Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/46B13CB8242A11F093CCB1E4DAE4EC9C.roa
File: 46B13CB8242A11F093CCB1E4DAE4EC9C.roa (raw, json)
Hash identifier: 7XekLr0g1uGwEvrwnfXQkYX5JWs2EobNjcu5nzm2Bg4=
Subject key identifier: 58:B9:D1:6F:3C:E6:38:33:5C:EA:76:5A:0C:6E:DC:E3:C1:07:F5:F0
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 050D
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/46B13CB8242A11F093CCB1E4DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:14:05 +0000
ROA not before: Mon 28 Apr 2025 12:13:59 +0000
ROA not after: Tue 28 Apr 2026 12:13:59 +0000
asID: 329007
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 09:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1293 (0x50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Apr 28 12:13:59 2025 GMT
Not After : Apr 28 12:13:59 2026 GMT
Subject: CN=680f710c-532d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:59:1e:3c:a3:27:d2:08:11:32:f0:fe:a0:
01:b4:a5:3a:05:23:60:e7:39:bf:67:8b:90:a5:ad:
31:3c:b8:81:c1:bf:43:b4:79:64:3d:80:b7:2d:69:
fe:81:20:20:0f:4f:66:57:79:fd:20:26:d6:3e:fe:
b3:d1:e6:bb:22:2b:1c:a6:54:82:38:a4:6f:02:8a:
50:45:3c:e6:2f:ce:47:0f:54:3d:62:26:e6:fd:fa:
c5:da:e9:be:51:1e:60:30:28:c6:f0:54:b6:64:b0:
82:79:96:c3:3a:db:13:70:4a:bb:cf:b9:f3:8c:c0:
76:d2:14:4a:32:87:eb:27:db:22:a8:72:7d:90:aa:
80:ba:91:7f:bc:09:fc:15:1d:ea:db:01:b1:19:14:
f5:7d:2a:30:c0:9d:14:f8:ba:63:1a:31:bc:7d:11:
05:b7:20:82:1b:4c:95:9d:24:e7:ce:f4:d4:f4:13:
b3:5a:21:b1:32:cd:e1:28:ac:38:01:1f:d8:6a:b2:
f9:73:ed:14:6e:0c:f4:53:13:39:bf:0b:cb:d9:9c:
c0:1b:57:97:2d:3d:c9:d9:83:8b:9f:cc:58:1f:e5:
54:fe:75:22:57:3f:41:e9:24:d0:a4:45:3d:ee:73:
be:f2:3d:84:65:20:63:96:be:c9:7b:d4:b8:f2:f4:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B9:D1:6F:3C:E6:38:33:5C:EA:76:5A:0C:6E:DC:E3:C1:07:F5:F0
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/46B13CB8242A11F093CCB1E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:b4:59:0c:ca:2a:84:2a:25:8c:79:8b:64:22:47:6f:45:05:
02:c2:29:52:cc:68:1d:d0:91:5a:33:8b:b3:fc:d5:fb:bb:14:
c2:3a:ed:3a:e1:c5:54:38:04:86:a3:b6:5b:31:31:92:7c:64:
5f:13:a6:21:d4:83:60:67:77:9f:bb:5b:12:7f:6b:ce:7f:82:
6f:26:78:09:84:e6:23:16:28:b0:42:8a:23:87:b7:0b:f9:75:
6e:99:df:68:19:c3:4f:98:c1:d0:ba:ca:0d:49:a3:72:0d:fe:
27:f4:32:ad:51:55:a3:d8:42:d9:d1:50:e9:eb:12:a1:1e:41:
12:cc:20:88:01:04:22:98:a7:94:de:0c:2c:1e:2c:b0:2c:18:
02:2f:ab:14:46:bc:c7:55:6d:d9:2f:c0:92:7b:a4:fe:fc:d0:
98:c9:b9:04:0b:65:ff:0b:97:5f:ae:10:54:e5:55:30:61:4d:
bd:aa:10:85:0f:bd:8c:4c:48:cb:7e:8c:d2:48:a0:3c:7f:35:
5e:0c:ec:82:51:1f:8c:c9:a8:05:55:c6:1c:dc:f3:f1:b7:27:
2d:6d:77:f5:52:36:f4:79:e7:ba:f9:03:9d:bc:74:34:40:3a:
fc:3d:e5:9f:09:bd:23:f5:e2:70:13:12:28:d4:53:ba:34:3c:
86:20:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:57 2025 by rpki-client