Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/5DE9D426EF5511EF91BC5248762E951A.roa
File: 5DE9D426EF5511EF91BC5248762E951A.roa (raw, json)
Hash identifier: xwx+4ZLj4oFwADtTAZ5QWdKHS9dM5YSMqvW8rY76HpI=
Subject key identifier: 43:22:CD:61:BE:F1:06:4A:0E:DA:6E:74:3E:ED:D0:A5:83:6E:4A:47
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0497
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/5DE9D426EF5511EF91BC5248762E951A.roa
Signing time: Thu 20 Feb 2025 06:39:00 +0000
ROA not before: Thu 20 Feb 2025 06:38:56 +0000
ROA not after: Fri 20 Feb 2026 06:38:56 +0000
asID: 9009
IP address blocks: 45.221.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 05:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR
Validity
Not Before: Feb 20 06:38:56 2025 GMT
Not After : Feb 20 06:38:56 2026 GMT
Subject: CN=67b6ce04-cfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:a6:16:37:5e:2e:d0:8e:5a:e5:69:3c:78:
27:e9:a4:59:80:f6:6a:13:4c:4a:ff:8b:38:90:5d:
aa:66:24:51:69:6a:c4:4f:50:a5:6e:00:97:c6:91:
bf:6f:f6:b5:f7:6c:2e:67:7a:fc:70:03:f4:31:08:
32:a3:3d:c1:77:d9:4a:4b:77:5f:a3:39:27:bb:e4:
60:c3:4d:a1:9a:2b:34:68:c9:88:a9:d4:82:c4:8c:
33:88:47:8a:d6:cb:ca:9c:97:3a:f2:4b:16:4c:28:
d7:8e:9b:86:70:68:a5:73:b3:c7:eb:c5:de:73:06:
7d:46:59:23:68:d0:67:a3:13:a1:72:7a:b5:7c:9f:
9b:91:01:44:08:5e:ec:7a:31:0b:5d:81:da:f3:d1:
3c:40:59:33:74:2e:4b:0b:fd:73:f5:30:63:29:1e:
31:1b:f0:0f:ac:54:64:8a:d7:d6:80:4f:df:4a:70:
4e:15:c8:04:47:1d:b8:bb:26:b5:42:d4:e6:2e:9c:
08:43:c9:29:cc:97:f9:a9:97:d1:6d:66:ec:ba:f7:
42:67:6b:b3:fd:e1:ce:64:ea:9b:a0:ae:4f:00:2f:
11:55:97:48:44:75:58:e5:bb:da:51:be:f6:da:a0:
9f:c7:f5:20:ee:b6:20:e2:d6:7e:0a:0a:05:bb:4c:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:22:CD:61:BE:F1:06:4A:0E:DA:6E:74:3E:ED:D0:A5:83:6E:4A:47
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/5DE9D426EF5511EF91BC5248762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
75:fa:ab:81:c8:fd:f6:d6:c7:a1:9e:0c:ee:9d:3b:1d:14:cd:
f9:e8:16:7f:69:7a:98:62:93:6c:ce:8a:b0:da:1b:c2:19:f8:
ae:0f:f3:8f:79:4d:f9:96:51:7c:3c:27:ac:1c:fd:c2:d6:32:
07:35:8d:a5:98:23:86:58:1e:e0:b4:94:1d:19:ec:00:70:2b:
57:b0:11:f6:32:fe:27:29:f5:d0:08:63:a4:df:e8:b8:9c:b3:
a0:ec:bd:ca:8d:22:58:2b:7e:a6:e6:84:ed:96:f5:cd:89:19:
90:e1:65:bc:5d:11:2d:e1:ba:7f:df:83:7f:0d:29:8e:66:8b:
25:78:9c:b0:81:23:f3:29:8b:17:3e:f0:e6:62:ba:07:5e:69:
2f:4b:3c:ce:2b:55:bb:71:c6:f2:83:1f:82:ed:4f:ff:af:32:
4b:8d:86:a6:c8:14:02:4a:03:b8:34:d1:bc:bb:47:f7:0b:e9:
d6:b4:58:f0:98:ff:d9:e0:55:d5:52:18:a9:f9:39:61:73:7b:
0a:a4:73:61:94:8b:7e:aa:7b:b1:9d:d6:44:d8:52:1d:57:5e:
e1:e4:1d:5c:65:4a:04:e3:1b:f5:38:a8:61:08:fd:15:ce:9d:
02:92:c3:0b:4c:4b:ea:9d:2f:a5:41:c7:ca:d3:83:31:65:42:
6c:3c:cc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 21 08:14:21 2025 by rpki-client on console.sobornost.net