Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/3789DF74EF5511EF8F011A48762E951A.roa
File: 3789DF74EF5511EF8F011A48762E951A.roa (raw, json)
Hash identifier: f4m5buYh/8DJ5uaosrbvaM1xVkpkwYi0oIPGW+L7gUk=
Subject key identifier: 7E:FF:A5:D0:EE:DE:68:B5:0B:69:16:9B:73:B0:39:9A:43:2A:77:D9
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 048F
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/3789DF74EF5511EF8F011A48762E951A.roa
Signing time: Thu 20 Feb 2025 06:37:55 +0000
ROA not before: Thu 20 Feb 2025 06:37:52 +0000
ROA not after: Fri 20 Feb 2026 06:37:52 +0000
asID: 9009
IP address blocks: 45.221.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 06:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167 (0x48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR
Validity
Not Before: Feb 20 06:37:52 2025 GMT
Not After : Feb 20 06:37:52 2026 GMT
Subject: CN=67b6cdc3-b00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:06:d3:a5:3e:a3:00:b0:4d:31:89:4b:a9:
64:fb:39:01:f9:f1:58:76:e2:86:c6:bd:b5:d3:49:
e8:04:70:7b:e5:21:ba:27:e5:02:7d:75:90:18:98:
3c:d0:28:ef:5f:90:31:24:f4:31:ac:0b:54:5f:93:
cf:ac:85:30:56:7f:6a:95:eb:ee:69:e1:e6:57:c1:
d6:d2:56:14:31:c2:15:36:ce:c3:19:82:13:80:a8:
02:bf:5c:23:f2:1c:bf:90:71:66:b1:c4:c4:cd:22:
a5:64:ab:9b:50:31:e5:f2:66:95:a1:b9:c2:07:1d:
e1:33:aa:12:e7:e6:f5:48:31:27:17:44:10:61:94:
64:50:f3:99:66:a1:e9:f1:1c:d0:b3:9e:3f:7f:e3:
df:c2:16:bd:d2:e8:03:06:af:1d:b4:53:c3:8e:ec:
3e:0b:2e:72:93:7f:fe:e5:9d:52:07:8a:12:e0:ae:
6a:0a:c7:04:e8:eb:ee:8d:b4:38:84:6a:4e:5a:3f:
47:2d:52:3c:47:8c:4d:73:b6:10:67:cd:7a:40:ab:
ce:12:cd:84:63:25:e8:c9:f0:21:5a:b1:f4:aa:b9:
03:d0:6c:d4:a8:38:29:5a:73:ee:61:55:6b:ce:3b:
3b:6a:76:e9:8b:3d:9c:e5:fc:d7:62:c3:84:3d:11:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FF:A5:D0:EE:DE:68:B5:0B:69:16:9B:73:B0:39:9A:43:2A:77:D9
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/3789DF74EF5511EF8F011A48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2a:86:0f:f3:10:d9:b5:01:45:31:fe:a8:87:0d:4a:16:44:
3d:61:57:17:6e:73:63:4f:10:1c:f8:a3:34:72:0a:cd:06:4d:
77:09:48:47:60:92:e1:f9:14:d8:59:11:8a:1f:d0:1b:4d:9d:
97:ce:9b:31:f4:c3:b3:3f:c6:0b:db:4a:39:e6:b4:8e:97:a6:
b1:16:b0:2a:41:45:de:2d:09:24:44:ac:07:44:ea:f8:18:d9:
2b:bc:cd:59:b3:fa:38:12:ce:2a:26:41:61:91:97:3d:42:3a:
a1:10:14:31:6e:f7:ab:25:25:f2:5c:e1:61:48:7f:b8:86:1c:
f7:52:16:70:82:a4:94:24:02:56:3f:9e:16:db:58:2b:80:af:
48:d6:fd:8c:a4:dd:f5:d6:f4:30:0b:09:48:d7:14:94:1b:05:
f4:4d:0c:e2:87:a9:19:cb:68:a4:43:c3:6e:67:05:6a:a1:5f:
2f:a6:19:eb:43:fa:8d:f0:73:8b:39:42:35:52:52:cc:d4:91:
e5:ac:9b:ba:e8:ae:31:0c:9b:ec:e5:d7:4d:7d:94:2b:52:ab:
e2:6d:3e:72:f5:cd:c6:2b:c7:25:c9:9a:81:ef:f0:f6:24:a9:
1b:c4:90:e2:9f:8b:62:3f:93:08:7e:cb:a8:37:72:73:78:dc:
fa:4a:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:57 2025 by rpki-client on console.sobornost.net