Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/225B3A46510011F08061ECA7DAE4EC9C.roa
File: 225B3A46510011F08061ECA7DAE4EC9C.roa (raw, json)
Hash identifier: JXlHIRvqxrFQawoqQzSuN9KG8BcUwK0tE3+lQcAcuSA=
Subject key identifier: 43:1F:2B:07:8B:B3:64:80:05:B5:EE:3D:96:07:35:12:80:2F:D0:0F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BDE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/225B3A46510011F08061ECA7DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:35:47 +0000
ROA not before: Tue 24 Jun 2025 13:35:43 +0000
ROA not after: Wed 24 Jun 2026 13:35:43 +0000
asID: 2914
IP address blocks: 196.251.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 07:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3038 (0xbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:35:43 2025 GMT
Not After : Jun 24 13:35:43 2026 GMT
Subject: CN=685aa9b3-b068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:da:7f:76:c1:28:28:d6:c9:06:21:bd:27:
e7:a7:9c:dc:0b:69:87:cc:be:19:9c:1a:64:3d:27:
44:12:fa:8f:04:e5:ce:a8:68:4a:f1:eb:26:96:96:
63:f2:32:eb:ee:5c:8b:63:49:f8:0b:72:b7:41:89:
24:5a:c4:4d:f3:bb:00:77:f5:f9:ec:f2:ca:e9:24:
24:68:01:33:fc:13:22:96:7a:c9:98:f8:2d:26:ef:
81:7b:34:45:85:e9:9b:f3:4f:60:3a:17:74:9d:59:
ee:0f:58:37:be:99:0f:0c:a0:62:d2:37:c2:f0:fa:
1e:4f:ef:97:ec:db:5d:56:07:99:66:3f:ce:cc:70:
27:f8:7c:d4:6d:6a:ed:15:dd:7d:21:b1:80:dc:47:
20:33:5c:db:6d:2d:25:dc:8c:45:17:df:62:43:8d:
6a:49:78:94:11:09:af:25:ec:b8:f8:f8:49:c1:f8:
b9:76:66:2a:44:44:e6:6d:c4:69:41:f8:41:d2:a4:
17:d8:08:55:06:e0:f6:6d:23:34:ef:c6:fb:54:c2:
29:62:42:aa:31:67:c8:54:21:1c:a6:57:13:75:0a:
79:ea:49:0c:db:18:71:63:c8:08:65:d9:c5:7d:ff:
b2:ea:8f:83:47:54:8d:c2:3b:ee:89:7b:aa:25:d1:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:2B:07:8B:B3:64:80:05:B5:EE:3D:96:07:35:12:80:2F:D0:0F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/225B3A46510011F08061ECA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9f:75:1b:6e:40:07:10:ca:3b:45:49:d2:68:a0:f3:44:f7:
09:77:15:d2:4b:58:1e:89:09:8b:2f:b6:45:bb:12:49:63:52:
a4:1f:2d:f5:29:f1:ab:0a:65:05:57:45:5b:7b:08:07:46:48:
85:87:6d:67:16:b5:af:3d:cf:65:e2:cd:68:5f:e1:93:67:1b:
07:96:b2:5c:dd:95:26:fd:df:f6:e6:1d:58:5c:c4:f5:2f:0b:
a6:e1:34:d3:62:38:32:7b:8c:d6:59:d1:62:01:6c:ad:45:af:
55:1e:32:13:62:2e:88:c2:da:be:fc:97:c2:2d:bd:ff:3a:88:
47:c4:fc:83:71:dc:e6:78:75:27:84:ac:b7:18:1b:1d:42:37:
b8:a5:24:17:ff:3b:e8:85:cc:d6:63:c6:04:6c:95:12:61:23:
5c:82:13:bc:48:0e:46:20:c6:6d:1b:72:45:42:45:fb:a5:8e:
a6:e3:01:43:1a:bd:54:cc:e0:36:5f:bd:ca:cf:bf:aa:f1:f3:
06:80:70:03:bd:00:89:da:3f:8e:49:d3:7a:95:ca:8c:6b:78:
89:e5:27:7d:3e:5e:81:27:36:1f:65:f3:a3:94:2a:78:9e:ff:
c9:94:30:cc:04:4c:d4:c6:43:47:00:46:5f:1f:90:bc:c5:3e:
ff:d5:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:25:31 2025 by rpki-client