Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D625E6B250FF11F098CBAEA5DAE4EC9C.roa
File: D625E6B250FF11F098CBAEA5DAE4EC9C.roa (raw, json)
Hash identifier: oqQt4K2jIpTbS73FLhtLscr/TFORVKBgQurNNDtbK7I=
Subject key identifier: 7B:D1:EE:A4:CA:50:9F:25:29:91:0C:6C:D9:7D:4F:D9:90:7B:54:E8
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BD4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D625E6B250FF11F098CBAEA5DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:33:39 +0000
ROA not before: Tue 24 Jun 2025 13:33:34 +0000
ROA not after: Wed 24 Jun 2026 13:33:34 +0000
asID: 2914
IP address blocks: 196.251.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 08:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3028 (0xbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:33:34 2025 GMT
Not After : Jun 24 13:33:34 2026 GMT
Subject: CN=685aa933-cef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:c6:c2:7d:a8:50:1c:fe:06:d3:33:df:f6:
5d:ed:a4:3f:10:9c:ca:e2:0f:cc:70:6d:31:71:33:
14:7f:fd:fe:26:39:18:94:4c:00:80:a9:74:c4:67:
ef:ea:e2:33:bc:ac:45:21:85:68:6d:c0:98:f5:57:
e4:8d:1e:57:ca:4e:fb:b6:28:b7:1e:2c:39:6a:2b:
93:80:68:bf:80:cb:15:c8:fc:7e:d8:ea:6c:db:fc:
84:d2:0a:eb:61:16:ec:d6:15:3e:a7:18:47:db:1c:
0e:ff:0b:35:bf:b3:df:3f:91:7e:e9:bd:c2:28:4f:
54:03:5d:49:b0:70:e9:cf:10:22:c9:f5:90:07:02:
42:76:5d:e7:bf:49:88:41:ee:4f:f7:b2:d9:03:7d:
58:0d:a8:c0:24:e3:e9:b3:c6:81:d2:36:97:86:e6:
46:ad:a9:4a:27:3f:62:3a:b2:20:a6:cb:19:d0:d0:
68:58:93:cb:36:45:f9:6c:c3:b9:ca:d0:a7:0a:85:
24:0b:c9:f1:db:d5:32:90:93:e5:fd:51:0b:5f:fc:
b3:a9:91:fb:10:2b:5f:86:f5:44:cf:8d:17:ba:c0:
3c:ce:6f:42:ac:cb:7c:ce:8a:6b:a1:50:08:d1:ca:
5f:8d:cb:71:ce:37:67:21:b9:81:59:24:7e:fa:71:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:EE:A4:CA:50:9F:25:29:91:0C:6C:D9:7D:4F:D9:90:7B:54:E8
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D625E6B250FF11F098CBAEA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:50:ca:a0:27:c2:d1:ae:ca:5b:eb:ff:b8:c4:3c:a4:c5:43:
4c:b8:4c:e9:a6:39:ae:43:5a:36:91:59:71:5a:2a:65:0e:b4:
5f:ff:79:5a:46:0d:29:8c:69:7f:41:37:c4:05:0d:54:a7:21:
1d:fc:6e:03:56:20:ad:fa:d0:05:73:9e:99:e9:05:40:88:40:
4b:cd:02:45:1e:93:0f:b7:6b:18:6f:ee:40:4b:90:38:c6:9b:
4b:c0:94:6e:9c:e1:2f:d5:bb:b0:99:d8:10:29:d2:0a:72:52:
39:0f:fb:f3:2f:85:ea:16:f1:b7:58:83:0a:4a:9a:0d:99:ab:
9e:23:67:9d:be:78:bc:ab:60:81:45:2d:6e:75:0d:57:69:8e:
82:4c:99:1e:bc:da:72:14:6a:df:1c:92:14:1a:d8:89:4d:28:
a2:8c:0a:e5:f4:a6:6a:f0:7b:a2:bd:06:d0:ed:32:9e:6a:fa:
f8:4f:ce:85:24:1e:8c:90:06:0c:87:a9:28:69:4e:86:c4:df:
d4:6d:8d:a1:25:59:73:65:ba:59:aa:fb:c6:c7:0b:60:9d:f1:
1d:76:4d:ea:7b:91:91:b0:7e:77:6d:05:9f:12:41:a0:76:31:
ba:7e:4a:a1:ec:ba:c7:74:85:84:3e:c6:9b:a9:6f:71:73:ad:
86:08:48:f9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA2MjQxMzMzMzRaFw0yNjA2MjQxMzMzMzRaMBgxFjAU
BgNVBAMTDTY4NWFhOTMzLWNlZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClw8bCfahQHP4G0zPf9l3tpD8QnMriD8xwbTFxMxR//f4mORiUTACAqXTE
Z+/q4jO8rEUhhWhtwJj1V+SNHlfKTvu2KLceLDlqK5OAaL+AyxXI/H7Y6mzb/ITS
CuthFuzWFT6nGEfbHA7/CzW/s98/kX7pvcIoT1QDXUmwcOnPECLJ9ZAHAkJ2Xee/
SYhB7k/3stkDfVgNqMAk4+mzxoHSNpeG5katqUonP2I6siCmyxnQ0GhYk8s2Rfls
w7nK0KcKhSQLyfHb1TKQk+X9UQtf/LOpkfsQK1+G9UTPjRe6wDzOb0Ksy3zOimuh
UAjRyl+Ny3HON2chuYFZJH76cf+5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUe9Hu
pMpQnyUpkQxs2X1P2ZB7VOgwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0Q2MjVFNkIyNTBGRjExRjA5OENCQUVBNURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+0swDQYJKoZIhvcNAQEL
BQADggEBAGxQyqAnwtGuylvr/7jEPKTFQ0y4TOmmOa5DWjaRWXFaKmUOtF//eVpG
DSmMaX9BN8QFDVSnIR38bgNWIK360AVznpnpBUCIQEvNAkUekw+3axhv7kBLkDjG
m0vAlG6c4S/Vu7CZ2BAp0gpyUjkP+/MvheoW8bdYgwpKmg2Zq54jZ52+eLyrYIFF
LW51DVdpjoJMmR682nIUat8ckhQa2IlNKKKMCuX0pmrwe6K9BtDtMp5q+vhPzoUk
HoyQBgyHqShpTobE39RtjaElWXNlulmq+8bHC2Cd8R12Tep7kZGwfndtBZ8SQaB2
Mbp+SqHsusd0hYQ+xpupb3FzrYYISPk=
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:51:39 2025 by rpki-client