Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D4E367382F0E11F0A49352CDDAE4EC9C.roa
File: D4E367382F0E11F0A49352CDDAE4EC9C.roa (raw, json)
Hash identifier: lOjNiLZchZl8OdFqQLZHT7vD+3SzTEzoUBF04HFY0/Q=
Subject key identifier: 31:AE:8E:D1:4D:64:39:51:BF:B7:33:2A:77:B4:F1:94:8B:1C:A3:A1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0A15
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D4E367382F0E11F0A49352CDDAE4EC9C.roa
Signing time: Mon 12 May 2025 08:55:20 +0000
ROA not before: Mon 12 May 2025 08:55:15 +0000
ROA not after: Tue 12 May 2026 08:55:15 +0000
asID: 208485
IP address blocks: 196.251.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 11:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2581 (0xa15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 12 08:55:15 2025 GMT
Not After : May 12 08:55:15 2026 GMT
Subject: CN=6821b778-f895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:1e:00:ed:1a:ab:94:6e:f7:19:59:d8:cd:
f5:b6:20:99:56:f1:a5:c0:dd:52:12:77:7b:90:e1:
f6:8a:64:36:2a:49:2d:ce:15:08:28:8b:5e:50:bf:
73:f6:75:8e:dc:27:a2:68:45:1f:8c:f2:37:db:5e:
9e:a3:8b:69:6c:a9:73:f1:ad:66:91:8e:ce:4d:4e:
7a:90:0f:34:2a:b0:be:8b:5f:4a:82:7a:34:63:42:
24:d6:f2:5b:59:68:3d:b5:60:c2:1d:69:61:76:c1:
15:24:7d:f0:38:a7:50:18:a8:cd:30:9b:45:d2:95:
35:27:2a:01:21:b4:bf:0d:af:a1:e2:6e:37:73:de:
8c:56:86:ab:27:7a:08:e5:89:54:1f:3f:d9:c8:c5:
97:ae:66:d4:d3:47:0b:72:b3:43:06:32:30:63:45:
66:55:9d:ee:bf:1e:41:41:de:79:16:48:cb:e2:02:
e5:6c:f1:41:ff:24:65:c2:ba:09:0d:67:73:af:de:
a5:5f:f9:69:61:ae:35:ac:a2:8c:47:f1:93:23:02:
4a:3d:e4:6c:78:8a:cc:63:4c:aa:39:5d:36:5f:49:
9c:38:8b:db:d9:ff:09:9f:eb:d7:63:8a:92:2f:7a:
37:21:df:6e:b5:d7:6d:a2:7b:f8:df:20:8d:7d:3c:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AE:8E:D1:4D:64:39:51:BF:B7:33:2A:77:B4:F1:94:8B:1C:A3:A1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D4E367382F0E11F0A49352CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.82.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6a:e7:1a:8a:04:d4:00:f7:80:2d:ec:ce:85:0c:fd:cb:e9:
45:a9:09:65:bb:b9:ca:13:3d:f6:65:9b:17:86:86:79:60:ce:
86:42:80:64:cb:2b:dd:1f:a8:ff:93:2c:f6:24:3d:fc:bb:12:
2c:ca:21:52:59:8a:87:16:83:b1:cd:f3:2e:52:80:c8:bd:5c:
e3:6f:df:3d:eb:83:f7:f2:62:c5:1d:fb:eb:8a:b7:d7:31:3b:
f8:5f:fa:bf:21:ed:af:12:77:9c:4c:61:06:ea:6a:af:ae:2c:
8e:d6:e3:56:28:bc:84:fe:7f:87:c4:e9:ae:86:50:19:c4:84:
1d:b8:c0:c7:d0:bc:03:76:42:f8:4b:e5:89:12:a7:77:e9:83:
94:8c:7d:89:bd:93:a3:f1:12:08:88:92:cf:67:78:a3:7c:80:
2c:56:bf:f1:89:e9:ad:2a:e2:ed:5e:52:04:fd:22:bf:dd:7b:
c5:fc:87:41:26:fe:7e:95:5d:ca:f1:c8:47:de:ff:60:ca:3d:
c8:c6:2b:19:7e:03:1e:fb:ce:8e:b3:61:05:6e:47:5e:cd:79:
5d:16:11:17:42:1e:d3:2e:45:55:cf:de:29:2f:69:ab:ec:e2:
a8:d0:a5:0a:88:e1:42:0d:eb:d3:d4:f7:33:1b:bb:1d:f2:1d:
16:83:1b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:29:37 2025 by rpki-client