Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FFE797AC50FF11F0903E88A7DAE4EC9C.roa
File: FFE797AC50FF11F0903E88A7DAE4EC9C.roa (raw, json)
Hash identifier: BR0GehC7Fk+SpkW9AXkk0bVsUWsvHL/IbsMe/tBVkNk=
Subject key identifier: 3D:93:7B:E6:00:0F:AF:78:83:52:5C:ED:FB:28:1F:83:9D:1F:EF:E3
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BDA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FFE797AC50FF11F0903E88A7DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:34:49 +0000
ROA not before: Tue 24 Jun 2025 13:34:44 +0000
ROA not after: Wed 24 Jun 2026 13:34:44 +0000
asID: 2914
IP address blocks: 196.251.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 07:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:34:44 2025 GMT
Not After : Jun 24 13:34:44 2026 GMT
Subject: CN=685aa979-75ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:00:ee:f0:2b:13:b1:c6:a3:1b:28:2f:8b:a9:
39:10:d6:3d:fd:0e:a0:ce:e0:47:83:7e:94:0f:83:
d3:3b:55:51:7c:b3:29:91:e3:83:ec:83:28:f0:64:
2a:ed:0b:4d:39:40:40:ac:71:8f:24:3e:42:d5:0e:
dc:c2:8a:dc:fd:3a:01:14:18:ae:fe:1b:6d:f9:3e:
ea:44:66:71:8a:6a:7e:6e:6c:c7:97:4b:e4:26:98:
5b:2b:e2:89:07:95:4e:82:c3:02:a4:4f:76:2b:fd:
cb:f1:66:38:f5:1c:86:97:6a:3e:fe:72:d7:51:cc:
d7:56:2d:92:21:e3:8b:96:0e:aa:42:96:07:d8:f8:
f4:bc:ae:4f:75:81:7e:a9:62:9a:71:f3:e1:b7:52:
35:e9:d5:af:d3:3c:e0:7c:9a:5b:b5:7b:b7:e1:7d:
58:1d:15:04:fd:cb:73:9a:ea:b3:6d:ab:4b:b6:93:
11:9c:d5:39:81:b7:0b:cc:60:4b:6e:aa:c8:4f:16:
4a:ff:1a:58:af:59:4c:2d:9e:2a:d8:7a:e3:7b:9b:
30:4a:f5:5a:53:9b:67:58:e6:d4:a3:7e:2e:27:1c:
5a:f7:fb:7c:f8:33:0f:e4:e8:ca:5f:d3:21:ff:36:
a3:b8:1a:fa:76:2d:0f:4b:6b:d8:d8:d9:ca:64:e7:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:93:7B:E6:00:0F:AF:78:83:52:5C:ED:FB:28:1F:83:9D:1F:EF:E3
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FFE797AC50FF11F0903E88A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.78.0/24
Signature Algorithm: sha256WithRSAEncryption
15:87:9d:c9:40:0a:8c:5a:91:b4:e2:d8:fa:b0:bc:c6:45:15:
ce:a5:bb:ee:e1:69:aa:04:e9:3a:59:a1:8b:f9:39:d8:49:5a:
bd:b3:fb:8c:1b:36:ea:55:1e:ea:3e:94:91:16:ac:5c:49:31:
31:d6:18:05:90:2c:8f:25:bd:19:97:79:1d:c0:a1:04:fa:28:
c0:c0:0e:33:f3:64:bf:68:27:f1:13:76:e8:ba:fd:1b:4b:c3:
a5:a1:c7:f8:41:23:27:50:9c:0c:cc:7e:9f:c8:a2:e6:7b:5f:
86:b3:8b:1f:fa:91:79:a6:70:1e:ef:42:87:0f:5d:de:49:37:
a5:50:04:9b:fa:32:17:73:62:9b:8b:b6:bf:cd:49:bf:22:1b:
2a:2c:3d:6c:05:85:ab:18:e0:52:72:21:32:e6:04:27:25:97:
bd:83:df:f8:04:c5:b1:87:f2:ab:41:3e:7f:64:90:c2:fa:5f:
dd:fa:01:87:d4:e0:8d:0e:7a:8e:a4:86:27:32:67:17:7f:b2:
59:d2:9f:a8:66:04:5f:d7:9e:51:2b:18:82:51:24:16:4d:a6:
d4:89:c7:73:22:77:d0:bf:75:42:24:80:84:c4:3c:4a:0a:7f:
0e:d4:67:76:75:bb:9e:60:e0:3b:fc:37:2d:55:d4:f1:74:5a:
06:1a:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:56:58 2025 by rpki-client