Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E66B4F06C6A011EF93EE1EA6762E951A.roa
File: E66B4F06C6A011EF93EE1EA6762E951A.roa (raw, json)
Hash identifier: 4l6JiVulaRdq4/if15VXXfgNDC43y/xYlFpDfaEHOrU=
Subject key identifier: 39:57:82:86:AE:CD:9F:AB:69:63:70:43:E9:A8:F1:99:D2:64:33:07
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04B9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E66B4F06C6A011EF93EE1EA6762E951A.roa
Signing time: Mon 30 Dec 2024 11:26:23 +0000
ROA not before: Mon 30 Dec 2024 11:26:20 +0000
ROA not after: Wed 31 Dec 2025 11:26:20 +0000
asID: 329007
IP address blocks: 196.251.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 12:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1209 (0x4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:26:20 2024 GMT
Not After : Dec 31 11:26:20 2025 GMT
Subject: CN=6772835f-ccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:ec:1e:c5:3e:52:32:8b:10:11:90:b7:16:
ba:44:ba:dd:dd:af:69:bb:eb:78:25:2e:a7:e8:ea:
61:47:80:33:7f:bc:19:94:1a:44:85:23:0f:f3:f8:
cc:b1:2a:c5:1f:ae:79:bf:7e:8c:7e:68:c1:d3:a8:
5e:cc:9f:55:89:2f:7e:15:16:db:f5:f4:e0:29:4c:
35:01:bd:60:7d:62:ec:f5:51:28:22:24:7c:76:0c:
ea:b2:5c:5c:60:8e:ea:99:1f:50:7a:11:2e:06:ee:
87:13:24:7c:49:86:e5:1b:4a:04:ae:80:71:f3:2b:
65:56:65:f5:ad:42:a8:5e:68:a2:55:e0:56:fa:35:
71:99:32:5e:71:9b:87:bf:ee:65:f0:33:29:59:49:
ed:02:47:3d:8e:4f:04:2e:fc:f3:33:da:28:f4:0f:
7c:76:2f:fc:c4:b7:69:2c:e3:94:3c:54:a8:69:54:
25:94:96:3a:7d:b9:e4:92:2c:8d:41:57:1b:c1:d8:
5f:31:92:da:12:63:94:d2:36:3e:54:b8:5a:e0:59:
fe:1e:7d:75:9f:de:b8:71:ac:74:e7:46:05:7f:a6:
2e:37:a6:6c:6a:84:05:5c:2b:a8:b8:1d:39:18:19:
59:2e:2e:c5:9f:b6:a6:75:03:ca:cd:7a:1e:2a:f5:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:57:82:86:AE:CD:9F:AB:69:63:70:43:E9:A8:F1:99:D2:64:33:07
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E66B4F06C6A011EF93EE1EA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.97.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0e:e7:a2:a7:1d:91:62:66:f8:d9:bb:1f:30:5e:e4:5e:b2:
79:0d:21:1a:a5:47:b5:fa:4f:2c:eb:b3:72:80:2c:3a:30:38:
bc:97:d8:56:60:87:db:c3:78:06:a2:b5:42:cc:c7:63:88:fc:
8e:63:55:a6:89:33:d7:cd:60:8e:17:9e:ac:c6:64:a2:a7:f7:
53:8b:3a:96:58:c7:f5:1d:6d:5b:aa:b8:d8:00:aa:d0:da:71:
29:92:48:0c:f4:e1:67:38:d4:19:5b:13:86:e5:85:82:60:6f:
cf:db:31:cb:1a:5b:0f:c5:ab:50:f3:a1:78:7e:87:f3:4f:8b:
d9:45:c1:70:38:fc:3b:c8:69:fd:94:0e:74:1f:dc:8c:4b:9c:
2a:fb:e1:35:c8:e5:6b:20:e6:21:f5:07:28:ee:b9:14:bf:98:
64:81:f0:d6:7f:11:a1:7e:57:70:ec:ac:ed:77:ee:9a:39:5c:
97:bc:3a:bf:a1:00:5d:21:a2:57:6f:8f:5a:40:b8:6f:c1:b8:
ed:17:af:fd:93:f9:f8:73:b3:40:f4:34:d2:47:d1:c3:17:75:
78:b4:2d:ed:ae:2f:fc:78:00:aa:8f:e6:15:d4:cc:ff:1b:56:
32:be:af:ad:f4:ee:ce:74:c8:eb:fd:4d:87:72:c1:69:f2:92:
06:6c:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:27 2025 by rpki-client