Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/938D363450FF11F09E25AFA3DAE4EC9C.roa
File: 938D363450FF11F09E25AFA3DAE4EC9C.roa (raw, json)
Hash identifier: m8ooTcJI5WUKY1HovwYylb+8H2tGZQ+MS29dkhILcsY=
Subject key identifier: E3:12:37:CC:87:B2:1C:2D:F5:E5:EC:10:F1:2D:28:7F:F8:8D:6A:5B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BCC
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/938D363450FF11F09E25AFA3DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:31:47 +0000
ROA not before: Tue 24 Jun 2025 13:31:43 +0000
ROA not after: Wed 24 Jun 2026 13:31:43 +0000
asID: 2914
IP address blocks: 196.251.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 07:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3020 (0xbcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:31:43 2025 GMT
Not After : Jun 24 13:31:43 2026 GMT
Subject: CN=685aa8c3-07f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:55:a6:3d:d5:0b:7b:73:7f:23:68:85:0a:
89:cd:1c:8f:0c:a2:76:af:8b:86:01:7d:24:6e:fd:
cf:b6:d5:94:bd:a3:e9:23:ad:ca:2c:5f:0b:b4:4c:
46:5d:f8:22:4d:34:4a:07:6d:c9:8d:24:8a:95:21:
1c:c7:cc:9a:79:fa:10:ac:3e:35:46:a5:ea:4f:79:
63:b0:2b:33:68:67:bf:4a:40:ed:bd:53:2c:0a:b5:
56:3a:78:c0:8e:3c:f7:11:49:1a:11:5d:4b:5f:2d:
cc:aa:72:4c:8e:45:ce:ac:bc:1f:84:21:8a:bf:df:
58:ba:2a:c7:f5:c6:5d:7f:da:ff:ac:06:f4:67:58:
b7:1f:31:f8:9e:d1:7e:8f:d3:ae:27:51:6e:95:c6:
62:36:72:09:9d:98:38:3d:9d:59:bc:78:fb:4e:39:
66:6d:dd:39:2e:49:b1:27:f4:87:b0:3c:96:89:ff:
77:ef:c2:01:3b:52:4f:f4:95:06:29:ce:96:8a:7b:
99:23:f8:fb:95:18:37:0e:8c:bc:07:99:4d:f6:80:
d8:2b:96:cb:3e:2b:5d:9f:2c:62:44:3d:82:bc:4a:
2a:50:76:cd:41:89:fa:a9:49:88:3f:5a:2e:43:ac:
c0:cf:41:3f:b2:d7:4c:61:32:0e:ee:69:1c:8c:06:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:12:37:CC:87:B2:1C:2D:F5:E5:EC:10:F1:2D:28:7F:F8:8D:6A:5B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/938D363450FF11F09E25AFA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.109.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a8:da:72:c6:66:bc:e0:d6:d3:09:e7:c7:19:14:4e:c3:9f:
f9:ca:c9:96:de:d8:46:9e:bd:a6:cc:f4:b3:68:ba:83:01:d6:
93:cd:8a:50:b0:b3:58:a1:c3:b9:06:11:b1:54:af:4f:31:d1:
2c:45:72:03:39:0b:04:6c:cd:4f:81:34:8e:2c:70:35:e3:98:
fb:13:8a:5a:44:d9:06:6d:b7:b1:30:68:4e:83:fe:59:09:e4:
78:4e:f1:bf:e4:e0:3c:42:43:4c:cb:3f:56:dd:61:91:78:3f:
c8:a6:37:6e:c6:eb:dd:fe:31:28:67:64:19:ed:f5:29:bc:e7:
eb:fc:98:e8:8c:ed:e2:fe:53:d1:68:20:62:4a:5e:15:2d:dd:
00:69:eb:6d:43:e1:5b:8d:38:47:1d:dd:c3:d0:f4:6e:fa:2e:
82:ba:0a:f5:9e:47:e7:dd:0d:fb:b2:91:23:7c:9a:86:79:42:
fd:12:9f:7a:47:0b:38:6e:e0:11:4a:60:09:5a:8f:6f:7b:16:
44:6b:f7:5f:5b:2f:5d:a4:04:bd:50:dc:fe:92:e6:35:47:85:
7b:c7:66:f4:b3:95:8e:e1:cd:86:a8:c3:24:aa:c3:e1:b5:87:
36:8f:ee:40:e6:fa:ee:66:2e:0d:9d:4f:b9:f8:e7:fc:79:f4:
65:6b:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:10 2025 by rpki-client