Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/6CBE089CEF5411EFBDBC8643762E951A.roa
File: 6CBE089CEF5411EFBDBC8643762E951A.roa (raw, json)
Hash identifier: R2JRGfSVUnB1fAbhVD+tIK9051vTycCptX/9qQNcqmY=
Subject key identifier: 73:1A:FE:AC:81:B8:4A:51:8D:8A:68:39:81:EB:6E:09:70:2B:3E:F5
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0489
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/6CBE089CEF5411EFBDBC8643762E951A.roa
Signing time: Thu 20 Feb 2025 06:32:15 +0000
ROA not before: Thu 20 Feb 2025 06:32:11 +0000
ROA not after: Fri 20 Feb 2026 06:32:11 +0000
asID: 9009
IP address blocks: 45.221.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 06:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161 (0x489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR
Validity
Not Before: Feb 20 06:32:11 2025 GMT
Not After : Feb 20 06:32:11 2026 GMT
Subject: CN=67b6cc6f-9df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:04:51:4c:34:a1:b2:18:87:59:eb:ad:cb:
27:0b:f6:9c:d2:50:b9:e5:2e:17:00:20:b4:08:bd:
18:29:5c:d9:1a:14:bd:19:1f:ce:24:f2:c9:82:56:
35:08:06:44:f8:26:b6:dd:12:1e:a5:e9:85:28:26:
9a:70:73:5e:9d:85:e6:2e:4b:a5:fa:a4:ca:a5:a1:
3a:75:be:01:5f:e7:a9:df:cf:ef:8b:97:fb:60:4f:
35:31:3c:c4:10:29:3a:08:07:0b:ad:e0:96:20:40:
04:e2:04:1f:fa:62:13:7a:3b:ba:fd:bc:a1:ad:0e:
fc:7c:8f:5b:10:d3:79:ee:da:cb:7f:c7:46:21:0c:
f4:88:a5:77:03:66:44:74:90:4d:48:88:09:5a:8c:
79:10:1b:f4:b4:42:08:7c:7e:22:8f:21:5d:77:1c:
9b:ed:36:05:23:cc:1a:1c:94:04:84:99:e0:26:3c:
33:3b:5b:eb:f4:07:9b:fc:a7:cb:19:b3:67:dd:f9:
3b:31:fa:fe:ad:0d:07:fb:c3:81:20:ef:5d:e6:f8:
22:ea:29:e2:5e:1c:df:ca:91:ea:eb:ef:26:26:99:
e1:ce:30:f2:54:0a:16:03:c4:af:3c:4d:cc:67:4c:
d6:32:c2:b9:fc:1d:39:f3:89:2c:ee:3a:39:d3:25:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1A:FE:AC:81:B8:4A:51:8D:8A:68:39:81:EB:6E:09:70:2B:3E:F5
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/6CBE089CEF5411EFBDBC8643762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.65.0/24
Signature Algorithm: sha256WithRSAEncryption
55:67:24:86:41:72:03:c5:e0:91:95:c7:60:bd:ea:54:8a:45:
a0:bb:c6:e7:38:c8:51:92:f1:b6:2a:d5:a9:8f:f9:0e:40:a1:
27:69:68:ac:a5:08:c5:97:be:28:77:e4:02:0f:7f:3e:c0:65:
4b:b5:f4:78:7d:3d:90:f5:7d:84:a8:bd:ee:37:10:8c:bd:b3:
a2:43:23:be:cf:ce:36:5a:79:c3:25:4d:a9:60:63:2d:62:b0:
4e:f8:c1:c2:71:c8:a6:85:43:28:f5:18:cf:93:77:7e:5b:ff:
77:76:a0:53:2a:45:49:ec:1f:31:19:82:d4:13:78:d5:44:95:
78:d8:74:64:60:3a:cc:6c:0c:95:b3:dc:76:8a:0f:69:fa:b0:
ac:26:67:3c:1c:d0:2f:55:e5:0e:54:23:25:9a:5b:a9:4b:23:
3b:07:28:3a:bf:e1:f9:13:c2:a4:48:75:05:06:0c:ca:23:74:
a1:38:59:d5:90:e8:4a:1b:4d:1c:24:d1:10:79:b4:9f:86:27:
7f:82:93:f7:38:55:24:b3:3b:b9:11:42:3e:62:62:f9:20:c4:
6f:a3:a4:c8:68:6b:58:4e:4e:27:72:e2:6b:0f:b7:9f:88:31:
ea:05:78:d0:a2:3e:e9:9c:14:47:c7:62:80:87:93:42:ce:66:
fc:57:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:57 2025 by rpki-client on console.sobornost.net