Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/FBA83E6015E211F0B67B79136EB8BCC6.roa
File: FBA83E6015E211F0B67B79136EB8BCC6.roa (raw, json)
Hash identifier: uhSL4jkUs7xVttiSHB0uvrTto1Ko9qBo7u0BG4k/YQY=
Subject key identifier: 0A:C4:94:DB:4B:2E:79:87:D8:C4:9B:17:20:6F:64:00:65:10:39:49
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 04EF
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/FBA83E6015E211F0B67B79136EB8BCC6.roa
Signing time: Thu 10 Apr 2025 08:08:28 +0000
ROA not before: Thu 10 Apr 2025 08:08:23 +0000
ROA not after: Fri 10 Apr 2026 08:08:23 +0000
asID: 329007
IP address blocks: 45.221.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 14:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Apr 10 08:08:23 2025 GMT
Not After : Apr 10 08:08:23 2026 GMT
Subject: CN=67f77c7c-9bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:87:bf:4f:57:99:10:28:cf:af:cf:35:39:
9e:a5:43:90:91:fc:73:97:9a:db:b8:73:67:59:22:
bd:13:1e:00:12:52:af:10:80:33:18:09:fb:d9:2f:
c1:72:85:4d:3e:75:50:b4:a7:fd:2c:f9:7e:cf:20:
93:30:02:77:1f:40:c2:68:0a:c7:57:ac:57:ec:99:
b7:5c:1d:7f:dd:45:73:f1:9c:56:e3:0a:92:bc:fa:
f8:26:03:6c:c4:3c:f4:b0:40:49:26:34:3c:ed:60:
cd:87:05:2e:c2:9d:6f:33:86:09:8c:a7:cb:c7:35:
f4:bc:4e:dc:92:67:cf:64:4d:94:82:fe:ff:e3:43:
ee:ee:53:21:cc:ec:f4:bc:80:ef:e3:ed:47:9c:10:
e2:4e:c1:40:6b:8a:0b:eb:0f:4e:6a:75:b7:a2:63:
39:9a:0f:b9:03:41:dc:a1:c9:34:c3:15:39:d4:a0:
e2:9b:5c:c1:8c:6b:ba:e1:0b:d0:76:29:d2:04:1a:
70:54:d9:c3:fb:a6:40:da:29:de:ac:3d:d0:77:15:
d4:41:75:f8:00:ce:e1:10:25:8c:f6:4e:d6:26:9d:
6b:ac:74:24:9f:f3:45:3a:8e:39:06:9e:6a:85:0b:
7a:56:da:88:11:62:02:28:4a:c1:3c:6a:0f:5f:7e:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:94:DB:4B:2E:79:87:D8:C4:9B:17:20:6F:64:00:65:10:39:49
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/FBA83E6015E211F0B67B79136EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:92:07:ff:83:9d:76:5d:9b:5c:73:ca:b6:d0:c7:73:69:52:
8d:3f:48:ae:77:92:dc:e5:06:4b:cf:ca:1b:35:5c:fe:3d:aa:
2a:6c:26:6f:fb:d2:1b:93:f9:d9:78:3f:06:f3:c5:1c:dd:53:
b8:f6:86:6d:28:d3:a9:f4:40:93:b8:85:51:b3:df:fa:fa:8d:
61:c6:df:93:b8:9b:cb:5f:dc:a6:67:89:c4:4c:43:a4:11:9f:
14:5b:e7:50:f0:cd:9c:10:68:f5:7c:20:bf:f6:4b:b8:e6:3f:
ff:14:6e:fd:40:81:15:37:8f:4d:43:5a:27:7c:fd:31:79:c6:
34:73:5a:fa:39:0c:99:8b:d1:03:e1:76:24:9e:e5:2b:e7:c2:
2b:61:e4:65:7e:20:37:0d:15:97:b6:20:e6:38:04:11:be:aa:
3d:76:49:35:86:27:ee:45:08:65:ad:dd:9d:03:b6:ff:72:83:
12:9e:b2:0e:c2:bb:f6:13:f6:d8:47:00:b2:60:aa:34:50:78:
a0:94:b8:03:e5:e8:84:a9:2f:85:ce:d8:8b:34:cf:bc:d3:08:
56:48:07:13:92:90:aa:81:ec:bb:d5:6d:51:90:29:c1:dd:8c:
b3:55:cf:42:82:5e:ab:04:51:9e:5a:ba:ad:99:59:95:9e:07:
14:10:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:14 2025 by rpki-client on console.sobornost.net