Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/F3703576030F11F0B6A8BDA3762E951A.roa
File: F3703576030F11F0B6A8BDA3762E951A.roa (raw, json)
Hash identifier: oD9jldIbtM3elB6bcPcjE3CWZ9EQThccErv51hxtPPY=
Subject key identifier: 01:52:FB:88:34:23:A3:A4:60:23:23:66:9C:11:18:2A:93:4E:6B:05
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 04C1
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/F3703576030F11F0B6A8BDA3762E951A.roa
Signing time: Mon 17 Mar 2025 09:12:29 +0000
ROA not before: Mon 17 Mar 2025 09:12:25 +0000
ROA not after: Tue 17 Mar 2026 09:12:25 +0000
asID: 9009
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Mar 2025 13:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217 (0x4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR
Validity
Not Before: Mar 17 09:12:25 2025 GMT
Not After : Mar 17 09:12:25 2026 GMT
Subject: CN=67d7e77d-a00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:7d:65:67:06:1a:c6:60:a2:51:8f:72:c1:
c2:99:62:36:14:98:8d:ba:b0:00:9b:ab:c7:8e:83:
16:a9:90:ba:2c:bf:06:e2:c3:52:5a:24:ca:02:48:
a4:ed:43:db:40:37:ca:70:b0:6a:1d:e1:20:9b:ac:
f4:6a:b7:8e:e5:64:86:99:0e:b9:e5:f7:61:bd:56:
a4:c9:64:0e:49:23:e7:3e:08:f7:d8:60:22:58:95:
2e:61:2f:b7:c7:95:0b:9c:e4:3f:7c:80:c2:83:e4:
fb:16:e0:c0:db:db:20:f8:2d:17:5d:13:f2:b7:b4:
c0:36:7b:bb:7c:b7:b5:3a:27:48:de:31:1d:97:7e:
b5:b8:b7:41:89:a6:ab:87:94:5d:fc:49:14:e3:b3:
31:fb:e9:96:9d:e2:9a:5f:25:86:8f:5f:6e:79:ba:
58:1e:0a:bb:54:df:0e:85:b4:a5:30:69:1a:18:ac:
81:b0:66:a4:83:22:e3:cd:b4:0c:12:50:34:20:23:
73:5b:dd:1f:72:ab:4c:a4:65:c2:90:14:94:5b:bf:
4e:a5:52:4b:25:9a:60:6b:dc:75:90:df:4f:bd:d5:
8c:3a:51:14:5d:83:ec:d4:45:e1:f9:04:ca:f4:a1:
be:79:23:31:21:dc:06:d0:b0:6b:7f:8d:75:e4:50:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:52:FB:88:34:23:A3:A4:60:23:23:66:9C:11:18:2A:93:4E:6B:05
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/F3703576030F11F0B6A8BDA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a5:b2:e4:8d:b1:c6:12:7e:9c:54:3e:18:18:6c:7b:e8:45:
76:57:8f:b0:a4:8c:77:52:90:b4:9e:87:99:2a:db:31:63:eb:
2d:61:5e:fb:6e:15:87:39:e7:3c:dd:5e:b7:58:bf:04:a0:1e:
cb:41:3b:a1:e7:3b:54:bd:f7:08:dd:d5:ae:6a:4d:a1:3e:0a:
5a:a1:da:10:c0:da:f1:13:39:8a:1a:ed:a4:93:ce:86:97:49:
2a:b0:9c:5f:a2:96:2a:a6:4a:93:85:aa:06:71:56:f5:9c:e4:
56:8e:42:69:db:b0:c6:56:5e:18:0a:7a:44:20:a8:3f:c1:65:
5d:f5:57:93:b5:5a:cd:46:54:47:95:c0:21:68:15:7f:47:6b:
de:61:41:5e:99:7f:ff:b1:b4:1e:26:35:05:0b:d5:0b:cb:0c:
71:c5:37:2b:c3:85:28:16:55:58:11:26:80:a1:f5:f4:28:33:
00:74:28:13:c9:f0:17:75:ca:85:81:c7:a8:f5:39:28:03:c6:
8d:90:bb:74:7b:f0:61:8d:18:3b:50:46:b3:08:4e:ad:00:c4:
bc:fb:29:a4:07:a0:16:e3:91:54:9b:39:c4:4a:bd:96:6a:41:
7f:74:c1:e8:84:03:c1:37:e7:1b:35:6e:bc:b0:ab:53:99:52:
62:7e:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 22 20:09:02 2025 by rpki-client on console.sobornost.net