
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/CF6492E4350511F0B889B8A9DAE4EC9C.roa
File: CF6492E4350511F0B889B8A9DAE4EC9C.roa (raw, json)
Hash identifier: RGTdkStmT3anzsxNUa7QB8K60CSQW6g+yZdb/IidM4Y=
Subject key identifier: 9B:94:18:D1:A2:DD:64:6A:97:B5:E6:AA:29:3E:E8:82:84:88:C7:29
Certificate issuer: /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial: 08B1
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Authority info access: rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/CF6492E4350511F0B889B8A9DAE4EC9C.roa
Signing time: Mon 19 May 2025 23:05:52 +0000
ROA not before: Tue 20 May 2025 23:05:48 +0000
ROA not after: Sun 20 May 2035 23:05:48 +0000
asID: 37049
IP address blocks: 165.16.160.0/19 maxlen: 19
165.16.161.0/24 maxlen: 24
165.16.162.0/24 maxlen: 24
165.16.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 11:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Validity
Not Before: May 20 23:05:48 2025 GMT
Not After : May 20 23:05:48 2035 GMT
Subject: CN=682bb950-30ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:f1:4a:ae:10:b6:75:1e:62:9c:fd:66:55:
00:64:45:08:d4:a7:f4:81:bd:9b:9e:8e:82:33:ee:
c9:16:c0:86:a3:15:6e:e9:0c:9c:5b:d6:0d:13:6a:
46:43:8f:1a:69:50:63:86:92:3c:85:64:a9:4b:2f:
3e:1b:57:c5:ab:18:d3:ee:fe:d3:7d:31:64:ce:57:
cf:43:e3:0d:10:23:36:da:93:fd:30:21:29:0f:60:
16:43:13:13:59:2f:b1:a8:90:06:fc:8e:0d:00:0b:
f8:56:f7:6f:27:2b:c2:7e:2c:d7:dd:cf:a1:d2:cc:
21:1c:19:dc:08:5e:11:1c:1a:ce:97:13:61:81:c6:
a5:59:8b:fb:16:54:f0:b6:76:72:ba:2f:61:b1:16:
fd:ef:41:ec:77:61:a1:c9:2a:1b:10:26:1b:5e:c9:
34:c8:f8:0e:44:db:7d:f0:3e:bc:d7:59:61:85:de:
23:21:9c:8a:43:c2:60:30:64:21:41:5e:cc:82:46:
24:65:3d:05:a5:f6:9c:79:3f:12:6e:4b:62:45:52:
7b:a4:61:60:55:4e:40:37:3f:25:e4:4c:c9:81:89:
14:4c:4b:a9:45:35:33:11:17:dd:11:41:c8:ad:13:
fc:2a:0b:ae:95:63:e7:04:2e:7f:c3:49:c5:0a:7c:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:94:18:D1:A2:DD:64:6A:97:B5:E6:AA:29:3E:E8:82:84:88:C7:29
X509v3 Authority Key Identifier:
keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/CF6492E4350511F0B889B8A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.160.0/19
Signature Algorithm: sha256WithRSAEncryption
b5:d3:2c:d2:a5:6a:f4:db:fd:4e:4c:40:c7:5e:07:eb:76:5f:
a4:6d:40:ae:8d:5b:8b:06:e4:d2:e2:5d:7c:97:32:7f:9f:69:
a4:c9:59:f1:53:c6:fe:94:2d:dc:36:45:22:37:6c:59:10:64:
d3:7e:a7:9a:21:d0:91:c3:94:3d:81:88:9f:cb:8f:f3:08:5d:
86:57:34:3e:ef:9c:c2:7e:15:7b:5e:7f:58:dc:ae:e9:89:a3:
ca:6a:69:7f:eb:48:6f:fe:5d:f9:e3:2b:6e:65:7c:42:fb:01:
c2:57:43:a2:56:12:bd:f5:64:55:88:b8:ca:98:9f:49:e4:55:
75:5a:df:e9:b1:3e:ef:a2:f8:94:ec:02:4c:01:62:b1:9e:b0:
35:a1:96:91:3c:78:8a:70:9b:2d:b8:5f:08:94:36:68:2b:c8:
85:5c:27:a8:19:c9:33:3c:9b:f4:c5:48:b2:19:21:ca:b3:31:
8c:aa:75:0d:7f:ac:dd:57:30:e6:ae:59:9f:e1:1a:97:2b:07:
90:fa:5c:6f:c7:12:bb:e4:93:17:70:c4:1c:7b:07:21:32:3a:
3a:87:2b:6e:5e:4e:be:61:71:e8:d7:b7:54:3f:54:bd:75:9b:
21:24:6e:56:36:46:75:1b:c7:0d:37:53:2b:1c:73:19:c7:44:
15:92:dc:d0
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUJGMjdBUjExMC8GA1UEBRMoQ0QwN0Q3Qzg5RUNFNEMwRjlEMDRBMUIxNTNCQkM3
MTBERjAxNkIyRDAeFw0yNTA1MjAyMzA1NDhaFw0zNTA1MjAyMzA1NDhaMBgxFjAU
BgNVBAMTDTY4MmJiOTUwLTMwYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxtvFKrhC2dR5inP1mVQBkRQjUp/SBvZuejoIz7skWwIajFW7pDJxb1g0T
akZDjxppUGOGkjyFZKlLLz4bV8WrGNPu/tN9MWTOV89D4w0QIzbak/0wISkPYBZD
ExNZL7GokAb8jg0AC/hW928nK8J+LNfdz6HSzCEcGdwIXhEcGs6XE2GBxqVZi/sW
VPC2dnK6L2GxFv3vQex3YaHJKhsQJhteyTTI+A5E233wPrzXWWGF3iMhnIpDwmAw
ZCFBXsyCRiRlPQWl9px5PxJuS2JFUnukYWBVTkA3PyXkTMmBiRRMS6lFNTMRF90R
QcitE/wqC66VY+cELn/DScUKfGEnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUm5QY
0aLdZGqXteaqKT7ogoSIxykwHwYDVR0jBBgwFoAUzQfXyJ7OTA+dBKGxU7vHEN8B
ay0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlCRjI3LzU4MDBEQ0Y0OTFFQTExRTlCQTU2OTI3QUY4QUVBMjI4L3pRZlh5
SjdPVEEtZEJLR3hVN3ZIRU44QmF5MC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3pRZlh5SjdPVEEtZEJLR3hVN3ZIRU44QmF5MC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjlCRjI3LzU4MDBEQ0Y0OTFFQTExRTlCQTU2OTI3QUY4QUVB
MjI4L0NGNjQ5MkU0MzUwNTExRjBCODg5QjhBOURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWlEKAwDQYJKoZIhvcNAQELBQAD
ggEBALXTLNKlavTb/U5MQMdeB+t2X6RtQK6NW4sG5NLiXXyXMn+faaTJWfFTxv6U
Ldw2RSI3bFkQZNN+p5oh0JHDlD2BiJ/Lj/MIXYZXND7vnMJ+FXtef1jcrumJo8pq
aX/rSG/+XfnjK25lfEL7AcJXQ6JWEr31ZFWIuMqYn0nkVXVa3+mxPu+i+JTsAkwB
YrGesDWhlpE8eIpwmy24XwiUNmgryIVcJ6gZyTM8m/TFSLIZIcqzMYyqdQ1/rN1X
MOauWZ/hGpcrB5D6XG/HErvkkxdwxBx7ByEyOjqHK25eTr5hcejXt1Q/VL11myEk
blY2RnUbxw03UysccxnHRBWS3NA=
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:43:32 2025 by rpki-client