Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0BE0D4A6510011F09995D0A7DAE4EC9C.roa
File: 0BE0D4A6510011F09995D0A7DAE4EC9C.roa (raw, json)
Hash identifier: LuiF6e70BkLsR4Y2kMpwoT6a22OnydxRZ6Bix60L5M0=
Subject key identifier: 8D:8E:21:9F:D0:68:3B:D3:27:1A:29:EF:5A:03:5B:50:FF:31:09:93
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BDC
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0BE0D4A6510011F09995D0A7DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:35:09 +0000
ROA not before: Tue 24 Jun 2025 13:35:05 +0000
ROA not after: Wed 24 Jun 2026 13:35:05 +0000
asID: 2914
IP address blocks: 196.251.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 08:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3036 (0xbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:35:05 2025 GMT
Not After : Jun 24 13:35:05 2026 GMT
Subject: CN=685aa98d-b3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:69:c6:cd:92:59:dc:d9:21:5b:eb:06:31:
29:a1:4f:e9:7e:a3:a7:40:58:61:b6:22:cc:98:0f:
95:f0:c4:c4:8f:d8:21:5a:05:de:2f:03:24:cb:f6:
15:13:36:ef:62:40:31:9c:f7:a7:63:e6:e5:d5:86:
af:17:f2:db:2b:dc:c0:64:56:f6:52:c0:ee:58:4a:
a0:89:a7:a4:bb:e8:46:8f:34:ad:9d:80:98:04:0b:
0b:86:60:b7:0f:53:c2:4e:f5:0e:12:10:44:43:87:
f9:18:11:c6:bf:f1:89:a1:5f:7f:73:0d:1e:57:95:
ca:ea:3b:36:58:31:76:6d:a4:23:fb:0c:ef:cc:40:
9c:79:96:a0:1c:71:a3:8c:76:8c:a9:25:c7:26:b8:
d5:8d:a4:55:2e:70:77:93:95:de:4e:f1:a3:28:5d:
55:f1:2c:08:33:66:40:a5:92:ff:db:63:42:ed:9e:
73:ac:b6:96:b3:32:55:bb:4b:95:43:89:38:27:c4:
ae:5a:77:28:fd:9c:71:b3:27:b4:49:f7:bc:5a:c8:
83:af:ff:3d:cf:ce:36:d9:ab:ef:6d:6b:6c:b1:82:
4c:57:14:6c:72:73:ce:79:51:83:b5:ce:ad:08:c0:
3d:c0:ac:a3:e0:18:d2:37:4c:b5:b1:ff:3e:ed:90:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8E:21:9F:D0:68:3B:D3:27:1A:29:EF:5A:03:5B:50:FF:31:09:93
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0BE0D4A6510011F09995D0A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bd:9d:09:5b:8f:27:22:ca:09:2c:13:87:8e:92:dd:88:d0:
2d:2a:eb:59:93:b9:68:3f:5a:c7:29:6b:1a:40:4c:95:47:c9:
d0:3a:c1:50:cf:15:53:47:45:a2:e6:3f:e2:45:0b:87:90:ee:
27:6e:97:6a:31:03:49:cb:bb:ca:d7:fe:f5:f5:45:35:3f:d9:
a7:64:0e:d3:22:a0:2b:4b:c5:40:f5:77:6b:4e:aa:09:ee:af:
ab:4a:33:78:88:12:bf:cd:ec:15:ff:d2:a1:22:0c:73:dd:d8:
42:3e:e6:c9:80:06:10:d6:2a:4e:7d:e7:5b:7a:de:70:ae:e9:
a4:9b:49:7a:90:44:35:c5:2c:99:b0:a9:ca:dd:2c:df:ce:9f:
e7:2a:99:74:4a:f4:cc:3d:53:6e:a0:6b:02:fc:e3:8a:60:e0:
28:bf:c6:92:3d:5e:a4:66:08:4d:ef:38:be:13:c3:64:49:a5:
38:0a:95:bf:d8:9f:81:21:13:14:28:85:a5:5a:b7:26:5a:78:
37:e5:44:79:2d:e8:87:99:82:fa:72:bb:c1:c4:87:88:60:f3:
90:e1:23:96:97:0b:39:30:c2:70:0a:d5:b1:17:9f:9d:d0:69:
3e:5c:d1:02:7b:1b:e0:63:7b:5e:4b:c8:ec:f8:50:90:8c:47:
04:59:37:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:33:08 2025 by rpki-client