Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EC3AA0CCECF611EFBAF9D25E762E951A.roa
File: EC3AA0CCECF611EFBAF9D25E762E951A.roa (raw, json)
Hash identifier: yFsGVF439iOSIQvX2QkBtpb2DJ2E0gRIstuaEnE5xXw=
Subject key identifier: B1:50:AC:8E:84:08:5D:D0:6E:4E:9A:07:FA:70:55:AA:59:AC:37:09
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0661
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EC3AA0CCECF611EFBAF9D25E762E951A.roa
Signing time: Mon 17 Feb 2025 06:17:54 +0000
ROA not before: Mon 17 Feb 2025 06:17:50 +0000
ROA not after: Tue 17 Feb 2026 06:17:50 +0000
asID: 43260
IP address blocks: 196.251.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 09:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1633 (0x661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 17 06:17:50 2025 GMT
Not After : Feb 17 06:17:50 2026 GMT
Subject: CN=67b2d492-ab53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:42:79:d1:cf:da:38:74:08:5e:89:f1:f7:
d0:28:5f:20:2a:3e:a7:d2:f3:3a:9a:fc:67:72:b4:
41:00:60:93:d0:64:f3:bb:31:fe:4b:7e:eb:cb:a8:
b8:5a:ce:8d:88:98:e5:a3:b5:1e:9c:d8:a7:84:3e:
b4:36:9b:d3:e3:ee:76:79:45:99:b9:77:00:c0:3b:
55:71:7b:98:fc:46:19:c1:f7:e5:7a:d5:c7:ba:a1:
a8:c6:c3:40:de:e0:7c:aa:f8:87:e6:81:20:ca:1f:
b6:35:b7:69:68:65:93:e8:68:17:cd:38:df:d6:64:
0d:ae:21:32:cc:82:84:49:d5:e1:dc:9e:69:d2:d6:
24:8c:37:76:f6:6d:60:68:82:d7:b2:4a:97:a2:ef:
1a:17:6e:0e:7e:9e:8d:71:07:9c:fb:26:a1:f5:03:
05:ef:a1:87:5f:7d:b5:88:05:22:51:8a:2d:7e:47:
98:9b:2b:c0:c1:75:14:76:96:0f:7d:24:71:91:ea:
63:b2:3e:82:dc:ec:88:99:47:d6:74:c5:4f:00:4b:
bb:eb:7c:7d:13:9a:2c:eb:f2:d3:2d:49:de:58:19:
74:fc:a7:a8:31:c3:b8:9f:5c:d0:86:09:66:6f:aa:
eb:31:f7:a4:6a:ef:01:93:6e:52:1c:53:85:7a:54:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:AC:8E:84:08:5D:D0:6E:4E:9A:07:FA:70:55:AA:59:AC:37:09
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EC3AA0CCECF611EFBAF9D25E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.125.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:56:59:24:ce:18:07:4a:a1:9a:07:3a:8c:4c:6b:df:5e:15:
72:21:44:b6:38:9f:6d:2b:b0:6e:6b:2c:de:b2:b8:0d:f8:52:
56:ea:e0:86:20:8b:28:e2:17:5a:eb:f5:cb:2c:1f:dd:80:06:
e5:37:92:6c:18:6f:3c:fc:42:4a:f4:8c:0b:e2:04:24:f0:7c:
d2:7c:7a:82:89:eb:29:4f:5a:cd:46:9b:29:1a:fe:09:d4:02:
83:11:84:b4:b3:22:42:5e:1d:4c:d1:66:0d:06:fa:1d:0e:d3:
38:dc:d3:6f:24:f2:ad:2e:0a:76:4e:77:78:f4:f1:83:c4:4e:
25:f5:a8:0a:50:e3:85:e9:72:04:01:8a:f9:a7:22:68:90:51:
62:eb:7c:b8:61:14:1f:9f:68:6f:ac:67:b5:4f:44:39:8a:f4:
12:50:ab:38:ab:f1:16:05:69:1b:81:80:61:07:54:35:0a:05:
f9:65:03:67:af:f8:c3:d2:fc:cf:63:48:32:f8:d9:8e:9e:77:
d5:ba:de:f4:8d:65:48:ef:2b:3b:72:8f:5e:12:f5:d6:0a:31:
b9:40:d0:3d:d1:53:b8:cc:c0:49:20:40:4b:b4:9b:d6:39:74:
37:6a:28:a6:3f:18:01:d7:04:92:e2:4d:81:00:a3:16:a9:35:
97:cc:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:43 2025 by rpki-client