Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/DA70B1A6138411F08B2D50B5762E951A.roa
File: DA70B1A6138411F08B2D50B5762E951A.roa (raw, json)
Hash identifier: Le8rR34j3NBclJfoOdp4kMFfs4cZg+HHWuz7H74O+kc=
Subject key identifier: BE:D3:F1:A8:A0:6D:D8:8B:27:B1:09:F3:86:09:40:C0:14:EE:34:A5
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 04E6
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/DA70B1A6138411F08B2D50B5762E951A.roa
Signing time: Mon 07 Apr 2025 07:49:37 +0000
ROA not before: Mon 07 Apr 2025 07:49:33 +0000
ROA not after: Thu 01 Jan 2026 07:49:33 +0000
asID: 329007
IP address blocks: 45.221.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 08:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Apr 7 07:49:33 2025 GMT
Not After : Jan 1 07:49:33 2026 GMT
Subject: CN=67f38391-0605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:8f:18:c7:00:4e:11:3a:cb:79:7e:d4:2d:
73:bb:6e:83:b6:a1:f1:5f:d5:59:53:ea:0c:f8:d8:
17:aa:57:65:1b:d9:1c:09:eb:a3:39:80:ce:50:1b:
84:9d:99:94:21:3b:be:4e:41:94:6a:68:8e:c6:43:
74:88:55:63:fe:5e:8d:56:84:95:71:83:f6:39:ef:
58:09:de:7f:9b:30:12:33:6c:84:ee:d0:73:e0:c7:
ba:3e:c5:12:9d:b0:a0:1b:69:12:ad:de:38:18:25:
1c:dd:55:84:23:34:a4:a1:0b:35:e2:97:e3:c1:f3:
0a:75:d9:7f:e6:24:64:1d:6e:0d:e9:53:2a:34:02:
d0:39:2d:63:c9:b5:73:3f:e5:18:33:f2:37:88:3a:
23:2d:ef:53:de:91:7c:c1:74:3a:e7:6e:3a:1d:5d:
52:56:6a:ca:18:20:88:3d:5a:25:c2:3c:e9:f3:46:
0a:24:f0:86:11:d7:17:0c:a8:0d:b6:ac:94:a3:17:
68:da:cd:50:05:7c:bd:ff:79:2b:5f:29:80:dd:71:
07:df:3d:cc:b5:70:45:4f:f7:bf:0c:47:03:57:fd:
d7:2b:06:27:dd:39:24:45:4b:14:e6:95:ed:84:29:
d0:1d:30:74:c0:fd:5a:3e:44:83:c9:77:26:71:a0:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D3:F1:A8:A0:6D:D8:8B:27:B1:09:F3:86:09:40:C0:14:EE:34:A5
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/DA70B1A6138411F08B2D50B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.70.0/24
Signature Algorithm: sha256WithRSAEncryption
28:19:e6:a5:35:81:c5:1a:52:41:90:27:23:69:e0:be:e2:2c:
d3:fa:8d:67:c6:1d:3b:86:5c:93:c5:3d:94:68:83:ca:18:36:
35:8b:61:da:b7:16:bd:35:9e:88:dd:a2:d7:a0:84:4d:2a:5c:
01:1e:53:3b:ec:6c:f0:2c:61:11:d6:ed:5f:d2:8e:4b:66:70:
ca:2a:4e:8a:98:24:65:3e:84:01:4f:86:c1:bf:8d:3f:b3:3e:
48:96:e5:8a:cd:ee:3a:74:26:24:8b:0a:98:64:48:7e:2d:75:
67:8f:b8:38:e9:56:11:80:90:f3:44:72:7f:08:4d:08:75:a6:
2b:54:fe:1c:5d:fc:33:2c:11:ae:7d:dd:47:c3:3d:bb:89:99:
2d:5a:e4:2c:44:8e:6c:dc:36:a7:30:5b:b8:6c:fe:39:de:4f:
8b:ae:f3:1c:ca:2d:85:3e:90:fd:1b:29:67:7f:57:cf:54:57:
ee:61:10:af:12:c8:6a:e6:06:08:b6:d4:4c:5f:9d:d8:49:6d:
f2:55:92:1e:1c:d2:d7:35:c8:e7:57:97:34:3b:26:b2:86:85:
72:26:04:42:dd:7e:6d:3d:ea:14:93:66:bf:14:48:bf:6b:aa:
83:41:85:98:f6:51:0b:c8:8f:e6:58:05:c3:db:0d:8e:59:8b:
d7:71:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:41 2025 by rpki-client