Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0FC432FCD17611EFA02C5981762E951A.roa
File: 0FC432FCD17611EFA02C5981762E951A.roa (raw, json)
Hash identifier: yPcr8k464y9zRcDhvnA2zWOyr9BqFpaDSgIQrw/pUNI=
Subject key identifier: 19:7B:C8:F0:5A:16:7D:2F:DC:D0:46:01:01:A7:DF:6C:65:D0:B6:09
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0506
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0FC432FCD17611EFA02C5981762E951A.roa
Signing time: Mon 13 Jan 2025 06:17:27 +0000
ROA not before: Mon 13 Jan 2025 06:17:23 +0000
ROA not after: Tue 13 Jan 2026 06:17:23 +0000
asID: 329007
IP address blocks: 196.251.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 07:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1286 (0x506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 13 06:17:23 2025 GMT
Not After : Jan 13 06:17:23 2026 GMT
Subject: CN=6784aff7-8694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:50:ad:67:4a:0d:90:2d:36:73:d8:96:57:
f3:7c:54:34:ed:13:09:b7:b4:4c:33:b5:dc:4b:40:
b3:ca:6d:f4:f7:ae:53:78:49:73:1f:06:53:eb:e5:
ad:61:19:37:0e:a9:4d:3e:50:f0:a6:33:ca:a2:d5:
ae:90:43:d6:b6:a3:af:66:cc:ca:69:1f:bd:23:21:
5c:6c:ed:3e:60:22:b1:8e:ed:95:f5:f5:e1:62:6f:
16:6a:66:7c:e1:b6:06:0a:37:d7:66:15:93:48:79:
17:39:9d:42:70:13:16:b5:c7:d0:fa:0f:af:b8:10:
44:05:7c:49:8f:c6:ae:1c:f1:12:f7:1b:7b:d0:95:
a8:a9:26:b4:93:38:85:0e:f2:64:f3:78:e9:50:0b:
e3:1c:b1:b4:b7:a2:86:e9:d0:e0:8a:17:95:a3:89:
af:fb:43:ce:b8:c9:ec:02:f5:37:67:6b:4e:70:c9:
d8:a3:91:3c:b6:90:3e:9a:69:f4:87:23:30:cd:93:
38:20:54:ed:86:65:42:94:2f:9c:3c:2a:99:16:b2:
8b:88:c3:80:b1:9f:fe:08:b7:72:28:d8:d0:c3:3a:
f2:cf:12:62:a9:a4:0a:30:82:44:60:5d:ea:7c:79:
05:ea:ec:5d:63:51:5c:30:f6:4f:65:ed:da:15:d7:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:C8:F0:5A:16:7D:2F:DC:D0:46:01:01:A7:DF:6C:65:D0:B6:09
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0FC432FCD17611EFA02C5981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.125.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ef:45:1c:2d:f3:7f:bd:50:7c:1c:e1:ef:43:f6:48:26:8c:
30:4b:3f:1a:50:77:c2:5e:02:a0:a5:fc:26:f3:b9:b4:3e:87:
10:b0:03:07:82:ca:54:53:98:b0:b0:64:3c:75:46:49:13:ad:
04:75:1c:bc:3a:10:b5:5d:95:b2:a4:d4:20:55:1f:04:63:13:
c2:bc:3c:11:23:0e:b0:12:e9:3c:25:b2:80:4a:f2:fd:cf:95:
86:74:7d:2e:b5:a3:f0:63:56:5d:6b:f2:02:cf:ed:37:a5:64:
c8:b0:2f:b3:66:a0:d9:4d:3a:a8:18:a7:d5:8a:51:c4:36:ed:
01:3b:c0:67:43:15:f6:00:1f:6e:a7:70:45:51:68:91:87:df:
33:06:90:3f:12:48:c3:b3:12:fd:2a:ab:1a:78:77:b4:21:64:
51:dc:92:fc:4d:12:d5:f9:4b:88:37:b5:72:94:21:a5:87:87:
0f:76:3d:ed:27:93:47:7d:3a:fa:70:ab:02:1a:76:42:89:f7:
8b:35:ef:7d:f1:78:89:fe:76:2e:a7:fc:74:2e:78:a6:45:29:
4c:07:8b:b5:cf:0c:3b:5d:e8:7a:84:c8:d9:76:8d:8f:e6:12:
70:46:69:3f:ac:75:c3:93:50:6d:d9:66:87:87:d1:eb:a3:5e:
1f:2e:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:44:19 2025 by rpki-client