Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/726DDC20C36E11EFB92AAA5A762E951A.roa
File: 726DDC20C36E11EFB92AAA5A762E951A.roa (raw, json)
Hash identifier: 2QA4sTRWDcd6suv6PKFH1kdDWyVTeGe9sBkFWiXhVLY=
Subject key identifier: F0:26:07:7B:E2:E6:A6:6D:A8:8C:48:D8:A7:83:43:81:D6:35:E9:3C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0478
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/726DDC20C36E11EFB92AAA5A762E951A.roa
Signing time: Thu 26 Dec 2024 09:47:41 +0000
ROA not before: Thu 26 Dec 2024 09:47:37 +0000
ROA not after: Fri 26 Dec 2025 09:47:37 +0000
asID: 329007
IP address blocks: 196.251.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 12:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144 (0x478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 26 09:47:37 2024 GMT
Not After : Dec 26 09:47:37 2025 GMT
Subject: CN=676d263c-03ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:7b:0c:c7:f1:98:ef:6b:30:6d:10:b1:90:
e9:5b:36:60:5a:a8:66:8b:67:a4:62:be:80:0f:87:
98:5b:3d:49:4b:0d:de:cf:d6:5b:ee:05:0b:d9:c9:
09:c0:59:43:94:ce:9d:06:4a:28:ab:ff:cb:32:8e:
88:74:c9:1e:c2:7e:b4:0e:30:07:10:5b:73:57:9b:
97:b0:00:3f:57:c7:69:95:c7:4b:81:2f:5f:13:d3:
71:12:96:7f:81:3f:b1:99:c8:2b:c1:a8:aa:9d:ed:
93:bf:b0:14:c3:f2:10:a1:27:93:d1:b5:d0:e8:cf:
af:10:bd:ee:26:39:3b:69:eb:4b:34:95:58:1f:1c:
04:97:1d:17:b9:a6:dd:bc:42:53:25:ee:8e:4b:85:
8e:86:56:0b:16:ca:c5:5b:f4:80:fb:8f:c9:fb:b3:
f2:83:3d:27:72:e6:f7:93:be:70:b2:bb:91:c6:d1:
ac:0e:56:4e:f5:6e:bd:d7:8b:df:27:b2:3a:ec:92:
5e:0e:19:7c:d4:3e:07:be:87:e1:4b:26:b8:10:f2:
d0:ca:8e:1f:24:ca:b7:4d:3d:97:cc:cc:73:3c:a5:
fb:60:c4:8a:2a:81:3c:44:ed:4b:86:41:1e:16:91:
6f:8d:b7:4a:ab:6f:40:fc:1e:0e:36:59:3e:95:28:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:26:07:7B:E2:E6:A6:6D:A8:8C:48:D8:A7:83:43:81:D6:35:E9:3C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/726DDC20C36E11EFB92AAA5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3f:41:10:fa:4c:33:22:d7:3c:3b:e6:c3:07:60:a2:be:92:
53:f4:07:bc:8b:c1:d2:f2:9e:01:36:92:79:b1:4c:a6:4b:8a:
eb:0c:35:de:47:79:0c:76:1a:ae:2e:7d:b6:42:b0:1b:b8:03:
da:cc:66:d0:2d:ba:34:8a:98:c5:c4:c0:aa:14:93:61:11:86:
e8:d7:85:d1:22:49:e0:af:82:5e:ca:cf:09:3f:9c:63:45:94:
e4:28:ac:a7:97:3e:b2:1c:5f:fb:9c:9a:02:93:27:e2:4b:82:
44:07:5a:1d:38:6f:f8:e4:4b:88:cf:f2:d2:3c:6d:bb:b9:9f:
bd:14:47:f9:2c:53:d4:33:71:a5:78:64:38:38:bf:56:d3:fe:
8b:1e:36:31:f4:a3:49:3e:6a:e7:62:e0:a2:be:75:ee:a8:53:
39:06:ac:c0:aa:35:57:e8:0b:af:c4:fb:fc:b1:b1:7d:df:67:
35:68:2f:f5:fb:51:ea:f6:3b:ce:ed:42:55:d8:26:17:2a:38:
37:f6:71:bc:64:0d:e0:c7:aa:c5:9c:2f:66:37:7b:ea:65:d3:
d9:01:75:13:43:e9:25:9f:ea:95:56:2e:45:5e:0e:c5:c8:0d:
9e:8e:5d:ce:27:04:d6:b1:09:da:cd:49:f9:5b:54:e8:a7:be:
cb:b1:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:39:39 2025 by rpki-client