Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/8F2FBFDEB2EA11EFA6498349762E951A.roa
File: 8F2FBFDEB2EA11EFA6498349762E951A.roa (raw, json)
Hash identifier: fg/gS7W8GozHInMPC1mnJnRvQ4lkJhS/HgAnjo43e+I=
Subject key identifier: A7:2C:B8:3E:6F:DA:43:87:83:6F:48:B5:24:12:74:05:F5:31:EF:2E
Certificate issuer: /CN=F36D289CAF/serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
Certificate serial: 07EE
Authority key identifier: 15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/8F2FBFDEB2EA11EFA6498349762E951A.roa
Signing time: Thu 05 Dec 2024 09:23:17 +0000
ROA not before: Thu 05 Dec 2024 09:23:13 +0000
ROA not after: Tue 05 Dec 2034 09:23:13 +0000
asID: 327754
IP address blocks: 2c0f:f508:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Feb 2025 07:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D289CAF
Validity
Not Before: Dec 5 09:23:13 2024 GMT
Not After : Dec 5 09:23:13 2034 GMT
Subject: CN=67517105-ba5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:32:ba:6d:98:f1:5d:78:38:ea:72:0c:a1:
62:9a:46:6e:70:e1:12:51:09:55:9c:ee:69:df:ff:
98:55:ed:9e:b2:ac:a8:23:23:87:46:6a:d4:43:38:
6a:d8:bd:ff:70:56:e5:ca:92:5f:f3:31:b2:cc:9a:
b7:1c:38:d0:6d:ea:43:2d:33:a5:44:e2:cb:93:a5:
d7:eb:82:a3:75:22:c2:b8:b4:b7:6a:33:b9:8a:2d:
8b:09:0b:f4:95:a4:7f:a1:99:7b:d0:a4:7c:b2:e9:
80:f5:ac:04:6d:37:0b:72:72:69:23:6f:bd:13:39:
56:8d:86:da:b1:20:35:a8:fc:13:c9:d8:da:89:34:
4c:e8:81:07:ac:96:5c:2d:ab:47:35:25:b3:83:22:
11:ca:57:6b:ba:2f:dc:24:21:54:11:20:9b:c1:b2:
4c:01:cb:43:61:5a:58:63:fe:77:d8:46:56:ac:b0:
c2:42:bd:d2:a9:ff:a0:85:18:d8:9c:95:5f:d8:84:
39:ed:2d:13:f3:42:ec:28:ed:44:c6:13:eb:94:b2:
4e:72:1a:0f:3f:6d:06:b5:3f:8b:9b:45:e4:a3:f7:
ba:38:71:ad:09:b4:87:8b:52:bf:11:f4:e4:c6:03:
f3:a0:f2:92:cc:b9:8b:f5:5c:eb:ff:02:19:ea:ca:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2C:B8:3E:6F:DA:43:87:83:6F:48:B5:24:12:74:05:F5:31:EF:2E
X509v3 Authority Key Identifier:
keyid:15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/8F2FBFDEB2EA11EFA6498349762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f508:2::/48
Signature Algorithm: sha256WithRSAEncryption
0f:f9:bf:2d:12:f3:e4:e2:ea:0a:df:1a:0d:3f:f2:66:a8:e9:
08:17:8c:b2:7b:b3:8c:f5:09:70:fe:d0:67:b9:a2:4c:39:ea:
d3:91:74:a6:32:dc:39:62:b7:c8:49:32:74:92:e1:d8:51:88:
