Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BF067666D18B11EFA99CE28A762E951A.roa
File: BF067666D18B11EFA99CE28A762E951A.roa (raw, json)
Hash identifier: iKOPYdHaTiXhYiP9mrRfwp0iaghQQy/wyPCWOboKJYM=
Subject key identifier: 5F:29:65:19:43:0F:75:6A:C1:B4:2D:F5:0C:27:16:48:5E:71:9B:4D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0510
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BF067666D18B11EFA99CE28A762E951A.roa
Signing time: Mon 13 Jan 2025 08:52:41 +0000
ROA not before: Mon 13 Jan 2025 08:52:37 +0000
ROA not after: Tue 13 Jan 2026 08:52:37 +0000
asID: 43260
IP address blocks: 196.251.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 13:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 13 08:52:37 2025 GMT
Not After : Jan 13 08:52:37 2026 GMT
Subject: CN=6784d459-f0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:4b:98:81:57:84:a4:22:e2:54:88:b3:01:
c4:30:b8:4a:3f:27:a7:06:ef:aa:af:6d:a1:91:70:
dc:27:3d:c7:e1:c4:fe:50:20:d5:f5:0b:df:81:a8:
cd:9c:06:8e:d9:84:b6:df:68:1c:08:86:f9:0e:2f:
88:ad:b5:57:6f:71:f0:a7:d3:a1:c3:0e:06:8f:ab:
d8:3b:ef:65:82:8c:d9:66:5d:b4:a2:90:f6:98:4b:
80:79:2a:db:c6:d0:54:2b:7f:cf:96:fc:f1:b0:74:
54:62:6d:4f:70:47:0d:c9:11:ed:29:01:c3:18:9f:
f5:b0:02:bf:3b:c0:51:36:a0:a4:7f:fb:8a:81:e0:
e2:e9:4b:77:8c:f4:d8:93:7a:4d:32:38:5d:13:c7:
7d:d5:35:5a:39:bd:61:d0:50:db:26:c7:ae:90:2f:
7e:18:a0:58:e8:1c:44:41:14:ff:3d:b8:99:44:63:
38:a6:6d:d5:98:e7:de:dc:90:66:05:6b:ea:77:16:
d0:bd:65:e2:4d:6f:29:8f:81:0f:b4:40:7d:49:12:
71:54:0a:1c:06:a5:a2:58:68:35:4a:40:f4:f1:9d:
b6:03:d5:83:0a:f0:64:86:52:e8:bc:4a:e8:f8:70:
b4:e6:6a:b6:3f:47:56:df:51:6b:01:40:9b:c5:30:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:65:19:43:0F:75:6A:C1:B4:2D:F5:0C:27:16:48:5E:71:9B:4D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BF067666D18B11EFA99CE28A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.70.0/24
Signature Algorithm: sha256WithRSAEncryption
82:54:f1:19:de:69:a7:5d:84:e5:50:88:c1:ad:db:72:f0:6d:
6b:6b:33:72:db:1c:4a:3c:73:c5:e9:41:6b:d1:7d:e1:0c:7b:
0b:a0:96:01:68:45:11:2d:d5:45:c8:9b:ba:d0:02:4f:bc:3c:
fb:de:33:f8:08:52:d2:ed:27:37:53:2c:b9:03:43:ee:d6:1c:
55:30:e7:bc:c9:f4:f7:be:d5:61:b4:91:d0:3c:d0:f3:83:0e:
77:0d:2d:4e:03:c7:1f:f7:2e:67:86:3e:f0:43:16:12:cc:1a:
3c:14:07:4b:e4:3e:6d:08:cb:65:9a:21:78:57:69:42:8b:3a:
b5:87:a3:bd:d9:a8:e8:94:8f:61:8f:e0:57:6c:c9:92:5c:06:
a5:d6:2f:ff:5a:29:01:f1:b5:52:6e:59:66:6c:74:bf:f7:94:
91:bd:84:a4:0d:19:8f:29:6e:fb:ef:ed:62:db:f1:17:3b:38:
e6:20:e0:60:ca:c2:f1:fd:a4:b0:67:fd:2e:6f:00:89:07:1b:
35:e6:4d:c4:0e:7c:d3:27:2a:df:13:9b:bc:d7:b9:82:a4:1f:
e5:ae:0c:76:f5:1c:91:74:a0:09:34:91:81:f1:16:9c:b8:5b:
c7:5f:07:0f:5b:91:43:e6:e3:79:93:b4:43:10:ce:08:44:eb:
db:e0:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:41:18 2025 by rpki-client