Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/407B91F4EF5511EF85F92748762E951A.roa
File:                     407B91F4EF5511EF85F92748762E951A.roa (raw, json)
Hash identifier:          Ud/00HDOd8Xtq5ohqpBg8MPzuIVBmQ/xSFbJ0rxPzzE=
Subject key identifier:   B7:52:98:87:C9:C9:B7:4B:4B:2B:66:12:33:14:EB:B6:4C:53:2A:54
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       0491
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/407B91F4EF5511EF85F92748762E951A.roa
Signing time:             Thu 20 Feb 2025 06:38:10 +0000
ROA not before:           Thu 20 Feb 2025 06:38:07 +0000
ROA not after:            Fri 20 Feb 2026 06:38:07 +0000
asID:                     9009
IP address blocks:        45.221.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Mar 2025 09:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR
        Validity
            Not Before: Feb 20 06:38:07 2025 GMT
            Not After : Feb 20 06:38:07 2026 GMT
        Subject: CN=67b6cdd2-a413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:f2:c0:00:72:2e:26:2c:44:15:e7:d8:b5:
                    ab:19:9a:89:13:30:24:ec:7d:75:46:e6:6d:e5:3f:
                    9b:c8:95:42:81:fd:a0:29:e9:eb:89:a2:d0:88:29:
                    9c:80:69:22:44:e0:76:fd:ef:84:7e:f6:23:ad:bf:
                    8c:a2:33:f9:a1:c6:b0:97:8c:c9:ba:5a:f5:63:9d:
                    15:d4:df:16:02:44:61:83:c3:3a:30:c2:bd:ee:30:
                    71:10:29:e2:f1:40:d1:14:97:f8:be:ea:be:70:7f:
                    38:f8:96:75:35:43:a5:e2:61:3c:03:52:3d:42:f4:
                    2f:64:51:c8:c6:72:5b:54:5d:9d:f1:38:75:74:10:
                    3d:3b:5a:35:28:19:6e:e1:0c:1d:73:e3:50:d9:79:
                    74:bb:1f:4b:5f:fb:75:21:24:d4:1e:16:a0:c1:81:
                    35:fc:f8:18:21:17:ba:08:0d:c8:86:6e:56:2c:06:
                    90:b8:b8:be:49:be:7d:ed:af:02:0f:91:a0:71:70:
                    9c:4a:76:45:73:b8:78:f0:a7:6e:31:63:c2:8a:d5:
                    5d:91:bd:d4:4c:72:98:2f:a7:9e:cf:35:f7:2c:6d:
                    d9:ab:4d:6f:6f:d4:21:f6:71:f3:3f:e2:2e:82:99:
                    22:bd:72:78:07:ac:68:92:b0:94:bc:84:53:d8:9e:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:52:98:87:C9:C9:B7:4B:4B:2B:66:12:33:14:EB:B6:4C:53:2A:54
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/407B91F4EF5511EF85F92748762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:3d:39:7b:ef:3a:4c:ce:a1:1f:b4:d9:00:ba:42:1f:9a:f0:
         19:19:67:3f:fa:70:be:07:52:8d:6c:18:6e:3f:2d:fc:57:af:
         b3:5d:28:92:9c:60:83:d9:bd:89:3f:ed:5e:6b:7c:9a:c7:1e:
         8c:4e:35:e1:4a:d2:b5:67:c2:b4:a3:aa:bb:41:32:1b:00:80:
         5b:fc:3d:35:b2:4e:79:44:0b:b8:53:66:db:55:58:01:28:8e:
         fe:43:af:21:ba:2f:b8:90:2b:05:ba:18:4a:e7:1d:4e:50:e6:
         a5:fa:2e:32:55:cb:92:e5:0f:7c:44:0b:f3:d6:98:6f:2f:f8:
         06:68:1b:6e:e4:70:79:83:76:47:73:77:87:e9:bf:88:e8:87:
         8b:07:3e:94:66:26:6c:88:f8:eb:b9:bf:e6:61:a9:3a:c9:03:
         fe:57:a5:fd:5f:48:e2:5c:bd:7d:e8:8e:4a:c0:93:d0:2a:b0:
         53:14:38:0d:f6:25:11:16:7a:5f:db:84:df:2d:07:03:a5:b3:
         c9:c7:a7:6b:d6:fc:da:2b:bd:52:1a:15:bd:c9:2c:12:b8:de:
         b3:ba:7e:0b:55:53:ca:9f:e1:00:c3:61:64:22:c6:9f:a2:5c:
         15:eb:e2:62:ef:0f:ff:e2:f3:21:5d:11:7a:a8:04:be:ee:d9:
         78:9c:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 17 10:36:11 2025 by rpki-client on console.sobornost.net