Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/3BE78A50625811F0BF7B5CDEDAE4EC9C.roa
File: 3BE78A50625811F0BF7B5CDEDAE4EC9C.roa (raw, json)
Hash identifier: ogsaBlOCvZ1tCM/dx9K7HIQssG1DAKl83amSH3jj8q4=
Subject key identifier: 5D:32:C3:BF:E1:D9:1C:A7:A1:01:F5:31:D8:1F:80:5D:EA:A5:A6:A3
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 0224
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/3BE78A50625811F0BF7B5CDEDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 15:19:15 +0000
ROA not before: Wed 16 Jul 2025 15:19:11 +0000
ROA not after: Mon 16 Jul 2035 15:19:11 +0000
asID: 37557
IP address blocks: 168.253.0.0/19 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 17:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Jul 16 15:19:11 2025 GMT
Not After : Jul 16 15:19:11 2035 GMT
Subject: CN=6877c2f3-2477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f3:69:9d:ea:f8:c5:c6:48:00:b9:9b:27:0c:
0f:4d:c7:b8:bb:4c:05:ef:db:9a:31:20:15:94:1d:
3b:ff:f4:fa:0b:9a:54:1b:64:f0:66:66:65:71:56:
19:c7:e5:a7:e9:f5:53:93:fc:2b:73:4f:97:f1:10:
6f:0f:c9:b5:34:cd:3c:2f:44:f0:52:43:02:23:86:
af:4f:7d:25:db:d6:a1:72:2f:77:48:54:86:ec:aa:
67:ea:f9:32:93:5b:5a:f2:58:b2:a9:44:8a:f4:bd:
64:51:1c:f9:26:6e:ef:ff:0e:ca:1b:28:2b:e6:84:
4d:a7:d5:2e:9d:dd:7b:06:8b:ea:67:32:26:00:13:
46:2a:48:79:73:06:2b:45:ad:51:70:99:17:25:8f:
86:05:49:ad:23:12:60:40:71:69:49:c1:23:90:c5:
03:0f:a5:8e:61:83:5b:f0:e1:f1:55:62:a7:bb:ab:
13:4c:9c:26:19:eb:90:f2:b8:c9:37:72:8c:9b:01:
3e:77:25:23:4e:81:43:ec:9c:11:4c:16:49:97:b0:
e0:8d:20:09:d6:85:06:d9:ac:35:ed:60:a7:50:f2:
d4:db:70:57:43:5b:3a:ee:1d:52:74:57:6d:0b:ab:
26:02:ae:47:8f:98:6c:89:43:24:4d:27:5b:c3:ed:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:32:C3:BF:E1:D9:1C:A7:A1:01:F5:31:D8:1F:80:5D:EA:A5:A6:A3
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/3BE78A50625811F0BF7B5CDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.253.0.0/19
Signature Algorithm: sha256WithRSAEncryption
33:b5:1d:51:2e:13:79:d3:ef:3d:6c:5c:6c:7f:f5:c2:99:93:
22:ef:4a:e4:84:57:5e:c1:86:16:ce:29:68:da:5d:e4:e5:06:
5b:3a:96:d7:dd:1f:4b:84:40:4c:cb:03:4f:04:8c:81:1a:fe:
6d:d0:3d:8e:3c:86:c2:5d:25:4c:a5:d0:d8:42:00:81:ff:5c:
47:1e:35:20:7e:3d:d1:12:6c:49:d6:71:21:4c:95:10:31:41:
f3:04:b0:50:af:23:8b:74:7a:1c:59:ff:34:ae:5a:fa:6c:8e:
65:ab:84:53:67:1e:e0:36:62:e9:d2:5b:ac:ab:b8:b1:9b:61:
d1:c7:63:a4:ce:8a:aa:b0:bf:b2:e3:dc:38:d4:ef:6c:60:53:
44:a8:84:a1:a9:13:74:20:e9:34:06:49:b6:01:1f:c7:80:a7:
f0:88:6a:98:00:85:69:e3:5b:55:a1:4c:83:42:43:ab:a5:97:
33:52:15:ac:4e:c6:ee:ae:60:6c:62:b9:b4:cc:de:90:75:c0:
97:f5:7a:0f:4a:eb:82:b5:05:3a:8a:5a:00:1e:46:07:ff:d1:
48:81:ff:66:ad:b1:fc:bf:e3:f8:c1:c2:ba:db:6f:2b:0b:f4:
05:1b:43:e3:4c:de:d1:43:ab:85:28:05:41:10:90:aa:24:51:
3d:be:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:26 2025 by rpki-client