Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2502A8C8C6A011EF991790A1762E951A.roa
File: 2502A8C8C6A011EF991790A1762E951A.roa (raw, json)
Hash identifier: lyNxejD3Gzhm5gri18QzncpYv7OkAFpzc22jbKw4sQ8=
Subject key identifier: C0:BB:18:06:B2:B2:6C:46:C7:39:08:50:84:4D:C6:50:02:D6:DE:CF
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04A3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2502A8C8C6A011EF991790A1762E951A.roa
Signing time: Mon 30 Dec 2024 11:20:59 +0000
ROA not before: Mon 30 Dec 2024 11:20:55 +0000
ROA not after: Wed 24 Dec 2025 11:20:55 +0000
asID: 329007
IP address blocks: 196.251.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 11:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1187 (0x4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:20:55 2024 GMT
Not After : Dec 24 11:20:55 2025 GMT
Subject: CN=6772821b-0a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:77:d5:b4:5d:45:83:38:25:bb:54:b8:0f:
76:e7:69:6a:f8:ed:7d:ee:b5:3b:aa:78:d7:24:76:
c4:ae:90:29:c8:c8:dd:5f:dd:fa:a2:6f:5c:23:a8:
c5:cf:63:2f:44:bf:31:0c:43:33:d3:9f:ea:72:eb:
e3:42:54:95:a7:73:54:24:f9:8e:0f:36:c6:8d:bf:
fa:46:ff:18:ed:42:87:d8:ef:7f:9b:4c:a4:8b:28:
cb:28:28:4a:bd:d9:80:e5:0c:9a:52:10:37:ba:9e:
72:01:c0:29:25:86:86:26:80:21:7c:66:22:c9:a8:
9f:02:a5:43:63:90:be:88:37:ca:6f:e8:4c:81:c9:
9a:03:cf:81:b7:3b:1c:1e:ca:7e:7c:b3:1e:38:62:
93:a2:3c:5c:1a:eb:79:f6:9d:24:e9:0c:4a:a8:2a:
89:eb:5d:4d:a6:ad:d2:dc:f5:5c:aa:69:d4:80:47:
0e:60:9c:d3:83:90:e5:9e:c1:02:8f:13:5b:47:65:
48:df:f4:da:ce:e4:43:ed:4d:f6:75:79:1b:4b:f2:
a2:08:93:03:ce:9e:20:3b:86:03:b6:fe:9b:aa:8d:
c1:05:06:bf:ef:27:c8:9d:04:f2:96:6d:c5:03:ad:
c6:40:73:76:47:f6:9a:8c:10:74:fa:55:c0:0a:e3:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:18:06:B2:B2:6C:46:C7:39:08:50:84:4D:C6:50:02:D6:DE:CF
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2502A8C8C6A011EF991790A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.110.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:dd:c7:a4:00:dc:4b:9a:82:ef:03:7a:3b:47:9a:07:60:98:
38:79:5a:d7:28:03:a8:f9:c7:b8:09:10:ef:8f:8b:ea:a1:3e:
4e:59:ae:83:1d:5a:6a:6c:d3:60:28:57:e2:34:09:5e:4b:15:
11:1f:9f:4d:48:53:c8:9f:f3:c0:8f:63:20:82:42:63:e8:b0:
ce:b3:53:25:68:e1:1f:e1:4d:ee:8c:f2:9b:39:33:78:18:5e:
5e:37:4a:b3:02:e2:22:d8:5d:42:f7:98:a2:91:e6:0a:5e:ae:
3d:16:a4:88:93:4e:b0:d1:8b:87:c8:c4:cc:05:53:aa:f9:e0:
bf:4a:09:e7:d2:6c:79:d2:db:6b:62:7d:04:e8:1e:2b:10:5c:
8c:20:7c:4f:e5:d0:20:c9:c9:69:b9:9a:73:b0:17:8d:e6:3b:
c7:3a:ca:10:8e:79:8e:b2:aa:0a:2d:f1:77:c3:dd:74:5f:b0:
f6:7c:78:9c:a7:d2:cb:3d:b2:d8:ba:6f:f4:b3:78:91:ba:0a:
58:5d:e7:9d:d5:21:a9:e7:35:6b:01:12:da:71:16:21:f5:dc:
cb:7e:2b:9f:6d:61:6e:f6:80:89:f5:c3:64:e7:fd:87:1e:71:
95:cd:bd:47:ef:41:57:3e:2b:64:1c:fb:82:a4:ad:d0:65:1c:
ef:dd:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:24:50 2025 by rpki-client