Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/945FEAE64DC811F0944E3EC1DAE4EC9C.roa
File: 945FEAE64DC811F0944E3EC1DAE4EC9C.roa (raw, json)
Hash identifier: +2gVzLvqd5lsHzWJHqZEAvjx0/2JhLsCEPNKhza8vYA=
Subject key identifier: EC:F6:67:77:31:8A:B0:90:CA:15:03:6F:7E:36:66:56:5D:DE:CD:F3
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0574
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/945FEAE64DC811F0944E3EC1DAE4EC9C.roa
Signing time: Fri 20 Jun 2025 11:20:33 +0000
ROA not before: Fri 20 Jun 2025 11:20:27 +0000
ROA not after: Sat 20 Jun 2026 11:20:27 +0000
asID: 212666
IP address blocks: 45.221.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 11:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jun 20 11:20:27 2025 GMT
Not After : Jun 20 11:20:27 2026 GMT
Subject: CN=68554401-9e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:5e:1a:8b:6a:e3:ff:14:20:e3:10:b0:6c:
23:c6:ef:f7:7d:b6:ff:db:3b:28:7c:8e:d9:e9:7c:
85:a4:51:0f:91:91:ac:67:93:02:e7:47:69:e5:95:
6b:9d:f2:1d:77:af:51:06:33:e3:0e:d9:50:fa:32:
66:63:7d:f4:c7:1a:02:7d:8f:78:63:e6:35:b4:21:
0d:97:08:97:0e:97:6d:a0:98:27:80:d2:e6:a7:39:
ea:55:a4:f2:1d:73:d5:5c:33:3a:23:02:b9:61:3c:
d1:6e:1c:61:32:3a:2c:22:28:3c:6d:14:a1:8f:e0:
34:bc:5a:5a:cc:63:d7:57:ae:7a:db:13:72:50:a7:
e1:21:8a:49:4b:95:82:8d:b5:10:19:a5:a4:79:e9:
4a:54:85:be:dc:b3:96:8b:cd:37:f9:e2:a9:57:7b:
5b:23:c6:39:75:8f:4c:32:6d:ab:6e:ff:12:64:69:
42:10:96:50:16:0e:e4:c8:04:6b:97:71:fa:9e:88:
4c:11:4c:2c:09:00:32:d9:bc:f2:55:b4:e8:e1:61:
b1:b4:b7:37:bd:83:59:fd:a1:31:2a:8f:44:49:65:
aa:b9:68:94:41:b0:12:8f:0c:6e:ec:22:9c:04:2e:
5c:dd:82:5b:ab:c5:e1:5a:ba:ba:50:f9:9b:67:6d:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F6:67:77:31:8A:B0:90:CA:15:03:6F:7E:36:66:56:5D:DE:CD:F3
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/945FEAE64DC811F0944E3EC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ee:56:33:b5:13:92:99:11:47:ef:d8:71:a1:ee:5b:23:c4:
34:7a:ac:f3:44:da:d5:c4:4b:02:36:b6:a3:f6:be:97:30:79:
80:cc:a2:70:05:0d:40:fa:c7:3c:7c:c9:62:a0:fc:1a:43:03:
8e:39:38:6c:ba:e6:22:5d:60:3d:d5:d2:31:40:d7:b8:53:bb:
a4:41:8d:b1:34:63:1b:b6:b1:3b:4d:a3:1a:e1:b6:b4:d2:82:
c9:22:db:8c:a5:2f:58:a2:ca:7b:14:86:9c:08:a2:89:5e:95:
b4:c0:ef:9b:d6:8e:f7:2f:5d:0b:bd:10:d6:84:24:7c:de:74:
b5:30:35:98:4c:39:77:52:75:76:74:dd:48:c0:6c:24:82:7d:
f9:7f:25:3f:e1:5d:42:d3:fd:aa:2c:53:5d:00:6b:36:90:1c:
57:58:87:bf:0c:2b:b2:c1:6f:c9:65:bc:f0:c3:ee:b2:5e:30:
07:e3:0e:7f:8e:2b:f4:9a:e7:a2:40:79:04:15:19:4f:6e:48:
96:08:74:da:dc:04:9a:6f:c6:b8:b6:20:f9:b0:09:7e:7b:1a:
b6:99:15:28:fd:57:fd:51:a0:c1:22:67:9f:de:13:d0:90:c8:
5a:3e:70:39:6b:7e:12:af:56:0e:c3:fa:4f:7f:be:ee:53:20:
a6:cc:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:43:43 2025 by rpki-client