Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4CE85FFCD17411EF8B283B78762E951A.roa
File: 4CE85FFCD17411EF8B283B78762E951A.roa (raw, json)
Hash identifier: /URdnNUXWpJRSK8BNeSmUmAKOZ/8MQ7u/5LVRD8z5CA=
Subject key identifier: E9:84:38:2D:E0:99:FB:6D:E6:41:75:BA:0A:1C:22:D8:FD:3E:DA:FC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04FF
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4CE85FFCD17411EF8B283B78762E951A.roa
Signing time: Mon 13 Jan 2025 06:04:51 +0000
ROA not before: Mon 13 Jan 2025 06:04:47 +0000
ROA not after: Tue 13 Jan 2026 06:04:47 +0000
asID: 329007
IP address blocks: 196.251.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 05:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 13 06:04:47 2025 GMT
Not After : Jan 13 06:04:47 2026 GMT
Subject: CN=6784ad03-ddf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:49:fe:3c:ce:31:32:4a:d2:3d:e6:57:09:
00:ec:f4:b0:69:16:8b:2a:56:32:81:e0:73:7a:e4:
47:d4:3e:6c:c0:ea:1e:07:88:ad:5a:e0:1d:93:e0:
db:6c:89:07:b4:67:83:98:3c:d6:8f:f5:f3:33:e5:
0a:f0:0b:2d:2b:46:c8:8f:69:c0:06:e7:ad:f7:ff:
93:ba:6a:df:ee:ce:be:21:ff:de:e4:fe:b5:67:f7:
21:af:0c:cf:41:53:10:6e:35:52:ac:fa:90:1f:a0:
83:53:8a:ef:9c:89:33:58:b2:a6:c2:a4:3c:fc:d4:
26:2c:9a:e7:56:16:26:b6:e2:16:6b:cf:53:80:7f:
b7:8c:62:5f:8f:9d:d4:0e:f8:53:af:cc:f8:67:ef:
3c:fc:04:2b:ac:99:f2:70:b0:2f:84:e9:ea:86:44:
da:ff:4a:ad:41:e1:db:bd:36:ad:91:31:d7:98:9d:
e7:67:47:99:c2:64:10:c7:c7:22:dd:9e:fa:cf:fc:
75:f3:aa:78:99:c6:82:96:24:6c:a7:4e:d6:38:eb:
e5:2c:98:2a:fb:f1:6e:80:8f:6d:51:a2:b5:d1:cb:
d0:38:d0:b1:20:4a:00:4b:9e:2d:e0:1e:77:6d:98:
c1:31:c7:18:90:fc:13:32:6a:13:71:31:69:af:85:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:38:2D:E0:99:FB:6D:E6:41:75:BA:0A:1C:22:D8:FD:3E:DA:FC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4CE85FFCD17411EF8B283B78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.123.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:d9:e2:48:08:f9:f4:94:7f:66:25:1e:89:41:b7:52:17:c4:
d8:c5:dc:cb:96:4d:7b:e0:2c:29:c4:a6:ee:27:2b:0e:b3:bf:
f5:63:ee:fa:eb:ca:0b:e3:09:70:a1:67:81:a9:21:bf:d6:23:
8b:d5:c4:f3:64:0c:2b:14:b0:13:05:42:ca:21:58:3c:61:cc:
4a:69:35:8b:c6:9e:f8:23:9b:90:38:72:99:99:ca:3b:6b:a7:
90:3f:de:9b:17:c4:4c:6d:4e:c5:23:0d:30:a9:6d:16:1c:00:
af:9e:70:66:60:25:9d:fc:22:fb:03:f0:41:75:c0:f5:77:25:
a8:82:99:70:f6:de:6a:1d:bd:61:d0:4c:e8:d3:47:1a:d0:6d:
83:fb:23:2e:9b:f0:74:ed:2f:36:f7:e3:f7:b0:46:6f:55:a8:
56:8b:7f:6f:7e:48:79:91:e6:7f:be:76:a6:50:4a:c1:23:b1:
15:4f:e1:79:c6:36:56:7c:42:7f:50:49:b5:f2:27:92:07:f8:
a6:8e:a4:d1:27:6c:4e:dc:6a:7a:41:6f:5c:d0:e0:0b:fe:6b:
6f:c3:c9:63:90:1b:59:aa:49:15:90:99:00:00:7f:68:5c:71:
cb:3c:56:48:64:3d:0a:33:26:6e:4a:2e:08:15:9b:2a:97:75:
14:5b:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:08 2025 by rpki-client