Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E2A7E88889211F09BEFE8ACDAE4EC9C.roa
File: 4E2A7E88889211F09BEFE8ACDAE4EC9C.roa (raw, json)
Hash identifier: liXT3u6d6Qj3sJaB/s8u66gFUCHEs7uturxX7oSucVQ=
Subject key identifier: C6:8B:AE:A2:1E:88:EB:0D:23:54:CD:53:39:72:3B:EB:28:F6:01:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017735
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E2A7E88889211F09BEFE8ACDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 06:50:41 +0000
ROA not before: Wed 03 Sep 2025 06:50:36 +0000
ROA not after: Tue 30 Sep 2025 06:50:36 +0000
asID: 17561
IP address blocks: 45.195.78.0/24 maxlen: 24
45.196.30.0/24 maxlen: 24
45.198.62.0/24 maxlen: 24
45.207.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Sep 2025 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96053 (0x17735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 06:50:36 2025 GMT
Not After : Sep 30 06:50:36 2025 GMT
Subject: CN=68b7e541-11ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:d3:2b:fc:5f:cd:1e:27:9d:0a:3c:66:c1:
dc:c8:03:d5:cd:c1:03:7d:ab:66:20:3a:de:14:18:
d3:aa:d6:a7:54:39:f5:77:05:5a:4e:66:b2:fa:b9:
43:b7:ea:cb:07:b7:28:5e:14:e2:3f:75:72:fb:e2:
b7:b5:78:43:0b:3a:07:7c:9c:ba:4a:e4:6d:69:bd:
52:13:7c:f2:2e:59:f6:48:da:db:40:6a:cc:75:d1:
ea:c5:02:ed:9f:c5:87:07:5b:ea:0d:a0:06:6b:f9:
0d:19:f8:8c:e4:05:3e:26:cf:d7:90:52:1c:d0:e0:
54:2b:16:f1:14:e8:2a:bd:c1:33:f3:f9:c8:57:c3:
b4:f7:51:11:67:bc:a5:90:c0:9f:4a:1d:eb:82:81:
2c:ea:08:e5:7e:bd:72:83:48:96:0f:21:52:ef:5e:
ff:b9:3a:2f:5c:0c:99:43:a1:d4:88:50:6e:be:c3:
2c:b3:0d:1b:cd:57:c6:97:26:da:5e:96:46:e5:11:
c3:ad:76:e6:c3:82:c0:56:a8:97:16:59:64:27:25:
08:2d:37:23:44:e0:93:f4:b6:a6:43:1b:e6:c0:37:
8c:23:f0:c0:66:3c:f1:22:84:1e:62:76:a8:f4:1c:
db:85:bd:07:0c:a0:fe:45:8c:ea:4d:87:4d:a3:c1:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8B:AE:A2:1E:88:EB:0D:23:54:CD:53:39:72:3B:EB:28:F6:01:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E2A7E88889211F09BEFE8ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.78.0/24
45.196.30.0/24
45.198.62.0/24
45.207.22.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:36:9e:ff:4f:02:43:49:e6:e5:94:9c:a5:21:b8:23:c8:be:
ed:e1:36:83:37:03:12:ec:7d:16:65:86:b7:75:62:7d:0b:14:
53:1f:79:ba:df:c3:67:93:b4:e7:81:2c:95:0f:bc:6a:7f:c1:
45:c8:e5:57:31:4b:37:7d:72:1e:ef:44:ec:e8:03:b7:5f:10:
9c:84:f0:2b:78:43:8a:ab:9d:dd:68:36:0a:86:a8:e9:43:01:
a4:6d:db:90:98:74:06:cb:1d:44:d8:08:c8:fb:8e:2f:b8:44:
c5:67:58:df:9f:b4:9d:c3:9d:c2:06:2d:c4:3e:03:64:16:3b:
a7:bd:eb:e1:0a:cd:4e:b7:1d:d1:2e:14:9a:d9:b9:22:55:c1:
94:c1:a9:9c:40:85:85:6e:c1:4c:2f:41:a6:ca:6c:86:1e:c5:
e2:03:62:9f:a7:d1:a7:a9:47:99:17:d5:e5:61:33:53:7b:c9:
79:8e:1a:41:47:52:28:8e:31:07:47:7b:ba:62:4d:a2:7a:bb:
cb:41:eb:4e:d7:39:27:8e:8c:08:40:5a:ee:8c:00:3d:d9:36:
56:2f:79:40:00:2b:3e:ea:6e:e7:5a:6b:fc:09:06:37:d3:b1:
ab:ff:5d:93:24:66:9b:fc:e0:53:85:27:db:e2:58:48:65:a4:
26:b9:31:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:49 2025 by rpki-client