Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/6E2C543AC8CC11EF85B6E47C762E951A.roa
File: 6E2C543AC8CC11EF85B6E47C762E951A.roa (raw, json)
Hash identifier: DRTEeBsDlIychg2KcSpzRNImfDGdv7L1hTz3wspxAKE=
Subject key identifier: 8B:A8:68:B8:8D:29:26:6B:9A:1F:07:0A:2B:F9:BA:B5:B8:47:4A:D2
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 043F
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/6E2C543AC8CC11EF85B6E47C762E951A.roa
Signing time: Thu 02 Jan 2025 05:43:02 +0000
ROA not before: Thu 02 Jan 2025 05:42:58 +0000
ROA not after: Thu 01 Jan 2026 05:42:58 +0000
asID: 329007
IP address blocks: 45.221.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 06:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jan 2 05:42:58 2025 GMT
Not After : Jan 1 05:42:58 2026 GMT
Subject: CN=67762766-bef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:f8:42:b4:9f:d9:7f:b5:fd:f4:8c:a4:8a:
b8:2a:55:dc:3d:38:f8:04:ee:ce:a4:18:e5:03:13:
79:de:2b:38:ee:52:3e:aa:68:31:5b:44:12:fb:e2:
00:44:2e:2b:e4:91:5c:7c:ba:b1:2c:74:ef:a6:24:
78:55:b3:58:f4:ad:9d:3c:27:8b:b3:6b:55:89:24:
b3:80:c6:4c:b7:ec:b6:73:4f:ea:0e:6f:94:a0:6c:
60:e0:e5:44:57:74:4c:39:ac:02:93:15:2d:10:82:
84:5c:a9:bb:c5:b5:11:7c:cb:a4:c9:02:a2:30:60:
19:61:23:72:24:68:ed:b2:3f:01:b5:b8:5f:6b:cb:
8b:aa:55:b8:61:91:84:59:bd:f7:48:c1:1b:c2:25:
ee:d5:f3:69:21:2b:77:63:77:f4:55:b6:44:d0:9f:
f7:56:4c:d8:48:dc:c9:26:b4:2a:96:ba:f3:b0:41:
cd:ec:17:9c:9a:24:55:73:df:e2:a9:47:dd:0a:40:
a3:bf:c5:30:71:41:9a:b0:b9:1b:51:2c:9b:c7:20:
06:6a:94:c4:29:1c:9d:34:0e:38:92:a7:aa:2f:79:
b9:ee:13:d4:80:46:98:e9:f4:d5:68:1e:1c:82:60:
12:0d:80:28:ed:a9:ed:d8:b8:2e:18:32:c3:dc:6a:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:68:B8:8D:29:26:6B:9A:1F:07:0A:2B:F9:BA:B5:B8:47:4A:D2
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/6E2C543AC8CC11EF85B6E47C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:16:92:f0:1f:88:a5:9b:3d:d2:7c:43:4e:94:4a:35:ab:b9:
30:1b:69:61:aa:fa:5a:8f:ba:00:6f:37:26:3d:61:cf:78:42:
72:e7:6c:ab:a8:a7:18:e9:5c:d8:1b:12:5a:eb:94:df:b9:2f:
6e:09:3a:3f:20:57:2e:a2:af:64:07:27:7b:4e:52:d0:08:fa:
88:26:e0:79:5f:e8:4d:d1:a3:9b:c6:26:dd:fb:03:a3:d9:18:
52:cb:28:72:75:52:db:56:3a:8c:5d:c4:00:d1:80:65:77:4a:
47:4a:d2:64:78:61:56:0b:c2:1e:5e:58:db:ff:ec:96:bf:d1:
e1:46:b6:3a:fc:f5:17:e0:d3:c8:69:a5:58:1c:9f:b9:dd:16:
74:09:7c:7f:ac:7e:05:da:bb:87:17:50:70:e1:1e:96:75:3b:
a6:0c:56:01:84:9a:66:e3:96:fa:c9:75:8a:fd:ba:9e:87:05:
d7:81:4c:58:5d:c2:63:e4:a5:3b:b3:f6:a8:0d:66:e4:70:71:
db:14:91:24:c1:f7:97:a6:9f:a0:04:54:99:8d:73:f9:fd:72:
4f:fa:bc:61:94:b5:f6:13:0d:da:cf:ce:00:49:f1:4d:12:8b:
30:a6:1b:64:d9:83:dc:36:42:fc:a8:42:bb:31:dc:10:a8:7f:
06:78:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 25 03:42:56 2025 by rpki-client on console.sobornost.net