Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/2D95D734EF5511EFB8441548762E951A.roa
File: 2D95D734EF5511EFB8441548762E951A.roa (raw, json)
Hash identifier: 28y4ov1SZAMwY+LIPlEgipSLljQgVFNZLgtQkt/t8sc=
Subject key identifier: 16:A6:AA:9D:2D:92:BA:34:9F:71:3B:B9:DC:94:68:93:30:BC:EF:F7
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 048D
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/2D95D734EF5511EFB8441548762E951A.roa
Signing time: Thu 20 Feb 2025 06:37:39 +0000
ROA not before: Thu 20 Feb 2025 06:37:35 +0000
ROA not after: Fri 20 Feb 2026 06:37:35 +0000
asID: 9009
IP address blocks: 45.221.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 06:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1165 (0x48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Feb 20 06:37:35 2025 GMT
Not After : Feb 20 06:37:35 2026 GMT
Subject: CN=67b6cdb3-fc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:b3:7d:21:fe:1e:e5:64:d2:4a:64:25:4b:
69:c3:1d:73:9a:6b:fa:cb:4f:32:50:68:ef:2e:c3:
0c:98:a5:dc:0e:52:04:16:b9:b0:e6:03:9d:d3:13:
3b:63:55:97:02:b2:2b:47:3d:41:8a:82:39:dd:fd:
59:ff:9d:b0:91:12:0a:c6:65:6e:ee:24:1e:30:98:
6b:6a:a4:dd:43:cd:06:85:aa:92:48:7e:65:10:fb:
01:29:9e:62:c4:9c:ca:12:1f:4c:d8:0c:d5:64:aa:
3c:30:eb:d4:e2:8f:fb:e1:f5:a8:2c:53:58:98:d9:
7b:6e:c5:e9:28:ad:d9:db:09:40:4a:c4:77:69:1a:
f1:91:1a:a2:9c:e3:d7:19:0e:46:4a:b8:57:11:c8:
d5:69:ad:e0:d3:34:25:70:b4:8c:ed:aa:7c:68:46:
40:c6:34:db:8a:61:9e:56:7d:26:46:7b:08:ca:1e:
f9:11:9d:0b:a2:64:6c:f9:ab:46:28:d7:b2:c8:78:
35:0f:db:50:f2:bf:09:50:86:c4:e0:4d:6d:ec:15:
12:2e:24:ed:ba:54:58:b1:32:48:f9:99:6c:05:72:
83:07:12:c3:72:0c:26:5c:16:6b:af:6a:93:10:51:
4e:35:24:5d:05:90:ce:af:dd:e0:7c:3a:37:24:d1:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A6:AA:9D:2D:92:BA:34:9F:71:3B:B9:DC:94:68:93:30:BC:EF:F7
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/2D95D734EF5511EFB8441548762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9a:6a:eb:a3:b9:b0:dc:37:3e:3f:9f:dc:4c:f4:68:30:84:
90:b8:6c:5c:69:19:78:83:e8:7e:b6:c1:a7:c0:94:a2:25:ca:
21:ac:6b:9c:1e:f8:e1:61:cf:36:51:7a:1e:a5:47:74:ad:91:
45:00:20:cb:63:f5:89:cd:5e:a9:a6:76:a3:d4:60:33:1a:2d:
7a:0b:c6:11:c4:07:49:7e:62:4e:bc:ea:51:bd:20:c9:1e:d8:
09:bb:a8:05:b8:3d:7e:f1:91:82:ce:5c:1f:7c:24:ef:9b:bd:
1d:2b:9c:23:93:62:68:4d:a6:6e:db:38:de:ed:8f:37:10:21:
b3:7d:80:39:d6:af:f1:af:9c:83:87:53:7b:e2:93:83:0f:12:
27:1d:0c:21:6a:aa:9b:d4:4a:d7:92:1a:37:75:e1:f5:4c:c3:
c5:4a:1b:62:90:78:28:a8:a3:ff:4c:d4:08:17:53:76:4f:ca:
1a:6e:9e:8c:ef:12:5d:32:b9:31:a8:6a:b0:5e:d4:e5:76:6a:
51:34:c9:9b:fd:0e:b9:14:58:cd:3b:45:6c:9f:0f:b7:bb:94:
1d:3e:ef:0f:13:10:e4:18:4f:ac:fd:c8:b7:79:b7:9f:97:6b:
96:b8:16:39:c4:8b:26:82:79:fd:eb:48:54:32:07:78:5f:e2:
29:ab:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:33:39 2025 by rpki-client