Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2F22FB3AED2111EFBCCD626D762E951A.roa
File: 2F22FB3AED2111EFBCCD626D762E951A.roa (raw, json)
Hash identifier: BSMVRBAAsRnQt7Z1HzY2NXk6NWSDFa34IXOFW8W8NB0=
Subject key identifier: D6:50:83:FC:CE:7E:0E:7C:2D:CA:74:6F:72:68:AF:DA:21:F9:3A:A7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0668
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2F22FB3AED2111EFBCCD626D762E951A.roa
Signing time: Mon 17 Feb 2025 11:20:25 +0000
ROA not before: Mon 17 Feb 2025 11:20:22 +0000
ROA not after: Tue 17 Feb 2026 11:20:22 +0000
asID: 208485
IP address blocks: 196.251.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 11:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1640 (0x668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 17 11:20:22 2025 GMT
Not After : Feb 17 11:20:22 2026 GMT
Subject: CN=67b31b79-ac67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:cb:77:cf:e8:32:09:d7:00:86:b1:9b:16:
da:bb:5e:d8:94:66:9b:ae:35:0f:e6:fa:fb:2c:c8:
8c:6a:6b:67:d7:a4:67:bd:87:b6:97:f8:ab:4f:d0:
f8:a1:73:3f:ba:8c:36:60:48:cd:c7:09:3c:0e:f9:
28:bd:c5:af:77:f8:73:38:07:16:04:d5:3b:46:c7:
eb:00:25:83:e3:b0:06:cd:91:ac:2d:21:b8:ae:4d:
ff:07:a1:34:17:99:ac:53:93:2e:da:ad:a9:24:b1:
60:bf:c0:40:d6:32:6a:9f:78:82:5e:5f:a5:3c:5e:
0a:03:37:36:5d:76:72:ef:f2:4e:3e:87:2f:a1:db:
3a:5c:17:28:90:ce:67:f1:df:27:74:63:70:9f:14:
71:66:65:9e:c0:3e:2b:68:c2:b2:0d:03:c3:79:16:
d8:fc:45:55:93:b3:f0:d2:56:a6:ef:3b:77:6f:84:
73:fc:53:3a:74:22:80:0b:2f:d1:da:df:92:01:d7:
53:5e:d4:a8:98:f1:90:de:32:13:5b:99:7c:93:b2:
da:8e:ca:38:1a:11:53:06:6b:27:08:de:9d:64:1a:
7f:0d:ca:06:ab:ed:71:78:37:30:29:75:d2:1a:76:
52:90:02:a1:ce:41:db:ec:57:d9:23:99:03:fe:64:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:50:83:FC:CE:7E:0E:7C:2D:CA:74:6F:72:68:AF:DA:21:F9:3A:A7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2F22FB3AED2111EFBCCD626D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.103.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:17:02:3a:84:36:9a:d2:89:6d:a9:7f:54:d8:2b:1f:d0:4e:
5d:ce:80:54:b7:c9:48:e5:22:ac:05:fb:16:d8:85:77:93:d5:
2a:97:ce:ee:65:cc:14:10:f2:0a:8f:26:55:52:2c:bf:b4:a8:
c3:03:8f:95:72:e9:72:ef:85:82:bb:a0:5e:85:b7:2a:25:c1:
bd:4f:2d:44:4c:7a:a9:5e:37:85:ca:1d:64:71:35:83:7a:0b:
23:29:c0:2b:79:88:81:3a:a6:92:3c:f5:76:b6:01:b8:37:6e:
85:57:45:7b:ed:6c:4f:b2:67:01:35:9c:b8:ba:44:21:3b:fd:
70:7f:26:d5:f6:d5:8d:07:2d:aa:ab:02:67:e7:90:b2:97:8a:
e3:49:60:23:c1:32:a6:f3:c8:f6:64:78:55:c7:d7:31:02:54:
b4:dd:d7:0e:3b:e9:06:93:35:67:bf:8a:ad:21:e1:6f:c7:1f:
e2:b1:e2:76:7e:62:82:99:2e:35:99:5b:c9:07:fe:f7:d2:f6:
2d:b8:2d:fc:fa:b8:a9:4a:ba:95:bf:bc:71:e4:e1:b4:1d:45:
5d:a8:80:c5:97:39:5c:4d:b0:2f:5d:8f:99:90:fd:1d:ab:55:
c4:fc:a7:c3:f9:5d:36:79:df:83:d9:f6:9f:94:4a:cb:c2:36:
44:0b:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:19 2025 by rpki-client