Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/CF78A2084AA811F0B88A2CD9DAE4EC9C.roa
File: CF78A2084AA811F0B88A2CD9DAE4EC9C.roa (raw, json)
Hash identifier: XyhLMRqocKLGT8+50cFo6vshlRjiLt9JvSiNIMm8kZk=
Subject key identifier: 81:AD:4F:42:56:07:8E:82:8C:A2:5A:CC:B7:86:FE:F1:79:D8:88:61
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0560
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/CF78A2084AA811F0B88A2CD9DAE4EC9C.roa
Signing time: Mon 16 Jun 2025 11:55:35 +0000
ROA not before: Mon 16 Jun 2025 11:55:27 +0000
ROA not after: Tue 16 Jun 2026 11:55:27 +0000
asID: 43260
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jun 2025 09:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1376 (0x560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jun 16 11:55:27 2025 GMT
Not After : Jun 16 11:55:27 2026 GMT
Subject: CN=68500637-5225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:4e:c6:26:74:e9:23:c3:fd:d7:23:bc:51:
ae:48:fe:94:a6:55:f6:38:9e:b4:46:16:f7:85:af:
41:9f:6a:7e:43:36:b4:7d:cf:26:6c:20:7f:b7:11:
97:a9:8b:ce:74:ab:52:a3:0f:04:b5:46:97:54:f9:
55:8f:be:11:82:31:27:c4:53:3e:ce:71:15:70:2a:
5c:b8:26:58:61:f4:04:df:3a:84:0d:1b:e8:18:64:
4b:f1:5a:68:8b:79:74:51:cf:e7:eb:23:27:07:7c:
7d:07:ee:72:ff:be:a3:69:62:30:01:8f:56:64:83:
4d:fb:eb:b8:0c:bd:27:27:a7:6e:af:50:9e:ef:d7:
4a:24:91:6e:53:af:c6:c4:16:1d:a3:25:8a:fc:1b:
71:8a:73:6f:cc:18:2b:40:99:b8:39:7e:b9:6e:39:
f3:89:32:c0:29:0d:2e:e4:48:68:da:1e:2c:8f:1c:
d0:2a:bd:f5:63:dd:d6:da:0d:c5:94:bf:a3:25:9b:
b9:bb:07:04:a2:46:68:cb:ee:2d:41:91:bf:e3:d7:
60:ed:02:98:a1:32:3d:7b:9e:39:f6:62:41:56:bb:
e2:a0:34:97:62:57:ee:9c:46:0e:d7:73:14:47:68:
ea:b5:a4:a5:6f:a4:a4:49:3c:1d:79:68:18:a0:9a:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AD:4F:42:56:07:8E:82:8C:A2:5A:CC:B7:86:FE:F1:79:D8:88:61
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/CF78A2084AA811F0B88A2CD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
31:31:51:77:ee:53:f5:7b:a3:3f:bc:84:3d:4e:1b:bb:fb:82:
83:f0:92:bf:be:d1:26:e0:33:35:65:6d:59:85:4f:5c:f1:91:
bb:5a:d0:ac:33:94:ee:e3:f4:87:ec:c2:0d:8c:e0:52:b1:69:
8f:3d:88:e7:12:1d:49:00:7b:39:39:9b:7e:1e:e9:7e:af:df:
f1:12:5c:26:d7:4c:6b:4c:4c:ab:c4:36:a2:5a:4a:ed:fb:4e:
e5:34:2e:6a:68:a4:27:24:02:c3:c0:f0:37:2d:b2:1c:ff:2b:
58:a7:bc:55:03:04:48:59:52:6a:d9:7e:d5:fe:13:71:85:20:
4a:96:d5:06:4f:82:fb:c4:3f:02:ff:65:6d:80:b1:31:dd:0e:
17:1b:fc:39:06:80:31:0d:bf:24:52:3a:69:81:17:fa:28:51:
e1:6d:4d:cf:22:70:86:37:5c:9d:2f:3c:c5:44:f2:51:9b:77:
91:74:b3:34:88:f7:83:4c:30:76:04:06:04:4d:52:fa:c5:d6:
29:10:97:45:d4:62:a9:4b:78:3e:21:2b:88:cb:f5:6a:02:c0:
81:5e:b0:fc:40:24:58:31:ed:1e:7c:41:56:92:ee:bd:0b:ab:
d1:f1:0a:c0:a3:f8:88:7a:39:0d:fc:9e:9a:b8:8b:f9:ec:d7:
0f:37:3f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:49:09 2025 by rpki-client