Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ECE7B21E50FE11F0818F279FDAE4EC9C.roa
File: ECE7B21E50FE11F0818F279FDAE4EC9C.roa (raw, json)
Hash identifier: cnkeDizIc8Fy9fzGnapwyFKceR234OaOuB+l9HSwzOQ=
Subject key identifier: 46:3E:B8:29:99:5F:4F:47:68:19:5E:03:0B:76:A4:5B:93:04:8D:37
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BC4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ECE7B21E50FE11F0818F279FDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:27:08 +0000
ROA not before: Tue 24 Jun 2025 13:27:03 +0000
ROA not after: Wed 24 Jun 2026 13:27:03 +0000
asID: 2914
IP address blocks: 196.251.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 08:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:27:03 2025 GMT
Not After : Jun 24 13:27:03 2026 GMT
Subject: CN=685aa7ac-2846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:ba:7b:51:66:ea:14:ac:28:c8:d2:fa:9c:
48:f8:6e:3e:3e:0b:ff:3f:52:2d:d4:e5:0f:89:45:
79:0f:47:58:b7:15:a3:7a:be:5b:4f:ae:83:a6:68:
3d:14:1f:a5:2a:e6:cc:ae:a0:13:ed:c6:99:19:58:
27:e8:09:0c:cf:8e:74:12:1b:48:4b:1c:2f:6a:96:
47:64:07:cb:9f:13:74:f5:4b:b6:d1:7b:f0:7d:d9:
06:59:7b:00:f5:58:7a:f2:18:99:4a:5b:12:5c:46:
3c:4c:0c:de:fe:26:f4:a9:18:f3:97:d7:a4:15:a6:
f8:f7:bc:5e:d5:ae:e3:fa:33:5a:31:7a:a2:5d:45:
c8:80:4e:59:52:ec:58:8b:41:b0:58:8e:69:03:31:
86:3f:9e:20:15:32:52:1c:ec:aa:a1:ec:f9:37:98:
59:80:00:4e:48:49:5d:bb:e1:ef:f9:15:c6:83:36:
9d:e0:b5:0f:d8:1f:f8:70:89:87:0f:a1:d2:04:52:
ad:ed:96:e3:d9:e7:c3:c1:11:3c:1f:97:71:02:c4:
a0:51:d6:50:2e:72:58:0c:e4:c9:5e:2c:fc:6d:58:
2e:61:0b:e1:f6:b0:b5:81:e4:4d:1e:22:94:6e:21:
bf:1b:12:49:1d:20:6b:36:60:87:6e:15:ab:9a:21:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3E:B8:29:99:5F:4F:47:68:19:5E:03:0B:76:A4:5B:93:04:8D:37
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ECE7B21E50FE11F0818F279FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.104.0/24
Signature Algorithm: sha256WithRSAEncryption
94:79:f7:f8:2f:bf:02:f6:77:24:41:cd:1e:a3:a9:89:b1:1f:
46:88:68:fb:e7:2d:d1:53:fe:dd:be:c8:14:e4:06:74:72:8a:
6f:42:b1:f8:43:20:83:f0:1a:eb:9a:b3:60:17:2d:26:ff:55:
ce:3f:ce:9d:de:1b:7f:ce:2c:ec:ca:29:64:c8:48:36:85:dc:
ba:5d:6b:9f:0a:ac:2c:fb:f6:82:5b:3b:1a:a9:c5:c9:fa:d5:
e2:6c:47:ab:92:8a:5a:9b:f9:0b:4b:66:ac:20:1d:ba:92:e5:
b7:cf:2c:60:4e:de:b9:28:0b:2d:97:c0:fe:37:80:18:6f:8c:
06:25:17:c6:a1:cc:dd:a5:8b:f7:37:d9:ab:78:63:46:05:9c:
ce:c7:4f:6a:02:d5:d6:00:17:d5:ac:bd:ef:2d:36:6a:cc:d3:
35:5d:97:04:b3:ff:eb:b6:36:b9:40:e2:50:cb:32:d0:21:a8:
5f:38:82:e8:40:c7:a7:53:3b:11:be:f7:5a:ab:29:39:9b:7a:
b3:1d:76:3f:e3:9a:d5:1d:b0:ba:78:40:b6:01:be:5f:91:90:
b8:cd:a7:9c:e8:e9:b7:04:f9:39:0d:73:c2:94:48:18:bc:7d:
cc:f4:2a:1f:e0:98:fe:b0:14:fa:73:a8:fe:12:88:c0:eb:64:
4a:1c:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:47:09 2025 by rpki-client