Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F878ECFEEA0311EF8C6419A8762E951A.roa
File: F878ECFEEA0311EF8C6419A8762E951A.roa (raw, json)
Hash identifier: dfcuxKTU3dcHd55i648kpwnMmReGfws/1bSlNJCV28c=
Subject key identifier: 47:B1:5C:E4:D2:55:59:EA:64:85:73:FC:D0:C7:50:55:04:C2:2F:1A
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0643
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F878ECFEEA0311EF8C6419A8762E951A.roa
Signing time: Thu 13 Feb 2025 12:13:45 +0000
ROA not before: Thu 13 Feb 2025 12:13:41 +0000
ROA not after: Thu 01 Jan 2026 12:13:41 +0000
asID: 197450
IP address blocks: 196.251.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 07:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1603 (0x643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 13 12:13:41 2025 GMT
Not After : Jan 1 12:13:41 2026 GMT
Subject: CN=67ade1f9-d4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6f:74:69:37:77:0b:51:fc:5c:7f:1d:66:f2:
b4:39:43:5d:27:88:f0:fe:e5:4c:6b:d2:ee:74:b2:
0c:f7:08:25:ee:39:d4:07:67:c1:d4:b6:d5:3b:b1:
ae:a9:f3:53:bc:d4:e1:b3:32:c4:bc:43:bc:5f:94:
48:79:a1:56:ca:2a:78:ff:c1:55:c7:77:2e:06:98:
b8:c6:b9:2e:01:21:ad:c8:2a:ac:f4:ff:df:a1:21:
73:f1:da:96:cb:31:b0:70:e5:d3:42:88:11:42:cd:
a9:20:d9:f8:8b:c1:6f:2b:05:b9:4e:57:a5:20:56:
85:16:6a:5d:ab:f1:3f:19:74:08:18:7a:27:af:14:
59:5b:b2:9f:d6:fc:10:85:7f:4d:85:bc:02:5e:69:
47:7d:56:c4:2d:f2:79:62:5f:f8:44:84:2d:bb:3d:
1b:45:91:9c:09:1e:ce:01:aa:02:a4:ff:6f:44:57:
15:60:3a:82:99:28:95:49:d3:92:ad:1e:85:c0:d6:
60:83:9c:03:03:5c:f2:3b:08:a9:6d:f3:ed:58:26:
d0:9c:fc:d6:22:da:3c:61:5f:de:77:a6:e4:10:0a:
e2:d3:1e:e2:e9:59:74:69:3c:a8:a4:d3:a4:f4:73:
78:57:9c:43:ca:48:11:de:f5:f4:87:62:1b:85:ad:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B1:5C:E4:D2:55:59:EA:64:85:73:FC:D0:C7:50:55:04:C2:2F:1A
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F878ECFEEA0311EF8C6419A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.82.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ff:64:fa:52:7e:85:75:56:aa:1d:ee:ed:40:d2:66:1b:03:
c3:b3:b8:f9:26:cc:ba:f6:5c:df:e2:10:7c:9a:4e:67:5b:b6:
b8:45:37:88:74:4a:b9:e1:f6:2b:b5:f1:c8:a1:ef:24:63:fb:
e9:7f:52:40:71:39:42:02:21:d2:5e:70:3e:88:e0:5a:fd:12:
af:62:cc:f3:bc:8f:5e:cc:6b:41:ec:82:18:d0:4d:7d:13:45:
ab:18:7b:54:cf:d8:ff:97:59:d6:ab:5c:0e:e0:11:56:29:20:
90:0f:6a:d3:10:0f:15:0f:9b:62:45:46:d9:c1:d6:ba:0a:9d:
08:e2:4c:47:12:19:0a:96:5d:31:6a:8e:af:ef:3f:aa:1c:1c:
48:03:fd:89:1b:97:f0:7e:03:13:80:ac:1a:78:f1:5a:77:3d:
7e:0d:8b:50:43:76:fe:37:44:19:f8:5c:db:67:3a:83:90:02:
84:a4:ba:bd:66:01:d5:10:59:54:29:18:da:eb:49:a5:ca:bc:
4b:49:71:08:57:b9:68:ed:02:e6:d6:66:ec:dd:27:e8:48:3d:
60:0f:7e:94:cb:ec:08:15:8e:bc:61:05:8a:2d:9f:93:22:53:
ca:5d:fb:6c:07:15:7e:b3:6d:ad:be:8f:7c:92:ce:a4:98:81:
36:02:c6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:46 2025 by rpki-client