Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/CB6E6408BEEF11EF8D6EDC5D762E951A.roa
File: CB6E6408BEEF11EF8D6EDC5D762E951A.roa (raw, json)
Hash identifier: FZIoEOZWjyxsxx/OdvwAC/1sLP25K9FijtS3FwslddI=
Subject key identifier: 7C:4B:BE:0A:98:DF:F1:B8:A1:E0:0E:AE:04:2E:EB:F6:7A:C2:9A:88
Certificate issuer: /CN=F36776F1AR/serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Certificate serial: 23
Authority key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Authority info access: rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/CB6E6408BEEF11EF8D6EDC5D762E951A.roa
Signing time: Fri 20 Dec 2024 16:30:59 +0000
ROA not before: Fri 20 Dec 2024 16:30:56 +0000
ROA not after: Thu 20 Dec 2029 16:30:56 +0000
asID: 37784
IP address blocks: 45.221.240.0/20 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Dec 2024 18:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36776F1AR
Validity
Not Before: Dec 20 16:30:56 2024 GMT
Not After : Dec 20 16:30:56 2029 GMT
Subject: CN=67659bc3-0e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:1a:84:63:66:46:27:f3:94:9c:c4:a3:76:
40:aa:23:c0:b5:ee:da:9e:cc:1f:74:3a:cf:93:f1:
75:90:9a:46:6a:44:24:89:f4:ba:90:f1:2b:0a:fa:
01:c7:55:99:1a:d3:af:f6:d4:ff:b5:94:60:f7:f8:
05:f1:2f:35:13:80:0c:f3:b0:d4:e7:00:a8:ad:13:
5c:66:07:df:87:04:d9:79:2b:34:d5:0b:e9:4d:c1:
2b:4e:4a:1e:43:7c:72:1b:7c:7d:11:57:81:61:52:
a8:3b:64:e0:ed:e8:1a:62:42:7c:47:16:0e:5f:58:
a5:56:c2:6d:81:68:20:f4:28:51:77:54:8a:42:59:
0a:0c:e1:f8:b6:8f:57:f8:80:63:18:e2:09:ad:74:
04:55:a0:b8:af:f0:03:53:a7:e8:5e:c2:ce:72:2c:
b2:3c:2d:2e:37:8c:4e:c9:5a:42:a9:2e:b9:63:22:
4b:8a:5d:ff:6e:83:02:27:1e:2e:6d:9f:a5:e8:aa:
79:f0:6d:02:81:04:89:c7:7d:47:fc:7a:95:d3:21:
80:90:cd:ac:4c:9a:ef:3b:2a:15:0f:14:92:76:e5:
19:62:b6:d7:67:7b:c4:35:32:43:9d:ce:c5:1e:32:
6d:3a:d9:51:14:c1:89:a0:d2:5f:ff:6f:2a:86:8d:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4B:BE:0A:98:DF:F1:B8:A1:E0:0E:AE:04:2E:EB:F6:7A:C2:9A:88
X509v3 Authority Key Identifier:
keyid:A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/CB6E6408BEEF11EF8D6EDC5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.240.0/20
Signature Algorithm: sha256WithRSAEncryption
46:2e:df:28:8a:19:bd:35:5e:89:6f:41:83:95:04:69:9f:f6:
09:4e:b2:b0:ab:9f:c2:c6:8e:44:0a:af:8f:70:38:d2:a9:10:
c1:48:f7:ab:68:5f:6b:79:dc:ac:28:ca:62:64:5c:1a:0c:37:
85:4b:a6:68:8a:49:ee:6b:04:33:28:63:c6:24:c7:7e:22:08:
75:09:20:a2:b3:b4:ff:9d:af:1a:3a:b8:45:7e:28:a9:73:b5:
c1:17:77:b0:43:a8:57:08:4a:fa:0b:22:5a:3d:08:78:c2:ee:
0f:1d:b5:78:6f:00:ef:7a:aa:89:ff:6d:c8:dc:5e:62:f5:ea:
5f:55:e5:62:89:58:4f:79:19:49:9c:c8:3b:33:c4:80:12:8b:
a3:a8:5b:6b:05:b7:47:67:92:74:2b:40:67:c5:4d:e2:56:e0:
05:9a:bc:71:5b:f2:89:4e:ff:d7:af:36:01:65:4c:79:d2:48:
dc:8d:ac:25:9d:79:b9:38:b3:be:1a:c8:60:6f:e0:18:63:75:
5a:19:a9:d1:c3:f7:a7:23:f1:6d:d0:29:de:c8:c4:71:74:98:
84:05:1f:3c:6a:79:c1:28:a5:52:aa:bb:ec:33:73:f7:6b:eb:
52:9d:20:06:e7:de:1a:31:0f:c4:cf:37:3d:ed:60:0a:2c:a5:
4d:57:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 20:47:39 2025 by rpki-client