Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/A18B3CA0E28311ED86AEC8B32F6D8C1D.roa
File: A18B3CA0E28311ED86AEC8B32F6D8C1D.roa (raw, json)
Hash identifier: 8p2/buJfoqYQhdNMeHFDfIWHy5uvm+Nk08V+xP9o0b0=
Subject key identifier: AA:65:77:D4:36:40:AC:89:C0:FC:61:08:F6:0B:61:D3:32:30:14:BB
Certificate issuer: /CN=F363EA80AR/serialNumber=A3AAA0A9BA55CC7DD5F3C9DE77E99D75674094E2
Certificate serial: 0B
Authority key identifier: A3:AA:A0:A9:BA:55:CC:7D:D5:F3:C9:DE:77:E9:9D:75:67:40:94:E2
Authority info access: rsync://rpki.afrinic.net/repository/arin/o6qgqbpVzH3V88ned-mddWdAlOI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/A18B3CA0E28311ED86AEC8B32F6D8C1D.roa
Signing time: Mon 24 Apr 2023 09:37:30 +0000
ROA not before: Mon 24 Apr 2023 09:37:19 +0000
ROA not after: Wed 24 Apr 2030 09:37:19 +0000
asID: 19711
IP address blocks: 69.63.64.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 17 May 2023 07:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AR, serialNumber=A3AAA0A9BA55CC7DD5F3C9DE77E99D75674094E2
Validity
Not Before: Apr 24 09:37:19 2023 GMT
Not After : Apr 24 09:37:19 2030 GMT
Subject: CN=64464dda-d39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:5c:e1:ea:57:78:36:53:98:db:be:73:97:
71:5d:d8:c6:63:b6:89:71:ae:85:63:00:23:e6:14:
ed:f3:b3:84:20:90:68:47:6e:26:89:01:f7:ff:ae:
6c:84:15:d7:ca:03:99:1c:22:1d:52:37:34:1c:99:
5c:4d:d5:cb:80:e7:73:4a:48:fe:e4:6e:e4:73:2d:
05:1f:29:b8:19:e2:bd:0a:6d:de:8e:7c:d0:4c:25:
3b:39:8f:49:bc:aa:af:14:73:f9:78:16:f0:81:06:
22:a3:a1:3a:a3:72:6d:94:1c:32:76:d2:6c:3c:70:
c8:7b:98:ef:62:68:78:3f:76:bd:11:d7:6f:30:cd:
0d:84:0d:ba:7b:35:a7:ff:14:7b:c8:80:0a:a4:12:
43:41:34:ee:de:16:df:c1:2e:dd:ba:56:bd:23:41:
df:37:bc:c0:8a:53:d6:4b:2c:dd:6f:53:76:93:69:
2b:72:07:47:c8:59:04:83:69:11:58:8f:03:20:f1:
fa:e5:3e:20:90:89:2c:3c:d9:6f:f6:68:5b:54:fd:
7e:f9:6b:6a:78:68:aa:d0:be:0f:8e:e1:b2:7b:8a:
cc:82:7f:98:28:1f:5e:ab:93:9f:c5:50:5f:58:b0:
bc:a3:f3:64:32:37:49:67:58:ec:3a:d2:7a:a5:a8:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:65:77:D4:36:40:AC:89:C0:FC:61:08:F6:0B:61:D3:32:30:14:BB
X509v3 Authority Key Identifier:
keyid:A3:AA:A0:A9:BA:55:CC:7D:D5:F3:C9:DE:77:E9:9D:75:67:40:94:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/o6qgqbpVzH3V88ned-mddWdAlOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/A18B3CA0E28311ED86AEC8B32F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
69.63.64.0/20
Signature Algorithm: sha256WithRSAEncryption
