5:d5:16:5b:1d:82:
                    74:6d:8b:e5:91:fc:1a:91:40:5d:d9:c6:0b:19:8f:
                    d7:a2:f6:4c:01:58:60:8c:7e:d0:b6:4d:c9:0b:7c:
                    40:5e:73:eb:1e:67:0a:09:5d:be:48:c2:42:3c:99:
                    a3:59:b6:25:c9:5c:03:23:e6:bf:29:d3:42:99:19:
                    01:ff:64:6d:e2:85:c7:48:84:0f:72:53:22:2a:42:
                    84:8f:55:25:70:73:d1:a7:5e:5f:3a:a1:c8:ca:e9:
                    15:8a:09:fa:38:8a:80:db:f3:fa:c1:5b:12:11:09:
                    5f:43:6c:65:a8:03:da:35:45:3a:3c:b5:6f:f8:c9:
                    a2:71:04:34:2e:ba:f5:25:f3:80:86:ec:c8:a7:e9:
                    29:bb:37:6e:09:03:08:3e:79:fa:6e:ef:d4:4c:23:
                    cf:fb:cf:78:02:8f:44:fa:1d:3d:91:a4:aa:39:dc:
                    c6:51:37:e8:5e:57:81:59:29:4a:7f:a5:e1:ca:0c:
                    3e:d6:8b:62:24:7a:2a:81:84:9f:67:ed:92:0a:53:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5B:58:C9:ED:97:F4:79:31:9D:C0:58:12:AA:15:63:FE:38:5B:1E
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b1:41:f0:34:6d:4a:eb:1b:33:43:8a:66:d7:8e:2d:3b:57:
         06:6f:68:34:73:bc:4e:48:6a:37:b8:e1:5c:3c:45:6f:57:97:
         35:ab:18:07:31:5b:ae:ab:ac:d3:7a:55:6a:61:f5:d1:93:16:
         65:58:c9:92:0b:c1:af:a1:19:5f:c9:0f:ec:43:28:ac:c7:76:
         20:03:0f:fe:84:df:53:4a:5e:72:37:60:5c:8c:8f:fd:0a:3f:
         09:44:b8:f6:94:4c:20:80:41:27:4f:ba:a3:73:3c:bd:78:66:
         c6:3b:55:b9:ec:fe:57:90:ee:63:6d:6e:f9:64:aa:a8:3c:e5:
         0f:7c:4a:ae:8f:3d:07:04:e2:cd:da:32:d1:3c:41:36:44:0d:
         f7:7a:d2:37:f1:4f:fa:33:d1:77:e5:ff:fd:07:95:09:40:22:
         a8:1b:19:91:5c:1d:3c:9f:19:4e:5b:6e:3a:c1:f8:02:ea:f7:
         64:ae:72:9c:f9:0c:87:61:26:de:d7:5c:69:c4:1d:68:7e:33:
         d8:cf:7e:ec:01:cd:75:39:33:4c:ef:fc:9d:6c:b1:f9:6c:5e:
         4a:03:8b:35:b8:a9:d4:53:2d:70:83:89:65:59:56:1b:d9:be:
         ae:1e:18:4f:3d:59:a0:3b:b5:fc:bc:b9:41:63:5c:fd:f0:e8:
         c8:77:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----