Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0B861E16C6A011EF8E4C84A1762E951A.roa
File: 0B861E16C6A011EF8E4C84A1762E951A.roa (raw, json)
Hash identifier: Eak8DRjy8quS/6C3E49nTyStyEKS5/NE1CQJ8NxzSQI=
Subject key identifier: 01:10:B6:52:DE:0A:FF:2C:71:04:6A:DD:7F:CE:A9:79:03:DC:A3:95
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04A1
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0B861E16C6A011EF8E4C84A1762E951A.roa
Signing time: Mon 30 Dec 2024 11:20:16 +0000
ROA not before: Mon 30 Dec 2024 11:20:13 +0000
ROA not after: Wed 31 Dec 2025 11:20:13 +0000
asID: 329007
IP address blocks: 196.251.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 13:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1185 (0x4a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:20:13 2024 GMT
Not After : Dec 31 11:20:13 2025 GMT
Subject: CN=677281f0-c7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:58:3a:59:a7:61:09:9b:c7:cd:11:96:14:
a6:e3:bd:df:1e:be:3d:74:92:5e:20:4a:d4:1b:cd:
3a:82:7b:c5:83:72:a9:aa:6f:c6:46:8d:cf:6c:85:
2e:ce:56:3e:e7:81:0f:4f:26:71:53:43:26:63:b0:
ec:f8:53:ab:1e:6e:cf:af:10:6d:13:0a:98:e1:22:
38:b2:07:26:73:6a:c4:e7:be:c7:65:a9:b8:e6:c8:
28:36:55:90:30:a2:93:da:2f:4f:af:d6:fb:d2:5e:
4e:c1:0c:d9:ff:e4:85:9c:21:ab:eb:b7:79:8a:42:
0a:81:62:af:cb:1e:cd:df:29:4c:6d:ee:fe:60:84:
71:29:8e:fe:02:2f:2b:02:18:0a:6b:ad:5c:9a:e1:
07:96:de:c9:59:06:9b:5d:63:a4:e8:fe:7e:70:bf:
8f:04:74:7c:5c:a9:68:ab:fb:ec:26:58:71:33:e1:
66:98:15:04:6e:c1:dd:2e:74:e0:d1:be:f2:05:68:
32:77:40:8f:69:ad:bd:d2:bc:9b:95:b2:68:90:54:
92:1e:f8:f1:33:fc:f4:5e:9d:af:7e:6d:40:f2:11:
f2:f5:12:88:69:c2:f9:9d:2c:9a:68:12:73:3c:30:
f5:43:74:8b:20:85:93:52:f8:21:a3:82:ca:8e:7a:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:10:B6:52:DE:0A:FF:2C:71:04:6A:DD:7F:CE:A9:79:03:DC:A3:95
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0B861E16C6A011EF8E4C84A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.90.0/24
Signature Algorithm: sha256WithRSAEncryption
61:03:d3:84:8f:b5:f7:50:3c:39:41:05:0c:23:b4:c5:d9:e1:
fe:86:1c:5d:03:aa:d6:30:ba:e4:56:ea:25:55:e4:e0:36:64:
03:fd:d9:66:0e:c9:7f:2b:7d:6c:20:70:a6:d2:05:e2:e4:b3:
36:97:76:8f:5c:96:0a:11:43:02:cb:f8:9a:96:23:4c:b0:fd:
9f:07:4e:38:df:1a:67:9a:44:1a:cb:44:23:92:69:69:09:04:
17:4a:14:0a:5b:f8:94:44:25:9f:ae:f5:17:c6:fa:75:91:e8:
b6:69:70:70:75:d8:e0:55:d5:f8:48:59:8f:83:cb:fe:ac:0f:
b9:94:db:53:7d:74:32:57:34:1a:81:d9:5c:94:11:07:ac:e0:
c2:c8:0b:eb:91:54:45:42:66:5b:16:fd:9d:62:c0:6b:38:d3:
08:ef:b0:6f:db:40:33:50:8c:44:f6:42:60:2d:ec:b9:62:8d:
ae:11:4f:ee:83:21:d1:a1:bc:0a:b5:23:89:f9:2f:f4:c1:84:
64:1d:61:0b:c9:d0:88:d6:0b:72:53:bc:4d:f7:e6:6b:e5:15:
21:70:42:73:6e:18:79:f4:d4:f6:17:ac:a6:ea:91:fe:b3:bd:
06:07:10:90:eb:e9:6d:77:d3:e0:64:40:da:c9:04:ce:ea:b5:
cd:42:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:16:05 2025 by rpki-client