Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/1963F8D615E311F0A4ACBF136EB8BCC6.roa
File: 1963F8D615E311F0A4ACBF136EB8BCC6.roa (raw, json)
Hash identifier: /zbxuUgafp1mK5trr0xDLGZjzqo+Mh4nq6I0r2zpYjk=
Subject key identifier: 14:3A:E2:EE:1B:01:C7:FA:F8:DF:20:12:93:C0:1C:B1:C7:26:FC:60
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 04F1
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/1963F8D615E311F0A4ACBF136EB8BCC6.roa
Signing time: Thu 10 Apr 2025 08:09:18 +0000
ROA not before: Thu 10 Apr 2025 08:09:14 +0000
ROA not after: Fri 10 Apr 2026 08:09:14 +0000
asID: 329007
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 14:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Apr 10 08:09:14 2025 GMT
Not After : Apr 10 08:09:14 2026 GMT
Subject: CN=67f77cae-b049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:37:41:73:53:62:e1:23:05:3e:c3:4c:c8:
cd:b5:9a:4d:7f:2a:4f:79:24:8f:b2:f6:08:e7:7c:
22:c8:ba:08:8d:87:c7:19:57:9a:74:dc:c6:1f:b5:
5b:83:67:4b:10:bb:db:e0:cc:28:7b:e7:99:fb:7d:
75:58:dd:46:4b:2a:a1:3a:73:aa:ef:91:be:a2:64:
15:3d:15:67:73:6c:34:8c:89:16:01:db:15:79:74:
86:b6:32:e8:68:18:9a:b1:f6:5b:a4:4c:6a:f1:f2:
85:19:74:5b:ed:46:8c:ef:98:94:91:d8:03:3e:7a:
6a:24:42:7f:98:3e:6b:22:3b:68:8c:ca:46:0b:1b:
c3:77:17:c7:29:d8:32:32:ee:87:63:07:63:01:0a:
13:fb:3d:c8:0f:ce:73:5f:ab:12:2c:e0:1c:ef:66:
f1:10:65:14:0c:6e:44:14:c4:18:41:6a:13:9d:97:
3d:29:53:62:7f:ec:90:23:aa:b2:94:11:c6:af:ba:
ff:60:a5:50:56:01:05:00:d6:28:92:ff:b4:6f:1b:
d3:d2:79:35:fd:18:7c:2a:44:c6:4d:29:10:a9:d7:
11:18:12:16:54:d1:d8:56:11:fa:aa:3c:bf:a0:fd:
34:23:e0:a2:6a:a2:84:2b:0f:bc:08:a1:ab:39:37:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:E2:EE:1B:01:C7:FA:F8:DF:20:12:93:C0:1C:B1:C7:26:FC:60
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/1963F8D615E311F0A4ACBF136EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
93:be:92:19:43:01:80:99:84:fe:f9:aa:c7:a2:1d:ee:6f:71:
1e:b4:8f:f5:cb:16:b1:a9:32:7e:c0:ad:b3:df:e2:11:32:1b:
30:92:09:69:25:2e:b8:c6:18:ca:e0:ff:6f:de:ba:cb:fb:30:
25:44:24:f1:6f:5a:be:f4:26:03:d0:23:10:7d:21:a3:72:20:
16:bc:f3:79:5f:36:7f:17:ef:12:35:57:c1:c0:4d:b4:2d:fc:
db:39:f7:7b:8f:5a:dc:81:d1:6b:1b:09:6c:80:a4:18:28:a6:
ec:e0:42:62:ef:3b:4c:2f:8b:93:2c:e0:d0:ce:fe:45:e7:ba:
23:7f:9a:06:9b:d8:dc:07:e6:6a:80:b6:1d:7d:3c:f1:2e:c1:
88:d3:8e:94:71:58:8d:77:f5:8e:5b:91:da:c1:12:94:83:fd:
1f:0f:44:e8:d6:f0:c4:a8:61:72:08:50:5f:cf:92:bf:cd:03:
17:b0:0b:7f:02:aa:48:6e:eb:07:ce:d1:12:20:4d:34:d1:f3:
7e:e9:95:a6:d2:fa:a6:38:0b:df:cd:9b:f0:43:e5:c9:75:72:
31:e6:43:57:75:91:4b:08:c2:94:f0:97:14:7e:1f:e9:a7:68:
84:6a:76:a6:9d:e7:09:71:30:0d:cc:bf:12:4a:7a:c0:20:1a:
bf:a9:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:32:15 2025 by rpki-client