35:da:29:b0:31:05:c6:65:7a:a5:63:5f:0e:15:0a:e8:46:34:
aa:e9:e6:9a:b0:ef:1f:8c:ab:9b:1e:c5:3f:94:cb:ad:fb:79:
f5:f1:be:f8:f3:c6:2e:5d:ba:b4:94:dd:57:d0:10:a6:2d:6a:
96:4b:d6:f6:5f:bc:91:9f:16:a8:a7:f6:3a:93:88:b0:f3:83:
59:e6:ea:3a:56:8c:22:b4:c5:61:68:51:c3:1c:c5:b3:10:46:
ff:c7:55:c9:f6:92:5b:94:12:26:d6:eb:8a:cf:0c:16:81:14:
e7:d4:ba:49:f8:b3:76:18:f0:2d:0c:af:63:d0:19:39:dd:23:
36:d5:05:be:5f:95:e4:7c:38:2c:3e:e8:b4:7b:9b:bd:cc:2e:
cb:c9:5e:5d:b7:f4:ec:0a:e5:94:f2:12:72:69:13:7c:5a:7e:
ca:44:94:6f:1e:f0:46:52:39:be:c2:6e:8f:2f:93:97:2c:80:
1a:d5:5b:4b:5c:2d:c5:ac:7e:5d:dd:f9:7b:48:13:65:f6:af:
a5:81:41:bb:e2:f9:00:2a:5b:4f:5f:a0:60:6c:2e:a4:0f:10:
d5:d5:e5:75:a6:19:a3:3f:25:69:db:9e:f0:6d:49:86:7b:ae:
ba:8a:1e:02:50:d7:03:df:5b:4b:f5:05:70:63:d4:e0:22:f1:
70:ba:03:f6
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBCzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYz
RUE4MEFSMTEwLwYDVQQFEyhBM0FBQTBBOUJBNTVDQzdERDVGM0M5REU3N0U5OUQ3
NTY3NDA5NEUyMB4XDTIzMDQyNDA5MzcxOVoXDTMwMDQyNDA5MzcxOVowGDEWMBQG
A1UEAwwNNjQ0NjRkZGEtZDM5YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMLBXOHqV3g2U5jbvnOXcV3YxmO2iXGuhWMAI+YU7fOzhCCQaEduJokB9/+u
bIQV18oDmRwiHVI3NByZXE3Vy4Dnc0pI/uRu5HMtBR8puBnivQpt3o580EwlOzmP
SbyqrxRz+XgW8IEGIqOhOqNybZQcMnbSbDxwyHuY72JoeD92vRHXbzDNDYQNuns1
p/8Ue8iACqQSQ0E07t4W38Eu3bpWvSNB3ze8wIpT1kss3W9TdpNpK3IHR8hZBINp
EViPAyDx+uU+IJCJLDzZb/ZoW1T9fvlranhoqtC+D47hsnuKzIJ/mCgfXquTn8VQ
X1iwvKPzZDI3SWdY7DrSeqWodh0CAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSqZXfU
NkCsicD8YQj2C2HTMjAUuzAfBgNVHSMEGDAWgBSjqqCpulXMfdXzyd536Z11Z0CU
4jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0VBODAvM0NEODBCOTJERERBMTFFRDkzQzc3OTBEMzA2RDhDMUQvbzZxZ3Fi
cFZ6SDNWODhuZWQtbWRkV2RBbE9JLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
bzZxZ3FicFZ6SDNWODhuZWQtbWRkV2RBbE9JLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2M0VBODAvM0NEODBCOTJERERBMTFFRDkzQzc3OTBEMzA2RDhD
MUQvQTE4QjNDQTBFMjgzMTFFRDg2QUVDOEIzMkY2RDhDMUQucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBEU/QDANBgkqhkiG9w0BAQsFAAOC
AQEANdopsDEFxmV6pWNfDhUK6EY0qunmmrDvH4yrmx7FP5TLrft59fG++PPGLl26
tJTdV9AQpi1qlkvW9l+8kZ8WqKf2OpOIsPODWebqOlaMIrTFYWhRwxzFsxBG/8dV
yfaSW5QSJtbris8MFoEU59S6SfizdhjwLQyvY9AZOd0jNtUFvl+V5Hw4LD7otHub
vcwuy8leXbf07ArllPIScmkTfFp+ykSUbx7wRlI5vsJujy+TlyyAGtVbS1wtxax+
Xd35e0gTZfavpYFBu+L5ACpbT1+gYGwupA8Q1dXldaYZoz8ladue8G1Jhnuuuooe
AlDXA99bS/UFcGPU4CLxcLoD9g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:43:31 2025 by rpki-client