Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/8E91C86E4AA811F0B7AEFDD6DAE4EC9C.roa
File: 8E91C86E4AA811F0B7AEFDD6DAE4EC9C.roa (raw, json)
Hash identifier: 9pEYHy3QnVe873hPydSjWFkTPIm0YLdU1g+sGqG3Nqo=
Subject key identifier: 24:5B:54:09:3F:4C:C4:A2:9B:6F:99:B9:A2:D8:0D:4C:63:B1:9B:2F
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 055E
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/8E91C86E4AA811F0B7AEFDD6DAE4EC9C.roa
Signing time: Mon 16 Jun 2025 11:53:46 +0000
ROA not before: Mon 16 Jun 2025 11:53:35 +0000
ROA not after: Tue 16 Jun 2026 11:53:35 +0000
asID: 43260
IP address blocks: 45.221.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jun 2025 09:55:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1374 (0x55e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jun 16 11:53:35 2025 GMT
Not After : Jun 16 11:53:35 2026 GMT
Subject: CN=685005ca-2206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:e6:b9:72:53:94:fd:b0:4b:d5:d9:43:3e:
6e:f6:81:2c:f5:31:9c:92:8d:5d:73:cf:6c:51:32:
67:db:2b:44:4a:4f:35:46:da:ac:04:65:4a:e9:83:
51:0d:c9:be:cd:3c:a0:27:4b:e4:a0:fc:b6:db:8e:
c6:fe:02:64:84:58:c5:45:80:87:55:79:31:cb:e0:
b3:0e:d0:4d:73:21:03:6f:f5:cc:5f:1d:d1:c6:5d:
a2:ae:ef:1e:8f:d5:ef:10:3c:1e:cc:c2:81:93:80:
a0:32:c0:a6:28:cd:74:79:22:e3:88:fe:98:1e:2f:
b7:fa:d2:fa:1b:4b:00:c2:c2:a5:d0:15:c1:b7:bc:
84:96:d4:02:d9:df:c9:d4:fb:81:1e:ef:05:34:a5:
a1:45:42:c8:33:08:48:ae:da:ac:77:8e:3b:b0:6b:
4e:68:93:f2:a6:7e:c4:19:10:09:ac:5c:db:8f:5b:
56:50:b8:ab:86:85:0b:cc:ba:86:84:f2:d4:05:53:
bf:ae:aa:d9:b1:ac:68:0e:3b:6c:f6:c0:b9:c2:80:
2c:02:e6:e8:8b:31:46:1d:29:87:60:ad:75:9b:4c:
83:28:67:1b:9b:59:a4:8a:e0:a1:ed:37:d9:60:85:
46:68:2d:f7:e6:80:66:ef:a4:ad:53:40:d6:d9:32:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5B:54:09:3F:4C:C4:A2:9B:6F:99:B9:A2:D8:0D:4C:63:B1:9B:2F
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/8E91C86E4AA811F0B7AEFDD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.68.0/24
Signature Algorithm: sha256WithRSAEncryption
af:2b:a3:04:5e:02:1a:3a:c8:57:3b:0d:02:4e:b7:53:aa:02:
27:cc:76:db:ae:8b:ac:95:f8:17:91:24:ee:0b:11:18:5a:8d:
2e:ef:96:b4:3f:d9:7c:ca:8c:f8:5e:0c:ed:92:b9:fc:ad:2a:
c0:af:b8:6e:bb:17:7c:72:ba:45:8a:08:cd:1e:b2:59:e8:8b:
2e:ae:f2:f6:a0:23:30:cd:9e:5e:84:62:b6:d0:f3:d3:fb:cc:
aa:62:12:64:fd:c9:7d:e5:89:d6:74:74:28:25:99:57:7f:26:
e1:96:86:47:38:5e:e9:8d:78:4a:12:65:59:1b:fb:61:63:dd:
45:33:77:b5:ff:89:98:54:f5:a7:23:c7:67:78:2d:70:fe:80:
97:93:e9:a5:35:47:2f:5f:2a:bb:bd:0f:19:1e:a9:cf:6c:d5:
ba:63:1c:eb:56:a5:a2:86:48:b0:5b:92:82:f4:67:49:b1:74:
37:d6:f8:ee:98:b8:bd:a3:6f:b2:f3:76:07:43:77:2a:37:92:
01:9d:b0:7d:6e:e1:c9:f8:07:71:66:c8:0f:05:e3:e8:4b:f2:
8b:81:5a:64:df:06:41:56:47:10:d3:d6:36:ab:aa:4d:a4:8e:
ca:db:89:47:70:15:e4:57:b0:9f:82:cf:49:9e:89:d1:c0:3c:
44:69:9e:7f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNTA2MTYxMTUzMzVaFw0yNjA2MTYxMTUzMzVaMBgxFjAU
BgNVBAMTDTY4NTAwNWNhLTIyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVXua5clOU/bBL1dlDPm72gSz1MZySjV1zz2xRMmfbK0RKTzVG2qwEZUrp
g1ENyb7NPKAnS+Sg/Lbbjsb+AmSEWMVFgIdVeTHL4LMO0E1zIQNv9cxfHdHGXaKu
7x6P1e8QPB7MwoGTgKAywKYozXR5IuOI/pgeL7f60vobSwDCwqXQFcG3vISW1ALZ
38nU+4Ee7wU0paFFQsgzCEiu2qx3jjuwa05ok/KmfsQZEAmsXNuPW1ZQuKuGhQvM
uoaE8tQFU7+uqtmxrGgOO2z2wLnCgCwC5uiLMUYdKYdgrXWbTIMoZxubWaSK4KHt
N9lghUZoLffmgGbvpK1TQNbZMqMTAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJFtU
CT9MxKKbb5m5otgNTGOxmy8wHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3LzhFOTFDODZFNEFBODExRjBCN0FFRkRENkRBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UQwDQYJKoZIhvcNAQELBQAD
ggEBAK8rowReAho6yFc7DQJOt1OqAifMdtuui6yV+BeRJO4LERhajS7vlrQ/2XzK
jPheDO2SufytKsCvuG67F3xyukWKCM0eslnoiy6u8vagIzDNnl6EYrbQ89P7zKpi
EmT9yX3lidZ0dCglmVd/JuGWhkc4XumNeEoSZVkb+2Fj3UUzd7X/iZhU9acjx2d4
LXD+gJeT6aU1Ry9fKru9Dxkeqc9s1bpjHOtWpaKGSLBbkoL0Z0mxdDfW+O6YuL2j
b7LzdgdDdyo3kgGdsH1u4cn4B3FmyA8F4+hL8ouBWmTfBkFWRxDT1jarqk2kjsrb
iUdwFeRXsJ+Cz0meidHAPERpnn8=
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:55:00 2025 by rpki-client