Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/33DF8CA2F80611EF878B799C762E951A.roa
File: 33DF8CA2F80611EF878B799C762E951A.roa (raw, json)
Hash identifier: oAtTHv+WyT8TJ1a5A7G+5H3vvDaIyUzlm0vOfulKdQw=
Subject key identifier: 0D:75:3C:15:53:82:9A:90:33:9B:A5:3A:72:06:89:7B:BB:F4:7D:DF
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06C4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/33DF8CA2F80611EF878B799C762E951A.roa
Signing time: Mon 03 Mar 2025 08:05:00 +0000
ROA not before: Mon 03 Mar 2025 08:04:55 +0000
ROA not after: Tue 03 Mar 2026 08:04:55 +0000
asID: 329007
IP address blocks: 196.251.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 06:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1732 (0x6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 3 08:04:55 2025 GMT
Not After : Mar 3 08:04:55 2026 GMT
Subject: CN=67c562ab-6748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:6d:e9:36:0f:a2:f2:bc:16:87:7a:b2:45:
ae:6d:e2:6b:24:a9:78:15:5d:52:f4:95:58:65:e4:
e7:8f:5c:6d:44:48:39:8f:77:e9:79:92:56:56:a9:
68:03:97:1b:31:66:92:b7:62:8c:e3:b8:3e:7a:8e:
9f:73:1c:bc:54:8e:80:72:61:da:5a:e1:49:bc:94:
29:62:3e:1a:5e:46:13:3f:89:44:e2:9f:c4:c6:40:
0b:70:7e:70:0c:a3:ec:0c:11:25:16:71:7f:f7:5b:
7f:bc:30:c7:6d:45:8c:63:58:35:68:d0:22:8d:1d:
7c:92:1d:b9:9a:4e:8f:06:c7:5e:74:e8:9f:ec:df:
f2:b3:d4:72:fe:35:d4:48:23:d1:6c:ab:95:ad:d0:
77:22:ac:91:d5:b0:32:f4:83:14:20:c5:08:07:00:
81:82:bb:33:72:2a:97:c8:95:14:05:4d:2b:31:02:
db:7f:d7:9c:18:67:0d:01:7a:c8:c1:bc:13:76:eb:
a6:7d:5e:21:58:72:73:8b:95:b7:5b:4a:33:cf:3d:
00:a6:d6:0a:e8:0b:dc:35:e7:21:7c:46:49:ec:96:
e4:2b:1b:27:e6:ec:7d:d4:5e:d2:8b:dd:41:61:10:
e9:df:99:0b:03:50:9b:3d:5f:c2:d9:8e:b5:20:ef:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:75:3C:15:53:82:9A:90:33:9B:A5:3A:72:06:89:7B:BB:F4:7D:DF
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/33DF8CA2F80611EF878B799C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.68.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8f:56:30:32:73:cd:bc:81:6c:a3:05:1d:37:f2:86:7c:15:
7c:fc:c4:19:1f:94:e4:19:8e:36:49:55:be:a5:f3:50:82:b4:
4e:c6:2e:84:16:e1:68:e4:75:2e:86:7c:a6:e0:4d:3a:25:38:
e1:56:e7:8d:a9:64:15:62:da:d0:51:68:5a:7c:4c:0b:be:db:
2a:ba:36:d7:af:10:68:cb:a7:54:d9:92:2e:37:8e:52:6f:14:
e2:d8:5c:e6:73:45:17:45:11:97:d7:60:cd:fa:9f:a9:96:76:
60:33:e4:71:07:c0:22:00:19:89:4a:be:02:31:07:84:d2:01:
62:43:64:d8:91:32:d1:cc:fc:62:52:cd:02:a0:6f:a4:63:86:
8a:35:2f:3f:0b:55:15:b1:8c:eb:3f:4f:65:66:48:79:f0:b6:
83:71:3c:97:99:9a:2c:37:5a:ad:54:56:5b:73:d0:6f:6b:ee:
ad:65:e9:df:51:ad:a1:5e:2d:f4:80:28:1c:8d:56:15:35:f0:
d0:3b:60:2a:ea:3d:7f:27:1b:35:b4:3c:4b:c1:4a:f3:b6:8f:
2a:d6:f1:47:45:39:62:f2:81:30:85:49:90:f3:e3:be:d2:e7:
21:2f:96:7b:1b:a6:38:fc:99:bb:9d:c9:4d:bb:76:98:2f:64:
20:62:60:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:49:09 2025 by rpki-client