Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E2078AA20BD11F09F24057CDAE4EC9C.roa
File: 7E2078AA20BD11F09F24057CDAE4EC9C.roa (raw, json)
Hash identifier: hMCGWBrzzi0kNHpc5X3vcxrIefsHBEbwAsKgkO0EmiE=
Subject key identifier: A7:25:CC:C9:CA:BA:A3:27:46:EB:32:48:FB:68:E7:0D:86:0D:E7:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E2078AA20BD11F09F24057CDAE4EC9C.roa
Signing time: Thu 24 Apr 2025 03:37:49 +0000
ROA not before: Thu 24 Apr 2025 03:37:43 +0000
ROA not after: Sun 27 Apr 2025 03:37:43 +0000
asID: 39600
IP address blocks: 45.194.68.0/22 maxlen: 24
45.194.72.0/22 maxlen: 24
45.194.76.0/22 maxlen: 24
45.197.196.0/22 maxlen: 24
45.197.200.0/22 maxlen: 24
45.197.204.0/22 maxlen: 24
45.197.224.0/22 maxlen: 24
45.197.228.0/22 maxlen: 24
45.197.232.0/22 maxlen: 24
45.197.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 01:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85589 (0x14e55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 03:37:43 2025 GMT
Not After : Apr 27 03:37:43 2025 GMT
Subject: CN=6809b20d-6623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:5e:74:e3:da:21:7a:c8:0c:c1:53:14:85:
81:4a:e9:ca:30:7c:ee:6b:4c:9a:14:92:3b:3a:64:
27:7c:f1:51:01:1d:19:8c:00:9b:41:bd:aa:2e:a6:
48:3b:f6:c5:f3:47:4c:d2:ff:54:4c:68:7f:6b:4a:
f5:5d:d4:be:7d:87:bd:f0:dc:33:73:0f:24:53:12:
6d:86:71:b0:de:36:65:11:15:fe:11:58:ef:3e:ed:
58:68:9d:0b:b8:ae:8e:75:9a:cb:2d:8f:16:15:b1:
c3:04:e9:56:14:b1:29:43:3d:ed:58:96:9e:a1:7d:
9d:5e:25:e4:90:a4:07:7b:85:c5:a8:06:83:80:1c:
83:88:a1:2a:6f:3a:44:5f:1d:b4:c7:07:9f:a8:b1:
3c:8a:15:31:03:56:e0:70:41:ab:25:23:be:98:c7:
1b:01:05:3e:74:1e:12:b0:5e:1d:ba:62:8c:3d:a6:
45:c7:fb:ed:73:cd:cd:84:61:55:0c:b9:b7:26:06:
b8:b6:01:c7:36:ba:ab:f9:29:f6:fb:01:05:de:1e:
38:b3:2e:0e:a1:25:4e:07:22:45:0c:2d:e6:76:a9:
7d:bc:af:5d:d4:82:8c:5b:3d:d2:f4:48:2e:cb:a5:
65:4a:3e:45:bf:6f:41:4f:a4:7a:91:6d:81:74:29:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:25:CC:C9:CA:BA:A3:27:46:EB:32:48:FB:68:E7:0D:86:0D:E7:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E2078AA20BD11F09F24057CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.68.0-45.194.79.255
45.197.196.0-45.197.207.255
45.197.224.0/20
Signature Algorithm: sha256WithRSAEncryption
51:91:0f:67:9f:53:9a:c7:b4:69:7c:79:1c:31:af:bf:04:d8:
02:77:a1:54:e5:81:ad:f7:1d:d0:b9:1f:13:bd:dc:0c:71:46:
22:c6:13:25:f6:cb:23:dd:b0:02:c3:89:b3:aa:ed:d2:e9:79:
26:8c:39:52:19:76:6f:e0:da:7d:27:34:1c:c7:c2:2f:d9:2c:
38:ca:6e:16:8f:e6:80:1a:cb:cf:53:f5:a2:93:30:8a:98:32:
fb:6b:02:30:5d:46:39:0f:c9:22:ff:47:d4:9a:58:b4:2e:32:
2e:2b:97:3e:c9:35:9d:af:3b:7c:c1:5a:dd:47:8d:71:7b:c1:
d1:df:75:c4:e4:ac:5e:4e:57:f2:33:9b:a2:00:4f:d1:3b:9f:
3a:26:23:ad:8f:51:76:1f:ea:6f:4e:6e:57:95:f0:5e:7b:03:
6a:23:2a:92:e6:f8:4f:ea:db:95:14:fb:51:b5:fc:aa:87:1c:
8d:0b:10:44:d7:03:19:63:b5:1b:48:86:8d:47:67:83:33:2c:
00:d3:d0:e8:5e:dc:b0:8d:aa:f6:e1:53:78:b5:63:3d:cb:79:
e9:7a:31:dc:a2:7f:4f:27:59:f2:b8:27:94:a6:7e:fa:1a:0a:
6f:ce:8c:ad:3d:b9:8a:67:b6:bd:89:d2:75:a3:ed:71:e7:47:
15:b9:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:51 2025 by rpki-client on console.sobornost.net