Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AC629C3CC37711EF9B6A4A93762E951A.roa
File: AC629C3CC37711EF9B6A4A93762E951A.roa (raw, json)
Hash identifier: /GC9jexXvpMq6fU7WSCjC8/axtuWBsvvmRgFTpuvrLs=
Subject key identifier: 67:D4:54:F4:B7:F0:E2:D1:EB:AF:44:56:A6:F4:88:A2:19:76:F4:B6
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 047C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AC629C3CC37711EF9B6A4A93762E951A.roa
Signing time: Thu 26 Dec 2024 10:53:43 +0000
ROA not before: Thu 26 Dec 2024 10:53:40 +0000
ROA not after: Fri 26 Dec 2025 10:53:40 +0000
asID: 329007
IP address blocks: 196.251.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 13:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148 (0x47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 26 10:53:40 2024 GMT
Not After : Dec 26 10:53:40 2025 GMT
Subject: CN=676d35b7-423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:bd:2c:4e:de:e4:47:6b:c7:36:df:dd:7b:
c4:43:2b:8a:83:c4:44:bd:2c:29:37:5f:ac:95:26:
52:2a:1f:ce:55:4c:26:29:87:ca:59:7d:6c:8d:b2:
b0:08:90:3f:d0:15:3a:9b:fc:1d:c6:b2:fb:9a:61:
3a:64:09:20:b2:93:aa:9d:4b:4e:50:31:66:7a:d9:
3f:64:b4:26:19:6c:73:a8:54:1e:0d:98:b8:ec:1c:
31:b0:df:16:79:6b:a7:51:fe:0c:c5:28:bb:0b:a5:
c3:16:17:67:a0:37:3a:24:1b:2e:4c:b7:99:bd:97:
89:97:e4:07:2f:58:fe:c7:63:89:5e:83:44:82:4a:
31:99:6a:e6:a8:2d:8f:14:ab:58:bf:0b:3b:9c:13:
7e:e6:ca:a6:17:ea:96:60:56:31:7a:39:8f:3d:4a:
4c:e9:8d:c2:84:28:09:75:56:c7:34:f9:ae:89:cf:
20:3d:28:13:a0:ce:b7:72:1c:0c:77:d8:f0:f7:ab:
56:23:e0:4b:e0:b2:e6:ab:87:61:48:a3:d2:d7:ab:
97:0d:fb:c4:3e:08:24:ab:db:ac:fa:d3:5c:d5:53:
7a:e8:9f:55:d8:70:b3:55:f5:88:82:73:92:b7:eb:
0f:78:96:97:f2:d6:5c:b6:b6:93:37:64:59:60:48:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:54:F4:B7:F0:E2:D1:EB:AF:44:56:A6:F4:88:A2:19:76:F4:B6
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AC629C3CC37711EF9B6A4A93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.83.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:2d:c8:81:17:fb:95:9d:bc:62:8c:6c:24:45:6d:64:dc:72:
b5:1f:e1:c8:bf:47:09:33:b1:b4:4e:1e:e5:37:35:b7:e0:5d:
2b:8a:01:f4:52:f8:34:77:98:3e:97:41:e4:e4:ab:51:cf:40:
ea:8f:88:29:78:eb:fc:e7:73:90:d5:d9:f8:cb:42:fd:85:fa:
4e:1d:44:43:74:b8:5d:bb:ed:1d:fc:a0:01:5a:90:51:2e:ab:
9e:8b:60:c1:f7:22:61:83:3d:a9:12:79:50:26:7b:fd:8d:81:
4e:59:e3:b7:f0:55:3a:d6:1f:c5:65:92:0f:6a:84:0a:f3:a9:
49:46:b7:2c:43:8f:d2:0e:38:8f:95:fa:aa:f2:07:25:e3:6f:
fd:9b:8a:45:7e:2a:92:9e:03:9d:f1:16:22:1d:58:df:8c:87:
5f:e2:2c:83:ca:4d:17:dc:97:de:78:0b:80:cc:a3:41:c7:bf:
09:1c:86:78:99:cd:84:79:53:49:61:67:5e:ee:f6:9f:4c:13:
31:04:d4:d2:d1:ef:de:d9:c6:d3:96:2a:c9:80:e9:fb:02:0a:
a4:37:de:45:db:47:be:e2:d9:77:79:8c:73:15:ac:9c:44:b2:
38:c1:22:f4:11:2e:2b:64:32:00:07:35:6b:d9:d1:ab:7c:d3:
79:1e:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:57 2025 by rpki-client