Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/883844343B8A11F08B5CD184DAE4EC9C.roa
File: 883844343B8A11F08B5CD184DAE4EC9C.roa (raw, json)
Hash identifier: 4ec79O1Tqt4IT/Zs2+rj+5wWkH3shkG7ud/HEEqimkY=
Subject key identifier: 8F:97:E4:9B:5F:D6:EC:E8:97:80:08:F9:2B:A3:5C:42:65:AF:58:92
Certificate issuer: /CN=F36312D2AF/serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Certificate serial: 05B3
Authority key identifier: 31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/883844343B8A11F08B5CD184DAE4EC9C.roa
Signing time: Wed 28 May 2025 06:11:03 +0000
ROA not before: Wed 28 May 2025 06:10:58 +0000
ROA not after: Mon 31 Dec 2035 06:10:58 +0000
asID: 37236
IP address blocks: 41.79.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 28 May 2025 09:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1459 (0x5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36312D2AF, serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Validity
Not Before: May 28 06:10:58 2025 GMT
Not After : Dec 31 06:10:58 2035 GMT
Subject: CN=6836a8f7-bca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:cd:17:3a:f2:f6:0a:eb:1c:81:96:90:23:
7a:1f:a2:9e:3d:8e:08:7f:6d:27:e8:47:21:20:51:
df:9b:5b:77:1b:d6:c7:0a:9a:b3:d3:ba:d3:48:3a:
85:e5:d9:fa:c9:06:9d:e8:60:4e:10:7b:c1:8a:f5:
0d:b0:86:d3:07:fc:04:ff:f9:af:4a:d7:ed:d6:7c:
bc:66:fb:94:c2:59:63:83:cf:51:9b:ca:71:42:f7:
1d:52:44:6e:fc:7b:25:16:a7:0b:89:cb:05:83:ae:
a9:4a:dc:ea:f1:28:bf:a2:79:0a:e3:93:81:bc:f4:
16:40:d3:7d:42:d3:65:ed:a3:4e:38:04:75:79:bf:
38:ca:ea:d3:ec:c0:e9:69:2f:36:66:31:9a:e3:88:
41:99:ed:c7:41:be:12:ec:3d:0b:b6:62:0e:fd:a8:
fe:0c:b6:0d:73:da:b8:55:61:40:17:aa:e9:f7:7b:
48:b4:cf:bd:88:9c:5b:a8:58:81:77:67:ff:3a:bf:
a9:fc:57:b1:6d:76:1f:8d:ca:51:01:20:72:fd:2c:
80:8e:43:52:6a:ea:58:b8:c8:1d:bf:30:7c:24:f3:
c8:fb:ef:0d:c8:18:c8:cc:56:45:1a:63:ca:3a:6d:
0f:df:ba:90:96:9b:1f:bc:48:22:b1:73:b6:2b:1e:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:E4:9B:5F:D6:EC:E8:97:80:08:F9:2B:A3:5C:42:65:AF:58:92
X509v3 Authority Key Identifier:
keyid:31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/883844343B8A11F08B5CD184DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.240.0/22
Signature Algorithm: sha256WithRSAEncryption
40:04:db:d5:e8:e8:26:5f:c7:ed:5e:37:9a:db:c3:c5:b2:dd:
58:26:0c:1c:01:78:f0:00:14:f9:65:dc:58:35:62:24:77:55:
c0:1a:9a:fd:90:5a:19:85:20:59:54:e8:5c:21:23:ba:33:f6:
90:d4:e6:4e:a6:52:92:22:6f:b0:72:af:03:fe:6d:d5:b5:b4:
0c:0b:2e:63:42:01:af:58:42:5e:a4:f1:2a:aa:40:86:58:ca:
08:33:d7:e3:da:94:c6:b5:bf:b8:9b:e7:1f:5e:f7:07:8a:5c:
35:a5:92:f6:7b:b5:83:0c:c7:ce:9c:f0:74:7f:54:14:14:e6:
81:b5:09:ca:cf:a9:3b:0d:48:99:cd:24:75:dc:d5:92:18:48:
3f:b8:a7:7e:5e:54:02:f8:3a:46:8b:03:54:99:24:d3:8c:ec:
f1:40:d6:f3:18:95:9f:bd:70:9e:3b:19:e4:f2:05:7f:c9:a7:
b1:e2:90:ea:da:f3:03:6f:df:b7:77:18:6e:86:a5:59:85:16:
49:4c:06:79:72:85:f1:6f:cc:ee:ae:e3:d8:e6:57:55:5e:4f:
51:53:33:76:e4:15:62:3d:e1:0d:90:d6:40:8d:f1:20:be:8b:
ff:42:d3:b9:81:40:75:f3:a8:09:02:c2:8c:6a:47:c9:5e:80:
b0:1b:eb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:07:32 2025 by rpki-client