Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/6A92EBFE92BC11EF8F95545E762E951A.roa
File: 6A92EBFE92BC11EF8F95545E762E951A.roa (raw, json)
Hash identifier: zUuhZjroPK0QODYusGO62aPkLqIluHiulFOzMRlXyZI=
Subject key identifier: 3E:BA:15:D7:53:2C:25:B0:20:54:EE:33:39:BC:0A:ED:90:B4:71:4A
Certificate issuer: /CN=F364AE1CAF/serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
Certificate serial: 0246
Authority key identifier: BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/6A92EBFE92BC11EF8F95545E762E951A.roa
Signing time: Fri 25 Oct 2024 10:32:21 +0000
ROA not before: Fri 25 Oct 2024 10:32:17 +0000
ROA not after: Mon 26 Oct 2026 10:32:17 +0000
asID: 37415
IP address blocks: 2c0f:eca0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 25 Oct 2024 10:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AE1CAF, serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
Validity
Not Before: Oct 25 10:32:17 2024 GMT
Not After : Oct 26 10:32:17 2026 GMT
Subject: CN=671b73b5-b2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:84:e1:bf:4a:3d:80:02:30:70:63:b1:9f:
07:c5:5d:c3:21:c8:b4:bf:66:3b:b9:56:72:ad:43:
5e:74:7b:a7:e1:6b:47:e7:26:8a:fb:ca:96:60:f3:
56:bf:a7:41:32:f2:cf:fb:2b:03:a3:14:5c:98:8d:
ac:8a:09:9d:6c:08:45:ea:78:67:c2:3d:ff:46:c7:
45:56:ba:c0:02:6c:a4:90:ad:7d:70:75:e7:4f:ce:
6b:6b:f4:d4:f4:8e:de:3d:fc:9f:64:94:98:72:0d:
70:03:64:29:49:63:58:96:f0:fb:07:88:49:51:20:
9d:81:54:48:4a:c4:f5:d3:45:b7:aa:b7:48:75:6f:
39:ed:13:ef:2c:2d:7b:26:4a:eb:d9:5e:29:0a:78:
a6:f1:32:82:b2:e7:87:de:f5:82:e0:fe:4f:ad:47:
bb:c2:f8:47:3c:cb:8d:f9:89:a7:20:f4:10:92:46:
94:ae:ad:83:8d:3b:e2:9e:20:3d:65:1d:78:ef:84:
1d:1a:5d:6f:2d:d7:af:64:53:68:9b:f0:4d:23:35:
e6:78:51:5a:8b:ee:fc:b6:46:4b:fb:99:49:34:86:
ab:52:bf:b3:f0:5d:1a:22:dd:ac:a4:60:4e:b6:90:
dd:78:e6:a8:05:8b:af:b2:29:2f:7f:d5:0c:e8:bf:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BA:15:D7:53:2C:25:B0:20:54:EE:33:39:BC:0A:ED:90:B4:71:4A
X509v3 Authority Key Identifier:
keyid:BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/6A92EBFE92BC11EF8F95545E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eca0::/32
Signature Algorithm: sha256WithRSAEncryption
a7:ba:cf:40:de:ea:3b:fe:a4:b0:fb:7a:6e:36:7f:4e:42:6d:
95:7e:2d:7e:ad:de:c7:f1:97:25:ae:6a:97:e6:79:a1:70:33:
cd:08:cd:51:9f:aa:db:29:bf:57:a5:30:64:e9:01:bf:d9:0d:
80:ba:71:81:7c:95:de:7f:8c:0c:e3:c5:cb:78:8b:c8:d7:60:
3f:3f:d2:e3:1b:2f:1d:e2:32:20:90:c0:67:ef:9b:d1:f0:90:
a1:82:39:d5:3f:5d:24:97:37:61:8e:97:a2:b3:be:c2:1c:05:
a3:18:cf:54:f7:06:cb:bb:f1:8f:19:63:11:1f:f9:d0:62:66:
7c:3b:35:94:bf:cb:56:2f:98:67:f2:3e:2b:c7:98:ca:bf:63:
1f:25:37:2e:04:df:6f:e8:c8:cb:c7:52:cf:5a:f3:c5:99:78:
eb:5e:96:64:e9:38:50:93:f6:ca:35:7e:e0:06:56:75:57:6d:
e6:ad:07:da:24:d7:7a:df:3e:81:ce:76:8f:ac:c0:ec:9d:b0:
c3:ba:ac:9a:2e:02:10:50:a7:ee:d5:3d:4b:2c:0c:54:73:16:
f9:98:a5:d6:4b:a8:a0:1c:8a:48:3d:1f:06:23:b1:c9:9a:b0:
dd:13:c8:b4:b9:8f:4a:fa:61:db:4a:b8:12:9d:91:81:19:45:
25:b9:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:23:57 2025 by rpki-client