Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/5B6E248AB97311EF8712D15C762E951A.roa
File: 5B6E248AB97311EF8712D15C762E951A.roa (raw, json)
Hash identifier: uGdnfUg8Uz7kOc8JZyK1mWZqYDvAT8evQVy7SJGzX3Q=
Subject key identifier: FC:72:58:A0:3D:FF:C0:43:F0:70:41:C1:B9:40:33:C6:57:DC:26:BB
Certificate issuer: /CN=F36776F1AR/serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Certificate serial: 11
Authority key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Authority info access: rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/5B6E248AB97311EF8712D15C762E951A.roa
Signing time: Fri 13 Dec 2024 16:57:38 +0000
ROA not before: Fri 13 Dec 2024 16:57:34 +0000
ROA not after: Tue 31 Dec 2030 16:57:34 +0000
asID: 328092
IP address blocks: 45.221.240.0/20 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Dec 2024 16:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36776F1AR, serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Validity
Not Before: Dec 13 16:57:34 2024 GMT
Not After : Dec 31 16:57:34 2030 GMT
Subject: CN=675c6782-e6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:28:51:4e:87:49:c8:51:90:16:fa:63:c9:
f8:a6:a2:e7:26:eb:00:5d:4a:5c:1d:7e:2d:50:93:
7d:cc:d4:bf:09:fd:1e:bf:f6:28:8e:ac:43:1a:5d:
4a:57:f1:d7:88:92:81:72:de:2f:f7:88:a7:c2:1e:
ec:4e:5e:df:57:1a:95:b7:c0:8d:36:a1:e0:b0:8d:
70:b6:1f:b7:89:0b:e2:81:e1:9e:e6:1a:6b:ba:24:
25:24:ac:11:fe:6f:e9:b9:99:3e:77:61:44:dd:de:
dd:a3:76:3d:16:72:25:e4:f1:46:b2:57:14:43:46:
14:1a:7a:36:3d:91:54:db:fc:e1:c3:57:cb:28:3c:
d5:07:05:90:ea:0c:6b:ab:6c:90:1f:7f:a2:24:61:
2d:31:43:12:af:a5:71:6e:3b:a7:dc:f0:fa:36:cd:
81:b0:65:24:0a:1d:67:cd:e2:db:08:fb:d2:e5:1e:
ca:00:11:41:8f:86:eb:dd:58:db:ed:fd:06:13:28:
89:4f:bf:19:6d:26:a2:6d:df:71:9e:e5:49:cf:ad:
23:b1:1b:6f:9f:c4:90:71:b2:16:90:a6:c1:f6:e2:
6f:71:3b:a5:7c:09:47:3b:eb:0a:19:16:25:4c:94:
1d:21:ff:f6:6b:a1:29:bf:2d:dc:85:44:78:d8:78:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:72:58:A0:3D:FF:C0:43:F0:70:41:C1:B9:40:33:C6:57:DC:26:BB
X509v3 Authority Key Identifier:
keyid:A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/5B6E248AB97311EF8712D15C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.240.0/20
Signature Algorithm: sha256WithRSAEncryption
88:f5:96:c1:05:7b:e9:2c:86:c9:ff:59:4f:6e:f3:31:73:86:
57:21:d3:c8:c9:ad:87:28:58:bd:24:b7:db:22:87:b2:e7:50:
93:8a:4d:08:70:0d:83:d7:22:14:e5:87:59:f1:7e:a3:88:65:
cb:40:6d:8b:bd:ad:72:c1:c3:42:c4:0b:b3:58:97:6b:68:a7:
1f:f1:ca:80:e1:f1:42:21:74:55:35:70:cb:d0:c9:9e:cd:ad:
c2:c0:0c:68:25:9a:cf:f2:0b:67:0c:c1:fe:a2:3b:12:5c:e2:
46:43:83:2f:d8:bb:9f:38:9a:80:05:46:d5:f8:fe:9a:a0:69:
90:84:23:ca:11:51:fb:e1:21:2f:11:89:20:9a:f3:e5:f7:42:
30:e9:51:01:12:2e:4c:0c:78:e2:d7:72:ad:dd:fc:b6:63:92:
74:3c:c0:0e:21:6f:09:f9:42:33:ec:23:7b:58:9f:1b:e8:1e:
d7:ab:18:08:3f:8e:51:77:3d:1c:89:00:11:94:a8:a7:2c:8a:
23:c0:69:48:46:a7:90:22:4e:bf:8d:14:0f:08:26:0e:2e:ee:
ab:e9:cf:23:fa:ec:15:aa:cb:35:7e:c9:ca:bd:3d:5f:ff:6e:
52:69:8f:63:03:02:dd:df:13:d8:87:bb:11:59:07:96:a7:66:
52:b0:39:cd
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBETANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
NzZGMUFSMTEwLwYDVQQFEyhBMEY3ODk3RjY3NTg3Q0E2NDVCMzUxNDEwMTBBNUFB
MUEzMDU3RjZDMB4XDTI0MTIxMzE2NTczNFoXDTMwMTIzMTE2NTczNFowGDEWMBQG
A1UEAxMNNjc1YzY3ODItZTZjZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALP+KFFOh0nIUZAW+mPJ+Kai5ybrAF1KXB1+LVCTfczUvwn9Hr/2KI6sQxpd
Slfx14iSgXLeL/eIp8Ie7E5e31calbfAjTah4LCNcLYft4kL4oHhnuYaa7okJSSs
Ef5v6bmZPndhRN3e3aN2PRZyJeTxRrJXFENGFBp6Nj2RVNv84cNXyyg81QcFkOoM
a6tskB9/oiRhLTFDEq+lcW47p9zw+jbNgbBlJAodZ83i2wj70uUeygARQY+G691Y
2+39BhMoiU+/GW0mom3fcZ7lSc+tI7Ebb5/EkHGyFpCmwfbib3E7pXwJRzvrChkW
JUyUHSH/9muhKb8t3IVEeNh4cLsCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBT8clig
Pf/AQ/BwQcG5QDPGV9wmuzAfBgNVHSMEGDAWgBSg94l/Z1h8pkWzUUEBClqhowV/
bDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Nzc2RjEvNTkyREY2QTJCODk1MTFFRjkzNzUyRDZCNzYyRTk1MUEvb1BlSmYy
ZFlmS1pGczFGQkFRcGFvYU1GZjJ3LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
b1BlSmYyZFlmS1pGczFGQkFRcGFvYU1GZjJ3LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzc2RjEvNTkyREY2QTJCODk1MTFFRjkzNzUyRDZCNzYyRTk1
MUEvNUI2RTI0OEFCOTczMTFFRjg3MTJEMTVDNzYyRTk1MUEucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC3d8DANBgkqhkiG9w0BAQsFAAOC
AQEAiPWWwQV76SyGyf9ZT27zMXOGVyHTyMmthyhYvSS32yKHsudQk4pNCHANg9ci
FOWHWfF+o4hly0Bti72tcsHDQsQLs1iXa2inH/HKgOHxQiF0VTVwy9DJns2twsAM
aCWaz/ILZwzB/qI7ElziRkODL9i7nziagAVG1fj+mqBpkIQjyhFR++EhLxGJIJrz
5fdCMOlRARIuTAx44tdyrd38tmOSdDzADiFvCflCM+wje1ifG+ge16sYCD+OUXc9
HIkAEZSopyyKI8BpSEankCJOv40UDwgmDi7uq+nPI/rsFarLNX7Jyr09X/9uUmmP
YwMC3d8T2Ie7EVkHlqdmUrA5zQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:14:59 2025 by rpki-client