Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/33896484518511F08F7EFE91DAE4EC9C.roa
File: 33896484518511F08F7EFE91DAE4EC9C.roa (raw, json)
Hash identifier: iukSRkJlTmOR3YjSIQ5QAGnHNDFoLnWXXKiuFrTRCkU=
Subject key identifier: C9:8B:12:55:13:A3:02:3F:C7:E5:56:1E:17:C3:E1:77:E6:D9:07:F4
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0582
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/33896484518511F08F7EFE91DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 05:28:19 +0000
ROA not before: Wed 25 Jun 2025 05:28:14 +0000
ROA not after: Wed 24 Jun 2026 05:28:14 +0000
asID: 834
IP address blocks: 45.221.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 06:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jun 25 05:28:14 2025 GMT
Not After : Jun 24 05:28:14 2026 GMT
Subject: CN=685b88f3-f184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:4a:f9:81:1b:39:45:c6:29:69:a7:ec:27:
4f:5f:ed:e3:16:79:c1:b5:9f:91:53:cb:a1:a0:ea:
4e:72:a5:5b:41:d5:b7:0e:1f:9e:d0:60:c8:87:54:
d3:d4:59:1c:1a:6f:44:47:02:69:7d:13:36:72:72:
3f:ae:7b:34:23:68:88:ce:14:ae:28:a4:ab:78:ab:
ce:e7:1c:d2:03:47:e0:00:d7:52:13:b1:61:b6:5b:
23:cd:7f:40:ae:c6:13:dc:05:f9:e5:d8:1b:fc:3b:
95:c6:9f:14:ed:92:b3:52:5b:3c:7e:00:a1:ff:b8:
14:8b:4d:b0:55:31:da:5c:52:0b:c8:0a:7c:74:f6:
4d:6a:4c:8d:cc:32:47:ac:f4:8c:4f:ed:17:e6:72:
a1:35:9b:05:02:22:7f:41:32:0f:28:75:c2:d1:d2:
44:95:da:05:6f:af:05:17:fb:4e:1e:31:7f:ab:8c:
46:54:13:18:0d:2e:95:fc:19:85:00:c6:13:c3:c5:
00:ae:35:d8:86:5d:04:a1:c2:9e:ca:73:89:cc:a9:
ca:3e:78:82:a1:35:2b:4b:4a:a7:59:03:b9:36:a5:
fe:41:3f:3e:4f:d8:74:fc:c5:35:cf:8c:dd:0d:b0:
db:7e:dc:ee:26:d7:58:c2:b4:92:d2:05:59:4c:96:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8B:12:55:13:A3:02:3F:C7:E5:56:1E:17:C3:E1:77:E6:D9:07:F4
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/33896484518511F08F7EFE91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c1:2b:57:b3:e2:59:83:b6:1d:0f:2f:93:41:fa:ac:6c:89:
11:84:5c:40:91:fb:50:d8:67:4d:87:9c:45:c6:fe:61:c0:e6:
ad:b7:8b:fe:1e:51:22:45:74:59:df:ae:e8:1f:bf:65:f5:a9:
e4:4e:f5:6d:a9:d7:6b:ca:09:28:b0:fc:68:bb:8c:ef:6f:30:
bb:21:43:ad:06:d5:3b:e9:d4:9a:84:3f:21:ed:e0:98:04:bf:
cf:08:ed:72:2d:15:c4:b6:2b:44:8c:0b:df:97:8a:bc:26:0a:
3c:17:23:85:2f:cb:6c:fd:89:b0:eb:e9:de:1e:89:95:6f:68:
b5:35:15:d5:21:a6:5b:69:93:09:8d:5e:f0:26:67:84:2e:f4:
45:77:c8:78:a8:6e:05:2a:3c:0d:fb:87:4f:54:25:f7:7d:53:
37:92:a9:cc:db:9d:7f:4e:a2:32:e8:1f:4d:0b:03:19:96:f8:
f9:e7:82:51:35:3b:8d:46:94:e1:3e:9d:53:a2:aa:01:98:19:
3c:5d:5a:80:16:ee:3e:5f:31:f6:dd:bd:ec:c4:4d:13:86:ee:
a5:e9:b0:f4:1a:5a:50:f6:a0:13:ec:fb:7c:34:ec:b3:6c:89:
82:07:e3:99:ad:ee:21:2d:20:2c:78:fc:bb:1f:2e:3a:fa:5f:
bb:b4:33:f8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNTA2MjUwNTI4MTRaFw0yNjA2MjQwNTI4MTRaMBgxFjAU
BgNVBAMTDTY4NWI4OGYzLWYxODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXBkr5gRs5RcYpaafsJ09f7eMWecG1n5FTy6Gg6k5ypVtB1bcOH57QYMiH
VNPUWRwab0RHAml9EzZycj+uezQjaIjOFK4opKt4q87nHNIDR+AA11ITsWG2WyPN
f0CuxhPcBfnl2Bv8O5XGnxTtkrNSWzx+AKH/uBSLTbBVMdpcUgvICnx09k1qTI3M
Mkes9IxP7RfmcqE1mwUCIn9BMg8odcLR0kSV2gVvrwUX+04eMX+rjEZUExgNLpX8
GYUAxhPDxQCuNdiGXQShwp7Kc4nMqco+eIKhNStLSqdZA7k2pf5BPz5P2HT8xTXP
jN0NsNt+3O4m11jCtJLSBVlMliRtAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUyYsS
VROjAj/H5VYeF8Phd+bZB/QwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3LzMzODk2NDg0NTE4NTExRjA4RjdFRkU5MURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UIwDQYJKoZIhvcNAQELBQAD
ggEBAF3BK1ez4lmDth0PL5NB+qxsiRGEXECR+1DYZ02HnEXG/mHA5q23i/4eUSJF
dFnfrugfv2X1qeRO9W2p12vKCSiw/Gi7jO9vMLshQ60G1Tvp1JqEPyHt4JgEv88I
7XItFcS2K0SMC9+XirwmCjwXI4Uvy2z9ibDr6d4eiZVvaLU1FdUhpltpkwmNXvAm
Z4Qu9EV3yHiobgUqPA37h09UJfd9UzeSqczbnX9OojLoH00LAxmW+PnnglE1O41G
lOE+nVOiqgGYGTxdWoAW7j5fMfbdvezETROG7qXpsPQaWlD2oBPs+3w07LNsiYIH
45mt7iEtICx4/LsfLjr6X7u0M/g=
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:49:50 2025 by rpki-client