Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EC1F5F78D18B11EF94BAF78A762E951A.roa
File: EC1F5F78D18B11EF94BAF78A762E951A.roa (raw, json)
Hash identifier: t1W3521F0CUhJrS8HtveurJNdfbPDaRe7LCjFLI0320=
Subject key identifier: 2F:D0:38:43:BC:69:8E:71:80:00:74:27:AC:1F:A0:94:85:7D:63:1B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0512
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EC1F5F78D18B11EF94BAF78A762E951A.roa
Signing time: Mon 13 Jan 2025 08:53:57 +0000
ROA not before: Mon 13 Jan 2025 08:53:53 +0000
ROA not after: Tue 13 Jan 2026 08:53:53 +0000
asID: 43260
IP address blocks: 196.251.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 13:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 13 08:53:53 2025 GMT
Not After : Jan 13 08:53:53 2026 GMT
Subject: CN=6784d4a4-fd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:6a:b0:c6:e4:86:f0:b7:5e:6e:93:30:d4:
81:d4:b2:59:47:0e:48:32:0d:65:ba:40:03:6a:0a:
28:bc:df:dc:bf:70:ea:49:57:d1:ba:d7:0a:b6:6c:
86:a0:d1:22:83:6f:75:f3:39:4d:f4:00:08:25:5f:
62:38:6e:be:a7:90:39:15:7e:93:28:e7:75:21:87:
61:3c:76:55:46:db:f3:67:6b:9f:c2:7e:84:7e:c4:
c3:ae:71:1b:14:dc:5e:4f:8b:c4:9a:9d:22:dc:7d:
22:86:e7:b1:46:70:1e:25:46:7c:50:be:38:70:0b:
c3:40:c7:51:5f:0e:53:a3:be:6a:8a:87:98:40:bd:
f4:54:7e:72:c0:e7:eb:d0:e6:59:c7:99:53:16:56:
e0:7b:af:66:d1:56:0f:c1:10:57:dd:42:41:e9:88:
99:f9:0d:7a:40:48:0d:c3:32:e5:c2:50:4d:c3:95:
e5:b5:7a:2c:4f:c9:db:ea:10:43:e5:fe:e9:a0:6d:
94:4d:d5:c9:4d:ff:f9:ba:96:db:a8:85:8c:fe:c4:
69:35:2a:75:24:51:57:6a:3b:f6:b6:31:72:36:30:
ad:ac:b5:9f:c7:6d:5d:98:ba:c0:8c:14:69:80:1a:
d4:52:55:85:07:43:b4:de:63:8a:46:8f:4b:22:53:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D0:38:43:BC:69:8E:71:80:00:74:27:AC:1F:A0:94:85:7D:63:1B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EC1F5F78D18B11EF94BAF78A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:29:c8:c2:27:5f:f6:5e:13:02:6d:95:dd:9a:05:ad:77:04:
a8:d9:fd:51:c9:cf:c5:62:09:c2:23:02:96:50:cb:39:6b:c5:
c1:d3:fd:23:05:54:da:b4:08:1a:0f:40:44:78:73:4b:52:3b:
ea:6f:f3:8a:8c:b9:ba:7c:64:5c:d1:b5:34:69:14:a6:f7:80:
f3:0f:6f:15:a4:76:aa:f0:61:0e:60:91:df:ec:31:60:60:45:
68:19:5e:87:22:21:f5:dc:5a:c7:a5:ce:cb:fd:c0:08:28:59:
77:f3:a0:9f:9e:ba:09:28:25:24:31:22:7d:05:86:e1:6c:1b:
e9:76:7f:7f:8e:c5:8c:6f:d7:df:40:5d:be:b2:92:2e:d8:59:
c4:f1:04:7a:80:03:b2:9b:7f:b5:bb:54:9e:d1:11:e4:5f:dd:
93:ad:af:91:0b:07:eb:ca:93:48:2d:1d:62:22:95:16:39:b0:
be:40:11:66:dd:e2:0f:2a:6a:df:0b:52:8f:f9:2f:a1:dd:26:
f3:99:22:90:42:d8:19:50:24:10:b4:20:71:29:51:9d:68:06:
44:a2:6b:bf:80:9d:38:05:ee:86:dd:c2:66:fa:ff:b2:f6:8a:
74:af:15:86:ab:c5:c6:2a:3d:24:bf:37:a6:b2:d1:42:96:64:
95:cd:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:56 2025 by rpki-client