Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/597F4028ED2111EF80A3356F762E951A.roa
File: 597F4028ED2111EF80A3356F762E951A.roa (raw, json)
Hash identifier: w96nKiHRy40RcKdN1AXEEw5ycfQg41KWt9Gk5rmlLQw=
Subject key identifier: 4D:AF:40:1F:55:4F:16:F9:4E:53:17:54:65:2D:27:48:4F:99:BC:E5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 066A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/597F4028ED2111EF80A3356F762E951A.roa
Signing time: Mon 17 Feb 2025 11:21:36 +0000
ROA not before: Mon 17 Feb 2025 11:21:32 +0000
ROA not after: Tue 17 Feb 2026 11:21:32 +0000
asID: 208485
IP address blocks: 196.251.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 11:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642 (0x66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 17 11:21:32 2025 GMT
Not After : Feb 17 11:21:32 2026 GMT
Subject: CN=67b31bc0-597b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:af:49:8b:fd:03:3b:a8:fb:d1:f9:43:2d:
5c:09:be:44:9e:17:5e:f1:a4:a2:34:44:90:d3:81:
56:93:79:a0:ab:d3:a4:00:a7:a4:a5:fa:27:08:3b:
f1:c4:31:e7:18:62:d8:d5:af:99:42:a7:19:55:57:
56:91:09:74:4d:60:be:51:b2:ab:67:da:dc:b2:35:
13:00:b3:08:14:33:a5:cb:09:ba:1c:25:9c:2b:57:
c0:a6:1d:95:dd:5d:0b:f6:c6:b5:02:a4:f3:58:62:
c5:97:68:f4:41:6c:c5:f5:00:69:ed:2b:b8:5b:00:
6d:45:ef:53:a0:4d:43:62:2b:f9:eb:7d:e6:e2:ce:
02:3f:bc:df:0f:a8:4f:9b:34:6e:00:c9:78:ce:20:
66:1a:fa:90:1b:2e:ca:ae:63:20:0d:f6:d1:c7:c4:
e7:1c:84:c9:6d:9f:0b:18:e1:27:47:99:d7:1f:2a:
85:41:4c:8c:10:63:3a:ac:97:59:b6:76:e2:30:4d:
81:e9:a8:0f:6a:c3:84:35:af:da:b9:f9:9c:38:6a:
11:02:9d:9a:70:e8:c6:ad:c2:75:7c:ba:c6:f8:f6:
ae:44:4f:3d:9e:b9:d5:05:c8:62:6d:db:42:06:df:
f8:3d:17:7d:9e:dc:ea:f9:41:dd:7a:3c:75:73:13:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AF:40:1F:55:4F:16:F9:4E:53:17:54:65:2D:27:48:4F:99:BC:E5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/597F4028ED2111EF80A3356F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.105.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:bf:da:dc:2a:06:64:4b:ac:51:65:f1:70:80:14:88:3a:ca:
b2:4b:53:34:6f:be:16:ee:fb:a5:c1:94:be:19:dc:f9:f0:53:
7d:47:55:2c:21:9d:bb:7f:c5:33:68:59:c6:ab:99:5c:f7:c6:
3c:53:91:e3:70:ab:a1:fe:d8:60:ec:05:f0:f8:65:a5:f9:23:
25:ca:9c:54:1a:2a:59:67:77:d3:01:de:eb:be:5c:cc:8f:f1:
31:cf:fe:8e:01:47:f0:8f:a3:4d:08:86:5c:18:77:5d:1f:70:
bc:0f:0b:cd:18:39:b2:fa:77:ec:69:84:0b:40:4c:bf:84:5f:
34:35:ed:45:9a:db:14:d0:ff:56:a3:ad:ae:fd:a0:d0:e3:03:
1a:c8:71:4b:fc:9d:69:f9:6b:73:5a:6a:8f:4c:68:1e:34:80:
68:79:e7:8b:23:89:af:02:6e:93:a3:74:56:09:7e:15:57:5e:
ee:29:5e:2b:3c:49:60:24:1c:d7:c6:5c:d4:e9:3f:ed:a0:82:
dd:e8:d1:71:23:ec:28:df:40:19:82:91:37:89:f7:90:58:19:
6d:fd:ce:e6:73:c3:ec:fe:bf:24:24:86:8d:02:61:77:18:e4:
cd:9f:2f:9b:c1:a1:85:6e:11:26:f9:30:2d:e7:6c:70:1a:64:
7f:eb:f5:f3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBmowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAyMTcxMTIxMzJaFw0yNjAyMTcxMTIxMzJaMBgxFjAU
BgNVBAMTDTY3YjMxYmMwLTU5N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5z69Ji/0DO6j70flDLVwJvkSeF17xpKI0RJDTgVaTeaCr06QAp6Sl+icI
O/HEMecYYtjVr5lCpxlVV1aRCXRNYL5Rsqtn2tyyNRMAswgUM6XLCbocJZwrV8Cm
HZXdXQv2xrUCpPNYYsWXaPRBbMX1AGntK7hbAG1F71OgTUNiK/nrfebizgI/vN8P
qE+bNG4AyXjOIGYa+pAbLsquYyAN9tHHxOcchMltnwsY4SdHmdcfKoVBTIwQYzqs
l1m2duIwTYHpqA9qw4Q1r9q5+Zw4ahECnZpw6MatwnV8usb49q5ETz2eudUFyGJt
20IG3/g9F32e3Or5Qd16PHVzE2gLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTa9A
H1VPFvlOUxdUZS0nSE+ZvOUwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzU5N0Y0MDI4RUQyMTExRUY4MEEzMzU2Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+2kwDQYJKoZIhvcNAQEL
BQADggEBANC/2twqBmRLrFFl8XCAFIg6yrJLUzRvvhbu+6XBlL4Z3PnwU31HVSwh
nbt/xTNoWcarmVz3xjxTkeNwq6H+2GDsBfD4ZaX5IyXKnFQaKllnd9MB3uu+XMyP
8THP/o4BR/CPo00IhlwYd10fcLwPC80YObL6d+xphAtATL+EXzQ17UWa2xTQ/1aj
ra79oNDjAxrIcUv8nWn5a3Naao9MaB40gGh554sjia8CbpOjdFYJfhVXXu4pXis8
SWAkHNfGXNTpP+2ggt3o0XEj7CjfQBmCkTeJ95BYGW39zuZzw+z+vyQkho0CYXcY
5M2fL5vBoYVuESb5MC3nbHAaZH/r9fM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:12 2025 by rpki-client