Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FD26631CC69F11EFBA7C3BA1762E951A.roa
File: FD26631CC69F11EFBA7C3BA1762E951A.roa (raw, json)
Hash identifier: Jvf573iQ3iemkTW0f9bQksDsxYRysd0Hj1Re7o7QuyA=
Subject key identifier: 6D:56:3A:52:9B:4C:28:92:48:E6:E5:A0:E6:A2:7C:D8:A2:61:1A:1C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 049D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FD26631CC69F11EFBA7C3BA1762E951A.roa
Signing time: Mon 30 Dec 2024 11:19:52 +0000
ROA not before: Mon 30 Dec 2024 11:19:49 +0000
ROA not after: Wed 31 Dec 2025 11:19:49 +0000
asID: 329007
IP address blocks: 196.251.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 13:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:19:49 2024 GMT
Not After : Dec 31 11:19:49 2025 GMT
Subject: CN=677281d8-adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:ec:7d:53:da:af:4e:f5:76:5b:b9:6d:72:
39:d2:67:bb:ec:67:aa:f5:c3:79:21:a2:5e:b6:2f:
b0:fd:9e:a2:d0:25:a8:e0:e0:d9:73:f3:72:27:b3:
0c:7d:09:bf:79:34:fb:c4:83:2b:3b:1e:80:38:b3:
f2:cc:05:58:22:4a:84:91:1c:5a:46:42:e8:e3:00:
1b:56:67:7b:2f:0c:5b:62:c0:14:28:09:35:1b:b1:
fe:45:33:74:3c:7d:5c:92:df:ab:36:d3:55:da:41:
be:df:0f:df:37:00:e4:10:3c:b1:c2:f5:02:67:d0:
3a:48:84:1b:21:f2:b0:cb:6b:1b:b3:e1:80:70:42:
85:06:a8:f1:a1:26:86:ec:90:41:29:48:c4:46:70:
9b:83:70:17:12:9a:d1:ce:96:2e:da:38:e2:c9:f4:
a8:df:cd:67:d3:c2:3b:63:37:16:b9:50:ee:25:8d:
a9:17:20:1f:d7:83:6d:5e:7d:dc:f6:d8:17:06:ab:
28:60:3d:f4:cf:52:41:f0:57:a3:11:6d:e2:4b:96:
86:97:79:4e:85:8f:c4:cd:b6:ca:bf:54:6f:4f:5a:
c9:6f:7e:07:53:c0:76:81:f1:d0:a8:39:5c:d0:e5:
c4:c0:cc:5e:20:0f:53:ed:ae:86:66:c2:ac:f6:45:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:3A:52:9B:4C:28:92:48:E6:E5:A0:E6:A2:7C:D8:A2:61:1A:1C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FD26631CC69F11EFBA7C3BA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.89.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6e:96:0b:bb:4e:47:7c:41:61:79:37:41:03:09:28:b9:65:
10:65:1f:04:ec:03:97:78:3a:d5:cf:de:ff:75:12:61:ce:7e:
6f:3f:a6:2a:f8:1b:3f:73:a0:5e:cc:f2:4c:16:80:e0:c0:74:
0e:18:82:79:41:ae:d2:92:36:71:c5:2f:d6:15:8a:5d:73:b8:
8e:e9:dc:64:88:62:66:79:56:d7:46:23:fa:f8:79:4c:95:7c:
09:16:75:a8:e1:0c:62:49:e9:be:84:d0:a3:e4:d7:46:0d:f7:
b0:65:44:53:41:9c:e3:20:4e:fa:76:d3:61:f7:e5:fa:70:cb:
e0:d0:0e:da:e2:3b:8e:7c:3d:c5:ca:1a:42:5c:6b:af:e8:42:
cc:22:43:78:33:95:7a:a3:c4:cf:4f:c4:c8:3c:89:45:26:f0:
a1:ed:cf:58:b9:18:06:20:01:8f:92:85:c3:cc:a3:6a:a2:7c:
b7:88:3b:75:e6:97:82:be:3d:9f:d4:28:bd:8f:8f:2c:29:7d:
45:14:0d:1c:76:9a:86:8c:69:81:02:f4:d5:f3:a0:f6:a1:14:
23:45:50:2d:49:4d:9f:72:60:45:a4:83:a6:7f:30:0c:f8:22:
9a:1b:e1:50:24:c9:53:c8:bd:15:df:54:94:21:e0:51:1e:c9:
dc:bc:23:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:58 2025 by rpki-client