Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0BE16202EF5511EFAF7D4746762E951A.roa
File: 0BE16202EF5511EFAF7D4746762E951A.roa (raw, json)
Hash identifier: Bm7hTYvYn5cxeNJ8OcJEMmnFEUFuO2OtYDCOkz7RjnU=
Subject key identifier: 6C:04:1B:0E:8B:0F:14:6C:85:82:62:1B:6D:B1:99:54:D0:EA:F6:E8
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 048B
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0BE16202EF5511EFAF7D4746762E951A.roa
Signing time: Thu 20 Feb 2025 06:36:42 +0000
ROA not before: Thu 20 Feb 2025 06:36:39 +0000
ROA not after: Fri 20 Feb 2026 06:36:39 +0000
asID: 9009
IP address blocks: 45.221.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 06:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1163 (0x48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR
Validity
Not Before: Feb 20 06:36:39 2025 GMT
Not After : Feb 20 06:36:39 2026 GMT
Subject: CN=67b6cd7a-55c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:d5:e6:93:17:8e:e1:44:6c:c0:ad:2b:47:
4c:7e:c5:94:97:8e:84:46:10:67:bd:2e:4f:9a:9f:
1a:15:d1:61:a4:50:f5:b7:2d:60:b7:ae:c3:a1:f0:
0c:ab:13:21:8d:c7:87:da:6e:4f:28:35:c4:a6:7b:
a2:82:f3:93:a7:b3:9c:6a:76:d5:a8:e5:ca:a5:8d:
a7:af:92:b0:43:77:57:3b:91:b8:87:be:00:eb:4a:
3b:7c:da:be:8d:f0:47:9a:16:71:9d:fc:b2:16:bc:
f2:dc:f7:99:57:89:c0:31:13:e8:32:c8:4d:a7:72:
a0:3c:70:05:15:88:cb:68:a6:3d:29:d7:c8:e2:11:
e9:0d:f3:37:ff:54:04:90:98:fb:43:60:7f:67:ed:
14:4d:b4:84:2c:f4:38:50:03:7d:b2:d3:7d:82:cf:
2d:2a:8f:3d:5c:20:96:63:89:e8:eb:b9:26:20:b4:
c1:27:6a:d3:c3:28:1e:a1:75:21:34:50:18:52:56:
19:cf:f8:15:5e:ca:5c:c3:da:33:2c:e2:ac:de:49:
a0:33:7f:c8:ea:4e:36:10:92:f3:2e:72:78:2e:4f:
96:43:a7:58:2f:2c:7f:14:64:a9:3e:ef:5c:e7:8c:
a6:0c:8c:91:b9:4f:13:7d:cd:dc:37:a2:cf:5f:c5:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:04:1B:0E:8B:0F:14:6C:85:82:62:1B:6D:B1:99:54:D0:EA:F6:E8
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0BE16202EF5511EFAF7D4746762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.66.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3d:82:01:f9:aa:67:bb:ea:c0:93:24:29:8e:3d:c6:c3:57:
77:d4:93:52:1a:3f:79:80:71:48:9b:20:fb:a9:74:4e:03:f0:
0d:a4:c6:ee:a8:d8:e0:18:2e:57:fd:51:2f:7b:46:41:d3:62:
9a:b2:4d:ac:41:24:8f:49:4d:9c:97:e9:c7:5d:2f:45:aa:bf:
09:25:90:09:5d:5a:4d:5a:df:10:10:9c:3d:00:c4:28:18:b0:
c8:e5:b2:7a:47:ca:64:4d:17:69:63:81:88:45:6b:f9:c2:2c:
6b:bc:51:35:42:a6:2c:e4:79:31:1e:13:12:56:b9:b1:77:a6:
ba:c6:67:52:28:fa:15:66:76:64:49:c9:59:58:55:5f:1c:d3:
97:f7:a7:04:bf:f6:39:53:cf:0c:90:14:ac:b6:c9:88:55:ae:
91:0b:7f:81:05:a1:fa:04:66:41:7a:6e:1b:68:43:b0:48:4e:
04:83:84:35:db:2f:b9:d7:d3:df:7f:e7:13:68:ce:2c:45:90:
9a:19:a8:51:27:6f:f9:16:c2:84:31:5d:e5:8f:7b:cb:91:b2:
bb:17:6a:02:26:e9:23:9b:e2:30:1f:63:32:17:a3:aa:1d:00:
20:26:ff:16:65:b5:de:1b:ef:22:d7:4f:a3:7a:71:22:4f:11:
ad:f3:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:57 2025 by rpki-client on console.sobornost.net