Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/B2FD4B74361C11F0BDF73D87DAE4EC9C.roa
File: B2FD4B74361C11F0BDF73D87DAE4EC9C.roa (raw, json)
Hash identifier: Jnxax42zC4tokbWshJlAJbQAG95wKpXmAA7YtfCRH4U=
Subject key identifier: B5:38:0E:82:BC:5D:7E:06:B0:06:82:1E:F5:FC:D4:D9:FB:C6:60:4B
Certificate issuer: /CN=F36D3DBFAR/serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
Certificate serial: 02
Authority key identifier: 89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7
Authority info access: rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/B2FD4B74361C11F0BDF73D87DAE4EC9C.roa
Signing time: Wed 21 May 2025 08:22:14 +0000
ROA not before: Wed 21 May 2025 08:22:08 +0000
ROA not after: Mon 31 Dec 2035 08:22:08 +0000
asID: 327829
IP address blocks: 169.255.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 22 May 2025 13:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3DBFAR, serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
Validity
Not Before: May 21 08:22:08 2025 GMT
Not After : Dec 31 08:22:08 2035 GMT
Subject: CN=682d8d36-a06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:14:73:d4:8a:43:db:a4:a3:04:c7:b6:06:2d:
69:42:9b:0c:33:70:63:8d:80:27:41:0a:e3:1e:40:
9c:e8:5d:b6:b7:dd:e8:b3:7c:e3:9d:66:9e:5d:ae:
fc:f7:70:7d:94:e0:0d:36:41:7e:da:5a:af:4c:e4:
db:75:06:74:6e:38:40:05:fb:e8:31:b3:47:02:c0:
1a:e7:bc:b7:41:f7:7a:45:4f:56:32:0e:56:e4:23:
66:f7:2b:ac:e3:bd:84:be:eb:70:3c:0c:67:7f:74:
20:85:83:d0:c3:60:57:a2:fc:09:04:88:db:46:fa:
7b:16:9f:0e:27:d1:a2:4b:7a:8e:30:68:57:f1:78:
f4:74:58:84:0b:08:02:35:8f:c4:5c:97:6b:70:e0:
8f:4d:22:54:77:0d:9f:fa:29:12:1c:40:06:15:2a:
4e:6f:e5:8e:de:03:2d:36:b1:9d:61:34:fe:2d:14:
25:d8:6e:4b:eb:73:ed:3c:ac:0a:5b:5f:2f:90:82:
56:3a:ce:12:ea:ff:34:c6:03:34:aa:a0:86:5a:ed:
13:d9:08:d2:70:06:bc:96:3b:b4:1f:27:21:7a:f5:
10:4a:bb:ee:6e:17:fa:e7:f5:1c:41:43:a7:c1:b5:
81:62:68:a8:50:6e:74:d3:dd:d7:88:f2:c0:84:e4:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:38:0E:82:BC:5D:7E:06:B0:06:82:1E:F5:FC:D4:D9:FB:C6:60:4B
X509v3 Authority Key Identifier:
keyid:89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/B2FD4B74361C11F0BDF73D87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.72.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:92:e8:2c:d3:b7:54:48:77:9a:75:6a:43:6b:37:cd:13:5b:
d9:bc:97:b8:e0:bf:1b:9b:ec:5d:9d:b6:c9:68:79:1e:db:98:
bc:23:01:5f:99:86:42:24:95:f4:f8:83:d9:ab:d0:c5:1e:d6:
af:b4:fb:12:1e:36:88:de:8a:05:a4:1d:6c:ae:5a:2a:4c:ea:
ce:d8:bf:4a:a5:28:26:34:50:34:2b:a7:ea:9f:c9:a4:34:ed:
12:3d:ad:ad:58:68:83:3d:78:eb:94:84:d5:10:65:ff:6e:80:
ce:69:7f:40:25:1f:07:60:62:8c:1c:4c:4c:17:22:f0:a9:09:
14:6e:30:69:43:c4:a8:93:6f:74:75:d7:25:01:9a:62:b5:00:
7c:4f:f2:03:2b:5d:14:67:17:a8:be:5d:b3:4e:1b:a5:1c:17:
21:0c:a4:0f:b0:4c:20:1e:e8:54:fc:c6:25:85:1e:80:5c:33:
7d:f4:8a:fa:27:0e:24:70:ad:2b:b5:9b:7e:63:f9:bb:38:90:
85:a5:ea:56:52:a8:39:95:0f:6d:8f:67:cf:13:36:37:34:2c:
3e:25:b5:0e:9e:9c:45:56:cf:a1:c7:f3:b2:f4:3b:49:b4:86:
ee:f2:27:6d:93:0e:1f:79:f5:70:32:ee:b3:b9:2c:81:ae:5a:
a7:2f:38:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:20 2025 by rpki-client