Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/D87EAF6CB8B511EFBB92CAB2762E951A.roa
File: D87EAF6CB8B511EFBB92CAB2762E951A.roa (raw, json)
Hash identifier: zWa+Jsq5kMatkzKTIA2qjDXEWHD1v43O53+ndS8uik8=
Subject key identifier: 38:A8:C1:0A:01:2D:19:F7:97:4F:1A:FE:5A:42:7B:DC:FB:BA:4D:D5
Certificate issuer: /CN=F36776F1AR/serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Certificate serial: 0B
Authority key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Authority info access: rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/D87EAF6CB8B511EFBB92CAB2762E951A.roa
Signing time: Thu 12 Dec 2024 18:21:03 +0000
ROA not before: Thu 12 Dec 2024 18:21:00 +0000
ROA not after: Wed 12 Dec 2029 18:21:00 +0000
asID: 328092
IP address blocks: 45.221.224.0/20 maxlen: 32
45.221.240.0/20 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Dec 2024 16:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36776F1AR
Validity
Not Before: Dec 12 18:21:00 2024 GMT
Not After : Dec 12 18:21:00 2029 GMT
Subject: CN=675b298f-e548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:d8:91:fd:3e:c7:3b:57:9f:f8:b4:8c:1a:
fe:34:f0:2a:51:7f:11:c9:44:a0:75:f1:4a:5a:5a:
1d:e6:b9:2d:7d:d3:c4:7f:f9:77:b7:db:7e:88:18:
a7:02:cb:31:87:a7:c2:b9:45:02:02:a9:84:9a:d3:
39:15:30:ab:64:69:f2:46:6e:f5:6f:ea:7f:9e:48:
c9:aa:5f:e9:9d:a0:b9:c6:78:1d:21:05:78:1c:39:
9a:1c:a7:2a:ab:42:5e:a5:b0:8b:4c:38:c6:58:fe:
0d:56:ce:06:ac:b2:6e:06:32:0d:6e:ca:05:62:38:
d7:dc:97:0b:b5:a6:2e:61:42:02:92:2f:c3:6f:49:
b0:d4:9e:aa:28:4e:7c:25:21:da:49:c1:dd:ed:05:
c7:53:0c:8f:36:7a:91:c0:ab:65:a8:99:d7:2b:cc:
b6:8f:8b:60:30:38:3a:63:de:7c:ea:4d:84:0a:45:
7d:2c:03:51:50:be:d2:3c:d6:95:f1:b2:71:54:a0:
ad:1a:5c:3d:24:58:5a:e8:d9:83:e9:28:57:73:7d:
14:5e:02:bf:a3:d9:77:b9:e1:a8:9b:c7:07:ec:a8:
ca:25:05:5b:a8:08:db:fa:59:b0:01:1a:e1:42:6d:
48:34:d0:be:ab:32:94:33:a6:ff:f2:e4:8c:4b:60:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A8:C1:0A:01:2D:19:F7:97:4F:1A:FE:5A:42:7B:DC:FB:BA:4D:D5
X509v3 Authority Key Identifier:
keyid:A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/D87EAF6CB8B511EFBB92CAB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:2d:f8:87:45:84:19:7b:88:af:2b:f0:63:ee:87:8a:99:d6:
ad:23:c9:71:55:c2:82:e3:b4:17:ca:ab:5e:76:57:62:64:f7:
ef:71:95:54:e4:14:00:63:9d:4c:a8:26:2b:ba:56:34:a8:d6:
c4:cd:13:4e:cf:37:8b:9e:85:a6:16:26:75:b1:de:22:1b:78:
6f:38:58:bb:1a:ca:6c:02:cf:b3:d8:08:ba:d9:42:02:3f:5f:
fa:1c:ea:27:fc:59:73:61:2c:60:ca:f1:aa:15:cc:63:83:92:
f9:67:8d:c2:5d:52:fe:2c:a0:82:c1:50:2b:ef:25:5e:aa:5f:
5a:38:da:77:8b:f5:32:68:55:5d:4b:ff:c2:19:80:fe:72:39:
89:fc:26:10:0a:b3:17:f3:3a:d7:93:05:64:aa:1b:ad:8e:60:
5b:44:4d:e3:c0:be:db:c4:e5:3c:54:e1:46:77:7b:eb:88:a2:
66:3e:81:e9:20:5f:8d:82:7c:95:b1:51:d2:99:51:77:6d:77:
91:5f:48:cb:5a:8d:06:46:1b:75:af:4a:b7:2a:fc:cd:e4:d6:
ea:f7:67:6a:e3:9e:e6:96:a7:9b:a2:8e:2c:13:e4:06:9c:f8:
3c:59:87:d0:6c:03:af:48:88:e2:d6:3f:e9:79:14:27:ce:fa:
35:10:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 20:34:19 2025 by rpki-client