Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/98CC31C24B4B11F0934D0082DAE4EC9C.roa
File: 98CC31C24B4B11F0934D0082DAE4EC9C.roa (raw, json)
Hash identifier: AU1Abo+kWjdlQVL3rMYujsf988+SbEx5KxPHK+LMzHM=
Subject key identifier: D2:60:0F:D1:13:B1:58:4F:0E:0D:A7:AF:1E:B0:82:C4:65:7B:C3:4D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B8A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/98CC31C24B4B11F0934D0082DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 07:20:51 +0000
ROA not before: Tue 17 Jun 2025 07:20:46 +0000
ROA not after: Tue 16 Jun 2026 07:20:46 +0000
asID: 29802
IP address blocks: 196.251.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 11:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954 (0xb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 17 07:20:46 2025 GMT
Not After : Jun 16 07:20:46 2026 GMT
Subject: CN=68511753-cfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:3f:ba:9c:4a:4a:10:5c:fb:a2:4d:66:f7:
6d:ba:c5:7d:61:47:14:5c:09:41:5d:d9:0c:4d:48:
f5:c6:f9:cf:03:b1:46:9f:f5:f8:b9:42:28:4a:1f:
8c:80:40:7c:f8:e6:aa:c9:5b:48:2f:69:55:b1:26:
cf:8a:99:4e:2f:97:47:ab:6a:d8:df:81:ce:c5:93:
d2:e6:60:d4:d6:cb:90:7d:44:4f:2f:3c:22:25:a4:
9f:63:29:83:a5:a0:18:96:7b:ed:5d:e8:b6:99:18:
03:63:6e:e1:58:56:54:70:e1:2a:32:4f:58:06:43:
62:da:b7:93:30:28:b5:35:c0:e2:6a:fe:8a:ac:98:
9e:ee:a0:38:0b:c5:db:e0:3e:d9:ee:2a:d7:27:ce:
28:f3:09:09:bb:5f:9e:b8:3d:12:56:df:5f:8c:8a:
43:34:a4:b6:49:1b:c9:0e:e2:7e:ad:fd:79:74:6d:
f2:02:68:13:b1:d9:18:81:b6:54:81:a0:37:1a:9b:
21:d7:19:bb:da:c0:e3:59:73:e5:ef:9b:b2:93:2d:
3d:65:da:fc:05:79:00:3d:7e:91:f4:8e:71:d9:0f:
4a:e5:76:b8:87:63:58:b1:30:c1:75:01:4a:c8:7e:
df:be:d9:28:8d:51:17:57:19:b9:c6:8c:bf:08:83:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:0F:D1:13:B1:58:4F:0E:0D:A7:AF:1E:B0:82:C4:65:7B:C3:4D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/98CC31C24B4B11F0934D0082DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.74.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6a:eb:95:23:26:b4:07:94:77:ec:4a:fd:3f:2e:04:96:32:
f2:bb:23:b2:79:72:d3:e8:77:d1:43:53:9b:3d:0f:73:f6:69:
4c:6b:0b:a6:46:65:6d:3a:9d:7d:68:13:6b:99:34:56:17:bd:
44:92:7f:e1:aa:84:fd:59:4f:2c:b2:39:35:7b:1e:92:84:e7:
9c:a7:cb:9d:56:f9:13:20:ce:51:38:36:95:0a:83:6f:3b:f8:
dc:4b:10:02:87:18:71:eb:4d:c6:d5:25:0d:34:33:2b:59:71:
b4:9c:9d:c4:09:18:09:26:ce:84:0c:6a:97:6a:67:a9:77:5d:
4e:a8:7c:86:57:90:4d:11:9c:34:1c:27:9f:dc:a9:9e:4e:97:
c8:5c:03:74:1c:9f:31:4f:f1:77:85:73:7a:25:b8:6e:59:07:
7f:0a:77:2e:2e:78:5f:c9:39:a6:4e:c6:9d:fb:83:98:bf:00:
69:a8:e6:73:15:f8:cd:a9:90:12:69:59:65:78:3d:d7:ba:f6:
69:f8:91:41:a6:33:a0:d1:a5:e2:2b:07:d5:bd:53:f1:7b:02:
39:a1:dc:4d:09:a9:b0:82:a2:ff:30:fb:16:c3:68:a6:34:f4:
00:be:a2:55:c4:58:d0:32:1c:a3:af:63:e8:36:8a:6a:a8:4a:
cb:8d:e9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:31 2025 by rpki-client