Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0074EC4A242A11F09C2498E4DAE4EC9C.roa
File: 0074EC4A242A11F09C2498E4DAE4EC9C.roa (raw, json)
Hash identifier: gZWZlPs5rihes7W1M3IfdOIdQzDjk8xrCHvjqNOXLJs=
Subject key identifier: A9:E8:39:D2:25:7E:AB:C6:5E:ED:6F:1F:83:D8:73:4D:B3:1D:B1:CF
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 050B
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0074EC4A242A11F09C2498E4DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:12:07 +0000
ROA not before: Mon 28 Apr 2025 12:12:02 +0000
ROA not after: Tue 28 Apr 2026 12:12:02 +0000
asID: 329007
IP address blocks: 45.221.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 09:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1291 (0x50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Apr 28 12:12:02 2025 GMT
Not After : Apr 28 12:12:02 2026 GMT
Subject: CN=680f7097-0cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:26:20:cb:f5:2b:87:7f:5f:48:bc:fb:ff:24:
46:4e:cb:19:36:7c:15:90:54:22:1f:8f:3e:23:7c:
cb:50:25:a5:96:5e:0c:41:e3:a9:81:1f:08:05:af:
d0:46:f2:f5:9e:9b:d7:62:3b:5d:54:8d:c9:ed:6b:
8a:7b:f8:08:09:7d:88:77:56:9d:f7:c1:ae:da:0b:
6d:fe:a4:d4:27:98:51:cf:b0:00:e7:b2:62:04:0a:
21:89:9a:ec:6e:12:0d:ed:58:29:d8:aa:e0:c4:b5:
06:14:35:ea:2a:9d:a0:9e:e7:02:34:0d:78:81:f0:
e9:22:12:0d:00:b6:33:6f:a0:99:4e:89:78:e3:fc:
5a:fc:63:0e:c9:6d:41:12:28:8f:5b:23:3a:15:a0:
2c:f4:ad:a3:c3:89:36:18:69:60:c5:5b:15:29:49:
5b:ab:8d:56:94:31:09:30:b2:70:8e:d0:a7:b4:c7:
88:7e:6e:63:95:ef:78:08:93:b7:a8:69:d7:cb:91:
66:f5:44:0f:8f:84:55:f2:88:a3:84:01:21:76:cf:
b3:f5:bf:13:31:74:6a:41:c9:24:ec:f3:cc:89:c3:
d5:cb:48:84:aa:7c:90:7c:b6:2a:2d:7d:a9:7f:68:
fa:c1:a2:1e:96:cd:0a:01:df:34:17:bb:e7:f4:db:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E8:39:D2:25:7E:AB:C6:5E:ED:6F:1F:83:D8:73:4D:B3:1D:B1:CF
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0074EC4A242A11F09C2498E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.70.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:7e:0b:b3:d9:1c:b6:67:25:ee:b8:f0:aa:bf:6e:4d:95:cc:
37:23:e9:09:a3:eb:1b:3d:1c:8b:da:81:d7:83:c9:5d:e9:0c:
42:d1:3f:18:d5:8a:f5:ab:a5:5f:2d:16:4b:91:f9:14:74:be:
06:00:8c:0e:a3:06:aa:26:02:0a:a5:11:d6:1c:bf:f0:8f:25:
e4:1c:c2:26:af:72:3f:ec:3f:da:86:81:71:59:64:59:af:40:
7b:e7:bc:70:1a:4e:9b:8f:0e:3e:23:c6:ad:76:88:74:e9:46:
e2:ee:e2:87:e8:6d:ab:9e:52:88:98:e3:fa:cc:80:5b:8f:9a:
7f:bb:1c:56:7b:5f:e2:29:07:9a:44:6b:4d:a1:b3:5b:aa:08:
bf:19:0d:35:f8:00:e0:d5:c3:3b:ab:09:c7:50:4c:d2:40:71:
f5:97:66:b8:98:2c:dd:84:95:18:74:29:91:48:38:d0:2a:b2:
ee:df:8f:8c:ac:85:fa:34:a0:fb:cc:81:a8:bc:50:de:40:64:
20:58:07:17:63:ac:50:db:6e:ba:6c:d3:a7:88:b4:6c:aa:4f:
07:10:28:96:30:ce:05:42:05:ea:fc:42:2b:81:7e:17:89:fa:
aa:74:b7:71:64:82:ec:c1:4f:10:9b:15:4b:59:bd:c1:fe:93:
27:89:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:03:38 2025 by rpki-client