Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BC62833450FF11F0982ECEA3DAE4EC9C.roa
File: BC62833450FF11F0982ECEA3DAE4EC9C.roa (raw, json)
Hash identifier: SXzopuA6uoDgwRggP2rW2Ht+hdetkrXLTo8Bn7Znj1M=
Subject key identifier: C9:64:60:F1:D3:C1:6F:2E:F1:C5:45:E6:28:34:D1:98:36:02:F9:16
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BD2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BC62833450FF11F0982ECEA3DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:32:56 +0000
ROA not before: Tue 24 Jun 2025 13:32:51 +0000
ROA not after: Wed 24 Jun 2026 13:32:51 +0000
asID: 2914
IP address blocks: 196.251.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 08:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3026 (0xbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:32:51 2025 GMT
Not After : Jun 24 13:32:51 2026 GMT
Subject: CN=685aa908-be7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:09:92:bf:bc:06:c4:2c:f3:a8:9c:c5:7b:
23:a7:aa:dd:c3:64:c5:91:c1:5c:12:d8:fe:40:6a:
b7:e1:63:01:a1:b6:82:0d:d5:bb:87:89:d4:a6:5c:
59:90:e1:d4:a4:ed:d8:cf:5e:51:f1:4e:dc:ca:71:
a1:2b:08:5e:cc:fd:de:03:54:1f:8e:6e:48:b1:e0:
13:33:a9:98:50:f9:ef:6a:28:62:14:17:a1:72:39:
66:30:b2:ae:4b:0a:39:22:5f:5e:3a:6b:4d:ab:ce:
c5:4d:18:4b:ea:ba:9c:2f:29:da:80:ca:e2:27:70:
fd:6b:3a:1b:26:62:91:31:d4:de:bb:93:85:83:84:
64:d1:bd:88:6e:77:a6:1d:4f:07:ba:5c:2e:82:a0:
cd:51:7a:3f:0e:64:1d:b6:38:07:62:06:5c:c5:e0:
2c:b5:c2:be:8d:a8:03:6b:3b:73:8c:c5:7b:a2:96:
76:e3:86:1c:53:ad:1b:e2:93:0f:23:f3:49:07:d5:
2f:d2:99:e5:62:9a:a3:7a:1b:7d:ff:39:6e:09:c6:
9e:1c:21:2e:92:2d:05:4d:e1:c3:4b:cd:d8:4d:b6:
b8:16:88:72:88:8c:e1:4c:ec:e7:b6:b2:67:7b:0e:
9c:68:c0:56:25:59:58:74:94:5c:d3:4f:a6:b0:a3:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:60:F1:D3:C1:6F:2E:F1:C5:45:E6:28:34:D1:98:36:02:F9:16
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BC62833450FF11F0982ECEA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.74.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f5:d1:9a:51:9a:cd:bb:81:30:70:7c:2d:76:64:2d:2e:13:
3e:a1:6c:06:4a:47:62:09:88:38:7e:15:30:cd:91:08:cd:38:
ea:13:87:74:fb:eb:0f:75:e7:f4:32:32:fc:40:60:05:a2:e5:
eb:d5:0c:b2:5f:98:9b:c4:3e:38:f0:84:86:2c:bb:46:bf:ec:
b6:c5:4f:99:01:a9:ba:4b:0f:59:72:93:5f:69:94:b2:8c:8c:
35:11:7a:2a:40:6b:49:ed:e7:bd:fa:fa:7f:71:8b:7c:88:3a:
78:76:0d:bf:e0:41:ad:0b:34:a2:d8:e6:7c:93:f9:5d:b3:c1:
a4:18:79:bd:75:96:8b:35:24:43:24:eb:bd:d6:28:cc:bd:e1:
1d:d8:45:2d:5e:74:9b:85:a8:be:39:66:0b:43:c1:71:57:a7:
fb:03:e7:ee:02:17:f2:c8:4d:0f:06:d0:23:cc:14:ce:12:fb:
68:be:42:e7:05:52:52:13:ec:51:f2:cf:81:1d:be:da:fc:9f:
42:c5:77:08:8a:4a:ab:ed:41:84:08:f6:4b:0f:0b:05:3c:2d:
4c:e4:30:da:31:27:ea:b7:43:ca:0e:16:cc:b7:ff:bb:05:55:
4a:9f:e5:e1:bd:95:2b:54:e0:1b:5d:1f:d3:74:27:6a:dd:12:
a4:b5:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:49:34 2025 by rpki-client