Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/090DEC36CDB711EFA824F7BE762E951A.roa
File: 090DEC36CDB711EFA824F7BE762E951A.roa (raw, json)
Hash identifier: YCEh7HesjQbtTHpKxwHkmo5tr2QkUG4Oer1PGEUNu/g=
Subject key identifier: 9D:4E:65:E2:59:67:93:B6:09:AE:75:48:34:A2:65:D7:D0:52:B5:49
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04DC
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/090DEC36CDB711EFA824F7BE762E951A.roa
Signing time: Wed 08 Jan 2025 11:52:29 +0000
ROA not before: Wed 08 Jan 2025 11:52:25 +0000
ROA not after: Fri 09 Jan 2026 11:52:25 +0000
asID: 329007
IP address blocks: 196.251.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 13 Jan 2025 05:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 8 11:52:25 2025 GMT
Not After : Jan 9 11:52:25 2026 GMT
Subject: CN=677e66fd-7fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:88:df:6d:e2:83:1a:d6:e1:cb:f3:bc:7c:
a4:3b:61:2b:c6:2c:c9:ef:d6:57:98:e3:e4:47:0b:
97:57:b9:71:23:e6:21:71:94:86:43:43:57:22:e7:
55:42:55:8c:f9:c6:2b:fd:79:8d:0d:b6:fa:1b:55:
f9:4a:45:ed:31:29:c9:72:27:08:f5:5a:25:65:ed:
dd:e2:2e:29:52:70:18:13:98:5c:91:f7:86:ed:8a:
2f:d2:4c:68:fb:33:cd:03:06:5f:cf:f8:c1:7e:91:
3b:d7:cf:99:2a:3e:82:d9:a6:2e:c5:bb:b6:55:5f:
ec:04:55:9f:92:ed:f1:a5:b0:40:41:f0:cd:94:7a:
bf:3c:c3:ef:b2:6e:b2:6d:0f:be:a0:cf:b2:5e:d5:
99:0f:4a:3a:db:da:36:33:33:9b:77:6a:ed:7f:09:
86:60:c1:49:a8:41:5e:3b:80:a1:23:a2:35:a2:a9:
0f:3a:24:85:e9:3c:e7:d0:f9:6e:56:22:77:2a:99:
88:cc:51:d5:f2:be:73:02:82:9c:83:7a:aa:4e:a5:
9f:74:d4:59:37:4a:43:8d:cb:bf:da:63:d3:c0:0e:
98:61:b7:56:bd:75:e4:66:6b:2f:47:ce:39:b9:3f:
d6:df:9e:c7:7a:78:4a:a3:52:2e:a4:7a:e5:e2:5c:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4E:65:E2:59:67:93:B6:09:AE:75:48:34:A2:65:D7:D0:52:B5:49
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/090DEC36CDB711EFA824F7BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.64.0/22
Signature Algorithm: sha256WithRSAEncryption
17:e2:71:db:69:f9:0d:76:69:2d:51:75:4d:1c:1f:eb:5f:06:
15:b5:08:fd:3c:c8:03:6b:fc:5d:d8:9d:b3:a3:a6:eb:0d:85:
d7:37:4c:64:ef:64:a7:74:a7:52:d9:94:72:d3:67:31:89:e8:
45:46:78:42:3c:b2:71:d2:ca:84:25:f0:28:ef:b3:6e:9f:31:
00:4b:1e:78:ce:66:4c:84:6a:fb:73:d3:0e:08:6f:17:76:62:
dc:21:25:b7:ce:52:0c:d8:00:98:14:35:d9:59:6b:59:fc:a1:
10:94:8a:a6:2d:1b:a7:0f:f1:83:57:0f:7e:1e:fa:aa:7b:cf:
9c:b9:57:20:88:4e:01:71:5e:ac:73:34:0f:bd:59:53:fa:98:
fc:27:72:ce:a1:59:d6:d2:98:27:0f:33:65:21:af:4e:3e:02:
7d:85:c8:76:a4:d4:0b:7b:b3:6c:4f:b9:c1:fc:92:5b:b2:a0:
01:0a:22:c8:67:ad:69:93:94:4f:02:67:a1:3c:b4:62:d8:53:
b1:e7:64:03:bc:b9:5f:d9:8d:38:03:ab:97:4a:de:cb:0f:38:
1d:36:7e:cc:e1:c3:f5:fa:ce:53:1a:04:76:e1:ff:bd:a3:3b:
7d:5b:8f:73:29:42:7a:21:c8:4c:8b:bc:fc:b2:5f:7c:67:d3:
4c:cd:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:25:09 2025 by rpki-client