94:ba:b7:16:48:7e:e5:d5:f0:04:1e:14:77:32:b3:bd:8b:9b:
fe:07:0c:4a:b1:7a:8d:81:1c:42:8a:c6:0a:bb:7d:4f:f3:cf:
c5:9f:32:b4:32:39:4f:1d:da:e0:c9:75:95:34:8e:50:de:70:
bf:02:39:70:c3:0d:8b:70:8c:f3:6e:a6:c3:0e:bd:15:c9:57:
ea:89:2c:57:3f:0b:14:9f:b0:30:ce:e9:d2:bc:d9:1e:17:a6:
ad:4d:d0:ce:4c:19:c2:63:e8:57:9e:9c:f2:1a:13:f0:07:8e:
fa:c3:f3:0f:ab:e2:e9:27:1e:68:85:da:c2:89:d1:7f:e4:be:
8d:9a:45:69:93:49:c2:72:e4:60:2f:a3:96:6b:54:46:d5:e9:
50:10:d6:95:27:11:f1:9a:3c:52:89:c0:86:71:7c:66:a1:71:
ac:9c:fa:21:a4:92:79:51:ee:f9:ca:79:e7:c9:f8:0d:ae:0b:
1f:19:8c:a7:7b:ee:b6:df:d8:c9:9f:c9:d5:9f:51:56:d0:4c:
2f:0a:66:18
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICB+4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDI4OUNBRjExMC8GA1UEBRMoMTU0ODBBQzNFNzYzN0NGMkE3QjY4ODdBRkQ1MUE1
M0YwM0U2QUQ0NzAeFw0yNDEyMDUwOTIzMTNaFw0zNDEyMDUwOTIzMTNaMBgxFjAU
BgNVBAMTDTY3NTE3MTA1LWJhNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNwTK6bZjxXXg46nIMoWKaRm5w4RJRCVWc7mnf/5hV7Z6yrKgjI4dGatRD
OGrYvf9wVuXKkl/zMbLMmrccONBt6kMtM6VE4suTpdfrgqN1IsK4tLdqM7mKLYsJ
C/SVpH+hmXvQpHyy6YD1rARtNwtycmkjb70TOVaNhtqxIDWo/BPJ2NqJNEzogQes
llwtq0c1JbODIhHKV2u6L9wkIVQRIJvBskwBy0NhWlhj/nfYRlassMJCvdKp/6CF
GNiclV/YhDntLRPzQuwo7UTGE+uUsk5yGg8/bQa1P4ubReSj97o4ca0JtIeLUr8R
9OTGA/Og8pLMuYv1XOv/AhnqymabAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpyy4
Pm/aQ4eDb0i1JBJ0BfUx7y4wHwYDVR0jBBgwFoAUFUgKw+djfPKntoh6/VGlPwPm
rUcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQyODlDL0ZCNzA4MURDQTg3NDExRTlBQzc3QUI0NUY4QUVBMjI4L0ZVZ0t3
LWRqZlBLbnRvaDZfVkdsUHdQbXJVYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZVZ0t3LWRqZlBLbnRvaDZfVkdsUHdQbXJVYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQyODlDL0ZCNzA4MURDQTg3NDExRTlBQzc3QUI0NUY4
QUVBMjI4LzhGMkZCRkRFQjJFQTExRUZBNjQ5ODM0OTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAsD/UIAAIwDQYJKoZIhvcN
AQELBQADggEBAA/5vy0S8+Ti6grfGg0/8mao6QgXjLJ7s4z1CXD+0Ge5okw56tOR
dKYy3Dlit8hJMnSS4dhRiJS6txZIfuXV8AQeFHcys72Lm/4HDEqxeo2BHEKKxgq7
fU/zz8WfMrQyOU8d2uDJdZU0jlDecL8COXDDDYtwjPNupsMOvRXJV+qJLFc/CxSf
sDDO6dK82R4Xpq1N0M5MGcJj6FeenPIaE/AHjvrD8w+r4uknHmiF2sKJ0X/kvo2a
RWmTScJy5GAvo5ZrVEbV6VAQ1pUnEfGaPFKJwIZxfGahcayc+iGkknlR7vnKeefJ
+A2uCx8ZjKd77rbf2MmfydWfUVbQTC8KZhg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:47 2025 by rpki-client