Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A5CBE9F2ECF611EFBB7E385B762E951A.roa
File: A5CBE9F2ECF611EFBB7E385B762E951A.roa (raw, json)
Hash identifier: w73V2Rk0kXtcYEjBsV5rVeptLuDS+XmOar697w83JfY=
Subject key identifier: 12:89:EC:28:18:2C:4B:F3:B1:90:A9:01:AC:DA:1A:2E:B0:2A:D0:0D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 065E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A5CBE9F2ECF611EFBB7E385B762E951A.roa
Signing time: Mon 17 Feb 2025 06:15:56 +0000
ROA not before: Mon 17 Feb 2025 06:15:52 +0000
ROA not after: Tue 17 Feb 2026 06:15:52 +0000
asID: 43260
IP address blocks: 196.251.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 11:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1630 (0x65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 17 06:15:52 2025 GMT
Not After : Feb 17 06:15:52 2026 GMT
Subject: CN=67b2d41c-fb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:72:19:69:60:95:73:0a:45:d9:74:e6:e8:
73:08:5c:3e:17:0c:1f:7d:41:b1:b2:41:df:16:cf:
bf:10:08:e2:1c:5a:b5:0d:5c:fb:0f:86:d5:48:f9:
e1:9f:e4:70:44:91:3a:d8:76:d7:62:a7:7e:14:2f:
84:16:18:c2:b1:13:66:ed:56:e9:83:5e:28:93:e2:
a8:82:fc:56:28:ca:53:7d:cd:d0:5d:60:b4:05:8c:
bd:f9:e9:4f:f6:64:c9:7d:a0:39:a4:ff:98:41:4f:
eb:46:3b:49:6e:ac:aa:4f:60:93:5f:1f:48:de:61:
8d:b3:de:d9:1a:79:5f:f4:20:f7:86:e8:c8:a2:ec:
d2:78:45:c3:1d:91:f6:72:57:98:ed:d3:eb:77:e8:
98:3f:42:be:fe:f6:ad:c4:86:b1:98:b4:db:c9:1c:
40:45:be:ec:79:d5:24:d4:9a:cf:8e:58:cb:92:71:
5d:53:fa:9c:87:ed:eb:7a:e6:99:82:bf:7f:d1:f3:
1a:94:8a:38:cb:14:2d:97:43:40:c7:4c:13:6f:cd:
a2:06:6a:f2:12:7f:1d:1c:16:16:d2:43:51:c1:74:
fa:35:26:03:a5:18:99:b8:7c:07:21:32:e6:3f:cc:
43:4f:31:76:ac:9d:ce:d9:7c:bf:f1:5f:96:1a:a8:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:89:EC:28:18:2C:4B:F3:B1:90:A9:01:AC:DA:1A:2E:B0:2A:D0:0D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A5CBE9F2ECF611EFBB7E385B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.78.0/24
Signature Algorithm: sha256WithRSAEncryption
52:71:c5:9b:16:a1:58:85:cc:3a:15:df:b3:cd:d0:40:85:f8:
2b:c6:11:c4:53:33:36:35:69:9b:5f:24:c2:05:71:89:99:42:
35:8d:2c:17:4c:17:9c:97:05:bc:e0:18:89:98:00:c0:90:bb:
d4:2e:c1:92:26:c3:38:d1:86:7f:ee:1e:df:73:ba:ae:54:c9:
14:b0:0f:6c:87:5b:fa:a8:bd:46:17:da:de:11:9c:b1:d4:5d:
4c:20:72:bd:15:a1:f5:45:a4:87:b6:dd:4f:a0:ca:b7:f0:2b:
f8:54:dc:25:32:43:cb:61:65:c7:3f:82:e7:74:a0:f6:96:98:
78:60:6c:e2:ed:19:39:4f:68:db:5f:70:c7:cf:b8:6f:e1:9b:
b0:91:aa:82:b2:9e:9f:4c:ca:50:c8:79:93:63:e6:68:33:bd:
ec:c7:65:6e:f1:43:59:35:55:96:fa:95:3e:89:e9:bd:15:74:
a3:8a:c3:1d:7a:30:48:51:5a:bf:89:b1:6b:80:be:1e:b3:1b:
ab:dc:86:84:e2:91:40:07:58:ce:94:02:d5:e5:bd:b8:a1:88:
ea:34:aa:79:ce:6c:5c:56:95:5a:45:63:72:cb:a5:6c:05:ba:
10:87:0b:37:9d:64:56:11:c0:86:39:b6:99:e4:3e:2d:f3:35:
74:94:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:28 2025 by rpki-client