Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5360F82C40411EFBDF441A0762E951A.roa
File: B5360F82C40411EFBDF441A0762E951A.roa (raw, json)
Hash identifier: XIVwU1KcaGmu9GEq/eqbcQ4XrJuyvDpXWGCca+vIHBA=
Subject key identifier: BC:41:B4:20:6E:43:72:EB:9B:E9:5D:34:94:67:AE:D8:A1:F6:3F:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5360F82C40411EFBDF441A0762E951A.roa
Signing time: Fri 27 Dec 2024 03:43:17 +0000
ROA not before: Fri 27 Dec 2024 03:43:14 +0000
ROA not after: Fri 12 Dec 2025 03:43:14 +0000
asID: 984
IP address blocks: 45.195.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 08:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61436 (0xeffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:43:14 2024 GMT
Not After : Dec 12 03:43:14 2025 GMT
Subject: CN=676e2255-9037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:8a:82:66:a8:d5:35:25:f6:82:e2:41:50:
15:13:c1:e2:7a:03:b4:2f:52:7e:2e:05:a5:64:62:
b3:06:d8:0f:00:a7:e9:e2:8c:d3:73:b7:30:e4:06:
fd:35:69:6a:de:a6:75:d1:c7:16:19:d1:19:6c:48:
dd:5c:5f:2b:3a:8c:de:b7:b1:14:ae:25:e5:94:5b:
83:39:12:55:6d:d6:e6:45:2f:e1:78:90:dd:3e:af:
76:99:49:65:9e:0e:93:e7:f9:15:09:8b:c5:79:2a:
94:24:38:f1:05:d7:10:f7:49:0f:50:ca:79:87:53:
61:c3:55:09:d1:3a:27:f4:27:1a:6b:31:52:db:03:
c3:8a:8a:39:2a:fc:92:af:3e:16:57:86:9a:29:dd:
2d:f2:84:fc:66:39:75:8c:8c:21:85:79:46:cd:82:
c8:67:36:71:41:5a:28:25:22:a1:70:cf:cb:35:c7:
76:bf:fd:c7:c1:d3:c7:3a:cc:1e:5f:78:26:c3:db:
f6:c2:34:9b:ad:db:9c:66:b2:a9:ca:a6:90:c2:b8:
85:08:b6:1a:12:06:d4:24:ff:0d:72:58:a4:23:fa:
16:9e:a3:ce:c4:ed:5c:85:6b:d7:21:4d:75:95:2e:
46:86:3a:69:36:af:ca:c6:57:18:4a:41:15:8f:53:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:41:B4:20:6E:43:72:EB:9B:E9:5D:34:94:67:AE:D8:A1:F6:3F:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5360F82C40411EFBDF441A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.241.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5c:92:a0:95:fb:0e:4a:5a:65:ff:8f:3f:08:c3:85:1f:9c:
bc:36:e1:89:62:6d:f7:bc:4c:0c:6f:12:8c:ed:b4:91:92:be:
2a:a8:2a:15:7f:d9:f3:48:26:00:1c:43:fd:89:82:6a:4c:82:
5b:a8:7d:a1:17:0a:fc:08:93:22:5c:c2:b0:44:db:7f:19:75:
25:63:f8:b4:a1:4a:86:e7:04:84:c9:fb:8f:0b:13:0b:a6:da:
56:4c:05:00:69:bd:cc:0e:d3:68:79:f8:b2:55:18:6b:c1:7f:
9d:c2:36:01:d0:95:35:4e:c5:21:68:ff:47:a3:da:03:f3:92:
67:4a:75:31:d6:06:68:b7:db:19:9e:f3:c2:4b:5a:10:5c:85:
82:fb:8b:a8:11:11:08:85:e9:9b:65:99:33:5c:58:0d:0e:61:
4b:a5:1b:4e:bd:95:26:11:28:56:71:fa:49:dc:4b:98:6b:5e:
66:7c:ad:75:af:84:f1:fe:01:42:f6:a8:6f:e2:cd:70:7c:40:
2e:30:62:09:fc:6b:5b:ee:50:25:ea:f4:0b:d2:d4:6a:ca:a0:
d5:95:31:be:8b:38:3c:6f:dd:49:77:04:60:8a:f2:88:0e:ed:
f4:97:ac:8e:82:18:25:a8:9d:a4:23:fa:4a:c5:16:b9:ad:7f:
d4:59:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:02 2025 by rpki-client