Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/B6CD124C07BA11F082A03477762E951A.roa
File:                     B6CD124C07BA11F082A03477762E951A.roa (raw, json)
Hash identifier:          sZpgCGFEx8hZHKnWD+vFCEnA4fL81w/JA50Ht/00j4g=
Subject key identifier:   B0:65:C6:BB:A0:C2:4D:BD:CB:21:44:CB:F2:10:D0:0E:1D:66:C0:29
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       04CD
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/B6CD124C07BA11F082A03477762E951A.roa
Signing time:             Sun 23 Mar 2025 07:44:56 +0000
ROA not before:           Sun 23 Mar 2025 07:44:51 +0000
ROA not after:            Sun 22 Mar 2026 07:44:51 +0000
asID:                     996
IP address blocks:        45.221.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 29 Mar 2025 07:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR
        Validity
            Not Before: Mar 23 07:44:51 2025 GMT
            Not After : Mar 22 07:44:51 2026 GMT
        Subject: CN=67dfbbf8-420d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:86:5f:ac:88:68:0d:37:ec:74:f1:d5:df:
                    cb:25:96:66:63:05:52:22:9f:d7:d6:f5:ed:82:44:
                    fd:e9:5a:02:be:0e:b7:95:6e:8b:d1:98:04:be:64:
                    07:18:b7:8d:27:1f:60:5b:64:b2:34:9c:25:96:2f:
                    16:df:cd:c0:07:8d:6b:37:10:f1:37:92:f1:9a:9c:
                    8d:e3:59:ff:8b:cf:44:4a:69:2b:e4:43:94:e8:b3:
                    cb:63:fb:f5:a0:b2:87:51:74:69:1c:f5:9e:bf:c8:
                    37:07:a8:bb:e7:a6:8a:c6:6b:09:a6:21:b5:8b:fc:
                    57:be:a4:e5:6c:73:ff:48:e1:75:4f:3a:2e:06:ce:
                    b3:28:04:f7:1c:2c:38:fa:d7:e6:93:ec:17:79:83:
                    e0:24:19:2c:53:79:c4:ee:df:f6:8a:16:b1:cf:eb:
                    e9:b0:3f:cf:4e:3c:56:8c:3e:c6:b4:02:4c:eb:e1:
                    ac:63:7b:8f:e6:8b:21:f1:a8:87:17:5c:0b:24:e3:
                    97:ec:a5:f5:56:50:37:8c:f0:da:ee:82:23:f4:de:
                    40:3b:0f:c7:d0:45:25:c4:25:c1:0e:0e:4a:35:d0:
                    0c:a3:e2:6a:cd:20:ee:e7:ca:a0:09:02:e6:46:50:
                    26:15:c8:c5:6c:42:db:e3:f6:f1:54:7e:53:66:8c:
                    54:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:65:C6:BB:A0:C2:4D:BD:CB:21:44:CB:F2:10:D0:0E:1D:66:C0:29
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/B6CD124C07BA11F082A03477762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:76:6d:32:5c:a2:ad:65:10:07:0c:6d:21:13:63:4c:5a:
         96:66:55:bf:7d:64:3d:e5:4f:3e:ad:4e:9c:93:b8:08:76:dd:
         a3:b7:48:21:45:c2:19:8b:b3:10:1e:db:31:14:04:80:be:12:
         ac:d6:35:74:e2:8e:5e:67:ff:25:40:75:2d:e2:2c:7e:7d:5c:
         af:4c:5d:17:90:80:04:f7:56:e0:ec:5a:c8:99:cb:bf:1a:25:
         03:0c:83:48:d1:ef:bb:32:4e:3d:a1:6e:ad:52:e6:84:80:dd:
         22:c5:a3:1d:28:46:19:e0:63:8e:a7:2d:ca:2b:05:d7:4b:a8:
         7f:28:4a:0e:39:9a:da:f8:93:bd:f8:0c:06:f8:5c:a5:ec:77:
         63:1b:53:6f:13:1e:b3:4b:b9:dc:f6:ae:a8:79:fd:18:0e:fc:
         14:2b:64:5d:ee:8f:5e:94:a7:8e:f9:d8:af:42:54:75:c7:ec:
         6a:65:1f:4a:ea:76:5c:f2:c4:db:2d:ec:3d:05:2d:23:49:95:
         9c:73:78:6c:86:c6:e8:25:d0:5d:51:1b:7f:f4:84:28:08:6d:
         d1:f2:aa:83:61:11:4b:9b:ff:a1:18:3e:db:43:16:b9:b5:a3:
         e8:54:3e:57:02:61:76:40:8d:45:82:3d:7e:fc:bd:e8:ce:52:
         0c:ff:1b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 29 09:24:29 2025 by rpki-client on console.sobornost.net