Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8387E2D44B4B11F08351E881DAE4EC9C.roa
File: 8387E2D44B4B11F08351E881DAE4EC9C.roa (raw, json)
Hash identifier: HUyuyykouguH242XL0LRil8Kiyr431zjr46s4HguEdw=
Subject key identifier: 3E:F5:21:17:FF:AC:B7:A4:1B:DA:9B:56:62:5B:11:72:C8:87:AF:69
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B88
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8387E2D44B4B11F08351E881DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 07:20:15 +0000
ROA not before: Tue 17 Jun 2025 07:20:11 +0000
ROA not after: Tue 16 Jun 2026 07:20:11 +0000
asID: 29802
IP address blocks: 196.251.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 11:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2952 (0xb88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 17 07:20:11 2025 GMT
Not After : Jun 16 07:20:11 2026 GMT
Subject: CN=6851172f-cc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:34:1e:13:9a:e2:65:f6:50:2b:ad:a9:61:
55:5d:35:c9:7a:36:1c:e7:ed:8a:72:49:30:bb:36:
2c:c3:0e:5b:8e:21:4d:79:61:15:11:63:59:db:94:
a0:70:35:3c:78:44:d0:a3:98:f7:c5:8e:a7:9a:a3:
f5:0d:4c:c0:3e:0d:53:0f:28:5d:31:6c:59:f1:c1:
2a:de:ef:44:d1:b9:f6:74:fb:de:83:91:ba:34:dc:
ce:1f:a2:4f:d7:cd:05:da:a8:3c:9b:94:dc:5a:b9:
1c:07:34:9c:71:0f:df:bf:25:38:85:1d:21:d4:a2:
5d:46:7c:54:94:ba:08:2c:2d:51:0c:73:2b:90:bd:
62:bd:2d:a7:a2:9d:d0:73:a7:22:60:79:b5:64:d0:
6c:11:f3:62:fa:62:60:ea:7f:04:79:2f:94:a4:05:
8a:9d:dd:1e:4a:cf:06:45:95:41:56:26:58:8c:f7:
9c:14:3c:5a:5f:9e:08:b9:60:60:9e:7e:93:cf:72:
62:cf:1b:11:ac:47:f3:98:e5:48:30:fe:3d:da:82:
28:d0:fb:4d:ff:79:6f:15:0d:c0:21:31:a3:db:05:
fa:74:d2:ac:22:2e:78:09:d6:ef:ce:9d:99:f9:41:
cb:04:14:a1:8d:69:70:65:34:bc:81:e7:57:a9:93:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F5:21:17:FF:AC:B7:A4:1B:DA:9B:56:62:5B:11:72:C8:87:AF:69
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8387E2D44B4B11F08351E881DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.105.0/24
Signature Algorithm: sha256WithRSAEncryption
48:25:28:65:b5:03:92:ba:3b:8d:93:44:b4:68:f4:d1:ef:45:
e1:22:22:0d:e9:6e:ab:d8:aa:7d:d0:cc:da:7b:ce:7a:3a:58:
f9:00:6a:fa:c7:67:3c:a2:74:1c:79:d8:96:da:6b:d5:79:9f:
c3:a8:1f:72:2f:c8:e0:47:6f:b8:1e:b7:aa:88:47:fc:dd:54:
4e:d8:3c:81:97:2c:66:71:bc:91:d9:5d:3b:08:55:63:d0:7d:
fe:da:7f:42:c5:dd:d6:e1:6c:b1:32:eb:20:5e:53:31:7c:5d:
33:be:23:eb:4a:a9:9c:b7:61:0c:e3:3d:8b:0e:3e:f9:b9:f0:
21:b0:28:1d:27:c4:10:cb:5d:2b:a4:d0:41:ec:ea:6f:57:93:
34:8e:37:0a:12:93:ce:89:81:a3:25:b8:e4:5e:4d:43:96:cf:
3d:93:bc:80:13:d9:3a:a3:f9:f5:ba:63:60:3f:10:4f:44:58:
d7:3b:01:a2:44:bd:5f:21:72:a9:f0:21:05:00:9c:dc:b2:4c:
35:bc:4f:3a:d1:be:7c:8f:07:19:59:3a:17:f5:ba:95:ec:b6:
b6:17:a0:c7:c1:df:06:f5:a7:d7:fd:e8:28:62:d3:86:ab:31:
eb:e8:dd:84:37:87:32:98:d8:c5:b2:b0:eb:de:9b:25:38:10:
b5:66:e1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:26:40 2025 by rpki-client