Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/73BD637E50FF11F0A05F67A3DAE4EC9C.roa
File: 73BD637E50FF11F0A05F67A3DAE4EC9C.roa (raw, json)
Hash identifier: gjuiT//xHbgL0jMw0rRULdZtE90Uj6rxVvHApHoiDok=
Subject key identifier: E5:99:64:CB:94:3E:26:14:68:48:6A:1F:DB:6E:94:5D:15:3E:86:77
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BC8
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/73BD637E50FF11F0A05F67A3DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:30:54 +0000
ROA not before: Tue 24 Jun 2025 13:30:49 +0000
ROA not after: Wed 24 Jun 2026 13:30:49 +0000
asID: 2914
IP address blocks: 196.251.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 07:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3016 (0xbc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:30:49 2025 GMT
Not After : Jun 24 13:30:49 2026 GMT
Subject: CN=685aa88e-e49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:ed:2c:26:06:93:85:68:5c:4c:45:ea:84:
55:0f:08:02:32:0b:2b:77:8d:ac:a2:15:f1:e8:ec:
2b:37:a4:15:cf:b2:36:16:a0:a5:de:7f:6e:5e:ab:
82:61:fb:1f:a3:a2:3e:40:62:d1:e8:19:b9:ad:b8:
0d:c4:fa:70:9c:12:19:bd:25:2e:a7:64:55:aa:b2:
4e:7b:e1:0b:f5:6b:87:30:23:28:0a:5c:36:a4:c9:
05:c3:af:ad:6e:07:63:85:a6:f1:76:8b:1e:ec:d6:
96:07:cf:a0:f0:63:81:82:12:3c:58:00:85:ce:5e:
c7:b9:d1:bd:0c:6b:ba:4d:7e:39:cd:54:25:ea:16:
a3:22:1f:7c:50:15:41:9e:2a:cd:ee:b9:64:3c:10:
62:35:75:6a:e9:a4:fa:e1:98:be:61:c4:5a:de:1c:
81:31:94:a9:69:d2:ae:1c:36:21:ee:a2:e3:af:15:
d1:54:82:3b:51:bb:21:d9:34:97:14:ba:b0:9d:c5:
4b:cb:11:00:b5:88:86:11:53:d6:a9:43:60:2a:cc:
6e:dd:7a:9f:13:d4:ef:ef:3a:86:98:2e:0f:04:49:
8e:9a:3d:f9:66:45:cb:d1:35:80:03:89:14:8e:b1:
28:d0:c1:d2:15:f7:bf:97:5d:65:6f:a8:9a:86:26:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:99:64:CB:94:3E:26:14:68:48:6A:1F:DB:6E:94:5D:15:3E:86:77
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/73BD637E50FF11F0A05F67A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a6:01:bf:d1:62:df:e5:70:95:c9:71:19:04:d6:cb:ec:24:
c2:02:43:38:d7:a8:28:97:e7:ee:bb:a6:8f:37:d4:85:e0:b9:
ce:9d:8d:5d:3b:a7:ba:da:7b:02:47:63:97:d2:53:da:ef:84:
54:66:69:34:7a:54:ea:fa:dc:52:ea:7f:3a:ac:b7:91:f1:75:
28:0a:c7:88:90:65:fd:5f:b0:e1:60:13:55:ab:cc:32:35:fb:
0b:02:58:d0:15:b1:07:0f:de:e6:b4:17:4c:26:f3:cf:a6:9b:
73:f2:b2:0e:33:2b:d9:9e:59:15:43:c1:31:6e:bc:cb:23:02:
05:7b:4e:b2:6d:37:8e:2b:3c:a6:db:8f:63:b5:6c:3a:c7:65:
ee:03:7b:4d:4d:f4:55:aa:df:f1:b3:b0:3c:f9:18:44:7d:f2:
b9:aa:a8:50:ed:4c:fc:83:40:a7:fa:7d:a8:18:ef:8d:1a:cd:
f6:96:88:b8:8a:66:72:3c:d5:80:0f:a1:03:57:ae:d9:f1:02:
2b:ee:6f:53:4b:ba:95:e2:39:24:9c:89:a7:2b:99:55:84:bf:
78:44:d7:96:c3:05:3f:ad:6c:32:2d:7d:bb:f9:47:c8:d5:3d:
e5:f8:01:d2:17:4b:3b:73:b1:d2:de:35:95:dc:55:50:ce:9d:
8b:66:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:55:20 2025 by rpki-client