Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/4DB97E9EBEEF11EF9735DA59762E951A.roa
File: 4DB97E9EBEEF11EF9735DA59762E951A.roa (raw, json)
Hash identifier: wjgOCTBTDYV3tqi/QiSB/SIuTiv6tX1osYofPfnjlpo=
Subject key identifier: 65:66:9A:1F:A1:E9:BB:13:25:65:55:1D:8D:50:2E:AB:4D:B3:89:FA
Certificate issuer: /CN=F36776F1AR/serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Certificate serial: 21
Authority key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Authority info access: rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/4DB97E9EBEEF11EF9735DA59762E951A.roa
Signing time: Fri 20 Dec 2024 16:27:28 +0000
ROA not before: Fri 20 Dec 2024 16:27:24 +0000
ROA not after: Thu 20 Dec 2029 16:27:24 +0000
asID: 37784
IP address blocks: 45.221.224.0/20 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Dec 2024 18:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36776F1AR
Validity
Not Before: Dec 20 16:27:24 2024 GMT
Not After : Dec 20 16:27:24 2029 GMT
Subject: CN=67659af0-fbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:a6:20:89:85:7a:17:ea:c7:e3:80:ee:37:
b0:fe:64:f6:cd:e1:9a:21:20:2b:8d:66:ba:b6:a4:
16:b6:e0:34:69:0c:aa:58:7e:50:7e:15:d7:ea:b6:
1c:bb:12:09:b3:85:9e:3f:49:ec:6b:29:05:9a:e4:
42:78:1e:25:a9:72:35:17:8f:69:56:fe:23:4a:8f:
70:c5:5e:55:40:92:b7:05:9c:0f:01:0d:ce:0c:83:
83:ff:27:51:70:c2:e3:1f:5d:9d:20:c5:5f:62:61:
5f:5f:5a:29:e3:e8:ac:f4:f0:37:c9:33:ae:8a:fa:
0e:16:e4:21:76:1c:19:63:bd:3e:7f:e7:69:67:04:
9c:52:34:ad:1a:05:b5:46:a7:10:5c:71:68:c0:99:
26:1c:d9:84:18:79:20:21:ba:39:c5:c6:fd:18:63:
46:63:f7:91:f2:25:bc:cf:c3:76:8a:24:a0:f5:60:
38:3e:44:71:3b:21:38:5b:30:13:5f:f9:b8:8b:2a:
6d:76:2e:54:4a:74:1e:37:e6:54:0e:ef:43:6a:a4:
c1:8c:ac:12:27:79:83:d5:21:b0:0c:49:ea:d7:7b:
a3:48:45:88:00:43:8d:b9:a5:ea:26:22:5f:88:6d:
d3:78:d4:cf:e6:04:26:1e:da:9e:fb:2c:e3:bc:02:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:9A:1F:A1:E9:BB:13:25:65:55:1D:8D:50:2E:AB:4D:B3:89:FA
X509v3 Authority Key Identifier:
keyid:A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/4DB97E9EBEEF11EF9735DA59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:1f:6c:77:66:22:73:7a:cf:71:34:6e:43:16:5f:76:56:51:
c9:70:58:4d:65:b6:72:ac:47:a2:e0:e7:67:da:4d:62:e5:f8:
7c:6e:0e:6b:09:85:1e:b5:6b:15:24:11:90:95:58:7e:db:7e:
b0:2c:5e:1d:f2:69:4b:f3:c1:b1:42:99:11:a2:8b:c7:98:6c:
61:3e:6c:3d:ba:ae:68:b9:14:70:a4:f3:69:93:76:49:c9:a9:
40:bc:26:00:ef:19:39:67:d4:fd:fe:1a:65:4e:16:fb:64:33:
99:fb:a0:81:9a:3f:6a:8d:e6:67:5d:32:4e:4f:38:d6:9f:e9:
7e:dd:1a:0b:a3:ac:92:59:8d:67:09:c3:e7:b1:32:46:2f:f2:
61:5a:00:9f:2c:9c:17:dd:0d:65:fe:0b:3a:87:65:18:20:0c:
07:eb:bc:9c:a4:8d:47:9d:fd:21:dd:8f:83:f8:cf:d1:bd:ff:
ac:8e:81:87:5c:c4:a6:45:54:4a:ea:c1:7b:9b:b4:7a:c3:a4:
65:79:53:ad:8f:b9:95:e2:da:86:c4:f2:7c:08:99:99:b1:84:
88:d2:8d:9e:89:c4:17:24:c2:40:65:aa:90:2b:cc:42:f2:d0:
20:b8:15:aa:9d:14:31:64:8b:0b:1a:45:3a:1e:f1:8e:97:5c:
59:c2:ac:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 20:40:09 2025 by rpki-client