Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/017A6396F34B11EFB25883B6762E951A.roa
File: 017A6396F34B11EFB25883B6762E951A.roa (raw, json)
Hash identifier: dyJQDyePtSh4VtT3jfEhZWyvIEVLbFjb8Wcmelcoda0=
Subject key identifier: 49:56:6C:31:72:FD:E0:1A:9E:17:CE:0B:1A:BA:D2:E4:3C:89:54:78
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 069B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/017A6396F34B11EFB25883B6762E951A.roa
Signing time: Tue 25 Feb 2025 07:34:54 +0000
ROA not before: Tue 25 Feb 2025 07:34:51 +0000
ROA not after: Thu 26 Feb 2026 07:34:51 +0000
asID: 43260
IP address blocks: 196.251.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 07:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1691 (0x69b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 25 07:34:51 2025 GMT
Not After : Feb 26 07:34:51 2026 GMT
Subject: CN=67bd729e-1807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:33:7f:11:6b:d8:11:ad:c8:81:d7:cf:6b:
c6:d8:68:5d:09:9a:1e:9e:d0:d3:70:f9:01:bf:5e:
aa:1e:3b:1c:eb:a3:47:45:d0:9e:8f:e2:77:3a:22:
84:e8:3e:75:38:f0:dd:92:df:73:0f:20:c3:62:32:
10:d4:01:f2:6f:85:c5:c7:f6:f1:4b:a4:7d:80:7d:
ed:0a:a5:ef:fa:8b:4e:5f:01:7f:60:d2:fe:ef:99:
bf:e9:ea:51:ab:98:c1:90:0e:4d:79:71:38:4e:76:
ca:79:92:42:c7:2c:09:7c:8e:e3:53:70:51:0a:52:
14:3a:d1:1d:01:b6:c8:36:27:67:30:d1:d2:0d:22:
4b:bb:47:61:40:8a:6c:3d:1c:ac:6c:fe:34:aa:a4:
19:2e:d2:ba:cd:e9:fe:d7:2c:1b:a7:d4:d4:05:62:
69:6a:7c:e5:5a:76:7d:8c:69:4f:e5:a0:b4:16:bd:
94:e2:2b:20:8c:17:0c:d2:68:13:41:c3:e1:2f:bf:
00:dc:5b:6f:43:24:dd:60:89:9d:4d:ad:ec:b3:64:
68:47:be:28:3f:a2:8c:01:e8:97:1c:db:8d:49:f3:
97:f3:e4:f5:a2:b7:86:7a:aa:25:87:68:ae:b3:ad:
a5:b8:b4:e5:70:21:d5:34:34:95:fe:a3:49:e4:9e:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:6C:31:72:FD:E0:1A:9E:17:CE:0B:1A:BA:D2:E4:3C:89:54:78
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/017A6396F34B11EFB25883B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fe:dc:16:87:0a:0d:f6:d6:16:42:b6:28:3f:27:73:87:1d:
3e:34:74:4c:17:0f:88:a1:60:91:58:cf:42:b8:ee:c2:92:f6:
ba:97:b0:b9:1c:5f:13:c1:9a:47:9e:6f:21:46:05:4d:5a:ce:
21:ff:c2:71:d9:02:20:cc:b3:16:28:be:32:59:94:bc:ad:ad:
59:6f:4c:0a:43:bf:dc:f9:6a:c2:55:8c:d2:25:1d:d7:12:51:
db:61:9a:7c:84:00:a1:4f:29:89:cc:30:5d:29:de:90:cf:e9:
5c:20:a1:21:07:8c:fb:47:e2:2c:be:fe:37:b0:05:4e:22:11:
0a:31:f3:d5:a4:61:dd:b5:d7:36:f3:44:9e:2b:8e:0d:f8:ca:
bb:31:54:53:a8:f6:74:cc:63:a1:94:4c:f5:55:ee:48:4d:21:
df:bf:45:87:8e:05:81:ea:08:88:c0:0d:7e:37:9a:fc:9c:05:
32:ea:76:7e:1a:62:ca:38:7a:82:e4:84:7d:05:d4:9a:27:ad:
e4:d6:8a:c9:7c:80:4d:6c:33:ca:56:dd:89:2a:55:f9:c3:e1:
d8:8d:cb:98:95:e2:e7:3e:05:98:c2:fb:e2:ec:ed:57:c5:80:
ca:83:92:a0:15:5d:dc:be:62:2d:c0:13:bf:ba:2e:88:02:e0:
b1:aa:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:19:13 2025 by rpki-client