Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F1D0C74AC36211EF9E2F1492762E951A.roa
File: F1D0C74AC36211EF9E2F1492762E951A.roa (raw, json)
Hash identifier: lgZV0ME1aJzj2BPmxJVf0IzNnoRIVzT2HsAcrHWwQOA=
Subject key identifier: 65:15:FF:84:DD:96:52:D6:F9:34:67:A3:D0:13:AE:07:7B:94:9F:89
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 045E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F1D0C74AC36211EF9E2F1492762E951A.roa
Signing time: Thu 26 Dec 2024 08:25:20 +0000
ROA not before: Thu 26 Dec 2024 08:25:17 +0000
ROA not after: Fri 26 Dec 2025 08:25:17 +0000
asID: 329007
IP address blocks: 196.251.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 08:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118 (0x45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 26 08:25:17 2024 GMT
Not After : Dec 26 08:25:17 2025 GMT
Subject: CN=676d12f0-250e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:11:f9:26:d9:83:f9:23:60:ca:c6:bb:bf:
0b:c1:df:d8:95:c4:88:9f:f7:b3:7b:40:60:8c:dc:
c2:ad:d5:ac:be:61:db:1b:88:28:89:d9:a5:aa:ac:
45:5d:0c:28:04:1c:83:86:a7:33:e7:a8:9a:7c:b4:
6b:4f:64:55:bf:c7:0d:d6:ad:dc:7d:2c:40:d3:72:
b8:72:f1:4d:c6:60:42:25:0c:f4:ad:fa:fd:60:df:
6f:ae:7e:db:28:09:3b:a7:cb:a4:48:1d:a1:8e:59:
9e:2f:2a:f4:e2:12:4d:20:b5:b3:53:60:46:dd:54:
de:75:dd:3a:99:2e:ff:67:69:72:58:67:77:dc:4b:
6e:8a:53:29:24:90:23:27:28:03:8b:42:d9:0d:e1:
dc:2c:33:f9:fb:3b:16:5f:9f:04:d0:ea:cb:db:7a:
67:c8:a3:47:02:cc:9c:f9:81:c2:1b:1d:87:9e:55:
d6:2f:1f:e6:d6:e6:73:6b:d2:97:c6:dc:f4:28:48:
89:8f:44:09:89:a6:c4:3e:48:76:f7:b1:b3:09:6d:
50:ba:af:58:d6:11:a8:52:1c:8a:db:1e:a2:70:d3:
9e:7a:13:b3:99:79:e7:d3:c9:f7:ba:ac:2e:c5:95:
c6:b8:e3:b7:e3:1d:3a:5b:cf:c4:49:ba:09:65:79:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:FF:84:DD:96:52:D6:F9:34:67:A3:D0:13:AE:07:7B:94:9F:89
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F1D0C74AC36211EF9E2F1492762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ea:dd:82:4e:df:ab:59:45:5d:c4:c4:3e:b2:ff:8b:6b:14:
c2:92:0c:8f:1b:e3:02:84:20:7a:c8:6a:6b:45:24:f3:03:46:
21:3d:1e:e4:2c:25:f9:2c:4c:69:93:3c:93:ad:94:81:4c:01:
b4:ef:e3:82:1a:53:80:d1:cc:60:fc:63:5d:7d:70:0c:2b:e3:
dd:93:07:ec:e7:86:1f:1d:11:40:67:9b:b5:2e:71:69:c0:7b:
c8:52:9c:2c:2d:a2:f8:1e:a0:b5:d9:df:62:0f:9e:d0:3e:db:
4c:5e:2f:a2:fb:ca:f7:af:1c:c4:fd:48:8d:15:c3:14:1c:60:
d7:ff:ff:0d:88:4a:9b:76:ca:82:c3:43:a5:ab:6d:31:ba:95:
1b:ce:51:ba:69:6b:d5:3b:ab:02:0d:a7:aa:0a:b8:b0:6f:03:
2d:08:a9:1f:5c:4c:ff:14:57:0e:46:57:f0:1e:f2:6b:35:c8:
c6:ef:87:31:dc:d8:9a:c8:d9:ed:e2:04:e8:44:f9:a0:e6:3c:
a8:13:4d:30:71:3f:62:5b:6e:4c:ad:6c:d7:e1:a5:cd:87:d1:
86:9e:7d:e8:16:3d:11:35:56:ce:7d:ce:75:c0:ac:cd:8f:32:
d6:61:a9:4c:90:68:8f:22:83:33:55:47:68:b9:40:cf:99:6e:
36:77:56:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:46 2025 by rpki-client