Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/CB0C69922BE111F0AF687793DAE4EC9C.roa
File: CB0C69922BE111F0AF687793DAE4EC9C.roa (raw, json)
Hash identifier: wbC2al91gZi0kl4TYo0paXi5Z+SMwT9+j/hSu8PClik=
Subject key identifier: 57:A8:60:E5:C7:B7:EE:C4:72:E2:E0:9D:49:59:2D:A1:25:98:0C:96
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0528
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/CB0C69922BE111F0AF687793DAE4EC9C.roa
Signing time: Thu 08 May 2025 07:55:23 +0000
ROA not before: Thu 08 May 2025 07:55:18 +0000
ROA not after: Fri 08 May 2026 07:55:18 +0000
asID: 200010
IP address blocks: 45.221.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 04:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320 (0x528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: May 8 07:55:18 2025 GMT
Not After : May 8 07:55:18 2026 GMT
Subject: CN=681c636b-8606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:da:d4:7e:06:ff:a6:c1:f4:c8:9e:41:36:
c6:9d:c4:cb:a8:01:38:58:9c:1c:40:9d:21:ac:1e:
6a:df:32:85:d1:7e:1a:2f:c9:fc:f8:cc:66:a3:12:
0c:e9:fc:d8:f6:1e:39:98:69:25:26:54:eb:1b:da:
94:d0:14:ec:74:57:ae:97:50:2a:8a:ee:b9:68:42:
45:75:63:1a:46:91:4a:ae:96:94:e0:cb:f9:ec:2a:
1d:e5:b9:7a:04:9f:e7:0a:5c:a8:55:05:51:09:aa:
7c:a2:cc:b2:e1:13:f2:f9:0d:45:bd:4d:8f:c0:56:
8c:ab:1e:7b:60:ec:3f:b7:3d:ec:5e:81:96:9c:37:
78:d9:3c:93:a1:fb:6d:9c:3e:2d:7b:57:0b:6f:79:
80:7e:b2:24:2b:76:c8:d2:64:1c:cc:15:53:c1:eb:
df:34:0b:ac:fe:ab:c4:a3:da:fc:1e:4b:fa:96:67:
11:9a:4e:33:39:cc:62:21:04:63:f0:08:29:7b:ed:
33:fb:a4:c3:da:1b:14:84:19:2e:d3:b6:c5:01:f8:
c2:3e:d7:32:bd:0f:28:dd:3f:95:61:6e:42:62:be:
0f:15:80:84:9c:ee:88:4f:a2:59:2c:57:5a:bc:8e:
04:69:80:da:9b:43:0f:3b:39:7e:75:d5:bd:0f:11:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:60:E5:C7:B7:EE:C4:72:E2:E0:9D:49:59:2D:A1:25:98:0C:96
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/CB0C69922BE111F0AF687793DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b6:e2:ad:aa:95:c1:a7:c8:94:61:d4:1d:bc:f4:9d:4a:9e:
36:ed:13:94:a8:9b:de:5e:69:d9:dc:af:db:09:b5:01:42:34:
62:ed:c2:50:3f:3a:41:cf:a9:f4:13:a0:91:43:db:53:dc:d6:
ba:ca:b6:df:dd:4d:f2:a2:f2:1a:d1:bc:68:aa:c5:50:9b:b6:
73:6f:c0:9c:18:59:dd:0b:6e:10:ee:02:d7:a8:9e:a6:ef:8e:
b3:e4:6e:33:ce:f8:11:f3:d7:6f:f7:c7:8e:5f:3d:02:98:77:
d3:19:4c:56:df:2e:b3:c7:f9:c2:ce:98:ea:fc:6a:34:25:1c:
df:a4:d5:f0:a2:7d:cb:ea:12:4c:69:aa:3d:35:30:bc:96:bb:
56:ab:b5:e8:e3:e3:c5:0a:60:47:fa:d4:56:00:81:56:4b:78:
af:29:c1:e3:e5:f5:b8:e6:9a:aa:d1:0c:5c:45:a2:6b:1c:f7:
fa:38:79:1a:12:14:f8:76:7c:a2:ea:5c:ec:04:a8:d9:82:21:
27:84:50:5e:0d:7d:74:a9:b7:02:dc:3a:6d:8e:43:b0:c5:e5:
ec:e3:43:b3:25:61:04:0e:5c:d5:05:76:21:8f:48:83:52:a8:
de:d5:02:dd:b9:76:40:0c:93:1b:0e:86:08:58:67:d6:e3:38:
44:0d:67:95
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNTA1MDgwNzU1MThaFw0yNjA1MDgwNzU1MThaMBgxFjAU
BgNVBAMTDTY4MWM2MzZiLTg2MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4b9rUfgb/psH0yJ5BNsadxMuoAThYnBxAnSGsHmrfMoXRfhovyfz4zGaj
Egzp/Nj2HjmYaSUmVOsb2pTQFOx0V66XUCqK7rloQkV1YxpGkUqulpTgy/nsKh3l
uXoEn+cKXKhVBVEJqnyizLLhE/L5DUW9TY/AVoyrHntg7D+3PexegZacN3jZPJOh
+22cPi17VwtveYB+siQrdsjSZBzMFVPB6980C6z+q8Sj2vweS/qWZxGaTjM5zGIh
BGPwCCl77TP7pMPaGxSEGS7TtsUB+MI+1zK9DyjdP5VhbkJivg8VgISc7ohPolks
V1q8jgRpgNqbQw87OX511b0PEdTVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUV6hg
5ce37sRy4uCdSVktoSWYDJYwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3L0NCMEM2OTkyMkJFMTExRjBBRjY4Nzc5M0RBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UQwDQYJKoZIhvcNAQELBQAD
ggEBAD624q2qlcGnyJRh1B289J1KnjbtE5Som95eadncr9sJtQFCNGLtwlA/OkHP
qfQToJFD21Pc1rrKtt/dTfKi8hrRvGiqxVCbtnNvwJwYWd0LbhDuAteonqbvjrPk
bjPO+BHz12/3x45fPQKYd9MZTFbfLrPH+cLOmOr8ajQlHN+k1fCifcvqEkxpqj01
MLyWu1artejj48UKYEf61FYAgVZLeK8pwePl9bjmmqrRDFxFomsc9/o4eRoSFPh2
fKLqXOwEqNmCISeEUF4NfXSptwLcOm2OQ7DF5ezjQ7MlYQQOXNUFdiGPSINSqN7V
At25dkAMkxsOhghYZ9bjOEQNZ5U=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:07 2025 by rpki-client