Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/49F7A7F2D71011EFB5C67FB6762E951A.roa
File: 49F7A7F2D71011EFB5C67FB6762E951A.roa (raw, json)
Hash identifier: biJPnIg4ceXhQ+25Y3y7c1h95Hh2/L+sCK5PGNmMejE=
Subject key identifier: 0D:F2:76:35:7E:7E:2C:2F:3A:58:FF:2F:4F:AF:50:B1:F9:12:98:EB
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 058B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/49F7A7F2D71011EFB5C67FB6762E951A.roa
Signing time: Mon 20 Jan 2025 09:24:03 +0000
ROA not before: Mon 20 Jan 2025 09:23:59 +0000
ROA not after: Tue 13 Jan 2026 09:23:59 +0000
asID: 329007
IP address blocks: 196.251.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 07:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 20 09:23:59 2025 GMT
Not After : Jan 13 09:23:59 2026 GMT
Subject: CN=678e1633-fb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:a0:50:52:b9:6a:98:ca:42:c9:c2:19:77:
de:28:10:20:bd:b8:51:e6:98:6a:ad:1e:fb:28:70:
28:cb:93:cc:fd:ad:77:15:1d:b7:54:b4:d9:13:a5:
29:2f:2c:f8:29:9f:e6:70:01:7e:b4:36:4f:6d:6d:
7d:f3:56:9d:8e:09:c3:7c:ef:e3:08:8d:6b:11:59:
cc:07:64:d6:fe:55:0e:09:22:a4:95:7a:3c:78:fc:
fa:cb:7b:6a:06:fb:1e:93:2b:2e:bf:a5:33:d7:ca:
66:9d:8d:a0:81:e1:76:3f:5c:85:8d:42:f9:b0:3e:
ee:dd:a9:65:64:ae:e7:8f:85:e2:cc:ef:ff:8f:89:
47:cb:12:d9:e8:ef:fc:aa:3c:c3:b2:78:32:86:5e:
a1:86:9b:28:92:44:aa:a6:96:74:95:c7:e1:31:a4:
51:8e:d1:50:9d:da:b7:9b:4d:36:12:88:30:50:fc:
7e:d2:26:7f:c3:46:4f:31:16:a2:a0:32:0f:f4:da:
8a:35:31:77:9c:43:16:07:82:85:ab:0e:f3:14:b3:
e9:b1:0e:91:39:0b:ba:81:f3:6e:53:0f:b6:77:a4:
e6:80:d1:f9:a1:01:bf:3d:6c:42:29:41:87:61:51:
77:7b:b6:20:fa:82:fd:3d:a2:de:b3:ac:19:41:7f:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F2:76:35:7E:7E:2C:2F:3A:58:FF:2F:4F:AF:50:B1:F9:12:98:EB
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/49F7A7F2D71011EFB5C67FB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.77.0/24
Signature Algorithm: sha256WithRSAEncryption
df:e2:a4:a2:9e:9b:3e:61:c1:41:8d:a8:bd:ef:62:35:5d:77:
9a:f8:49:81:8f:d0:df:d4:5f:3f:5d:cc:6e:e1:2c:74:b2:61:
30:37:19:93:bc:68:b4:f8:3d:4b:d0:eb:d7:e5:a5:b1:f0:2a:
59:ab:58:c4:b5:13:47:1a:cc:1f:b5:d0:78:df:3f:2f:b6:da:
93:34:8c:de:76:4f:97:93:17:98:89:59:85:c0:40:7b:c3:4d:
c8:6f:f5:f5:d0:59:d3:0a:c9:10:8c:13:13:89:7b:f6:a6:b8:
eb:10:42:eb:ab:e6:95:a1:06:48:df:dd:c7:e9:d7:1e:dc:cb:
fb:35:bb:6c:82:39:6e:bd:4f:8b:67:be:b9:92:41:16:f5:63:
f4:a0:6b:dd:17:de:1b:eb:50:9d:7b:be:4c:20:25:c9:01:a2:
b8:28:02:e0:b4:38:2f:72:df:79:55:0a:74:68:9e:1b:91:85:
fd:c8:ee:f2:30:ab:01:e7:d0:4c:30:39:ec:1f:f2:c6:5c:e6:
c7:79:ea:82:a1:00:62:df:76:54:e9:a9:2f:59:2d:23:5d:a4:
74:b1:30:9a:6d:41:a8:b6:dd:7d:36:6b:cd:78:bc:d8:bc:ad:
8a:22:f7:ed:cb:b3:56:8c:99:ec:2d:a5:0d:36:45:41:f5:67:
eb:56:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:55:01 2025 by rpki-client