Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/BA30CB82F08A11EF94BCBC86762E951A.roa
File: BA30CB82F08A11EF94BCBC86762E951A.roa (raw, json)
Hash identifier: WsV2mFQQYT6JwxGrEeGs+fHNdQWXv7geuksMs4mQBaI=
Subject key identifier: 82:B8:4D:4F:D5:A1:58:5D:71:C5:36:EF:D7:35:B3:02:82:64:3F:B5
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 05B2
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/BA30CB82F08A11EF94BCBC86762E951A.roa
Signing time: Fri 21 Feb 2025 19:33:29 +0000
ROA not before: Fri 21 Feb 2025 19:33:24 +0000
ROA not after: Thu 21 Aug 2025 19:33:24 +0000
asID: 2914
IP address blocks: 196.44.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF
Validity
Not Before: Feb 21 19:33:24 2025 GMT
Not After : Aug 21 19:33:24 2025 GMT
Subject: CN=67b8d509-a976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:d1:41:bc:69:08:bd:c7:f2:14:9a:69:24:
d7:a4:ca:05:7f:3f:e4:e6:28:1d:d4:77:ac:98:a8:
16:39:52:f4:6e:91:3c:27:86:c2:01:73:bf:42:05:
2a:02:f3:5e:60:60:72:87:a7:e2:c9:44:29:0e:c0:
ae:49:30:ff:5e:06:67:e1:62:67:02:4a:c4:46:ab:
6e:c2:5a:71:d5:18:72:9d:3f:9b:78:56:2d:73:9a:
9e:7a:81:9f:4d:b2:7e:11:6f:a7:64:8a:09:99:30:
cf:a1:c5:a3:39:f7:d5:0b:6e:39:49:3b:b7:95:fb:
3b:01:e2:77:53:3a:32:79:fa:cb:4e:77:a7:98:9e:
af:8f:e9:d3:9c:be:00:78:b9:06:57:de:36:4e:60:
25:40:60:e0:65:ed:65:05:0d:9a:14:ea:ad:68:96:
61:c2:79:7f:34:87:7a:21:bc:fb:d6:64:19:98:7f:
0c:12:19:3f:77:f0:f5:43:4e:86:dd:b9:ad:15:d5:
b6:42:5f:00:9c:15:d5:03:89:2e:5a:84:2f:34:4f:
3c:55:af:d3:8b:7e:ea:3a:56:48:9d:49:dc:3a:80:
53:02:11:55:aa:2b:79:9b:a1:a6:3d:1e:72:55:75:
dc:c0:64:e8:8c:e1:45:9a:ae:37:5d:57:9f:19:0e:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B8:4D:4F:D5:A1:58:5D:71:C5:36:EF:D7:35:B3:02:82:64:3F:B5
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/BA30CB82F08A11EF94BCBC86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.119.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4c:4f:85:b7:68:b6:1c:d7:26:ba:c4:59:15:c9:2b:f4:c6:
a0:29:6b:e0:fb:42:f2:8b:a4:e2:14:c1:ba:ec:c5:21:de:a5:
a3:e6:da:dc:2d:9c:7a:92:3f:8a:01:70:91:43:1d:6f:82:ec:
13:91:5b:05:b9:cc:04:fe:70:f1:2c:7a:9f:b4:fa:61:02:7a:
e5:fd:20:92:1c:f6:06:92:2a:b6:95:3f:87:4a:60:05:11:ad:
92:3a:9d:32:08:61:6a:0d:f1:cc:16:26:a2:6b:23:2a:43:7c:
44:73:86:46:ee:39:32:42:76:ca:93:e5:0b:1f:fc:79:42:69:
73:d7:ed:27:f9:8f:8d:cc:4c:bc:cc:72:d4:7a:ed:5f:24:16:
fd:7e:94:4e:d8:01:4f:ce:5b:30:91:7b:44:1c:5a:e2:03:a4:
c5:bc:fe:a0:89:f2:14:cd:31:64:be:03:1e:20:f5:f5:ee:9a:
c1:50:0e:06:a4:40:2d:d1:3c:ca:29:15:41:5f:57:27:2f:6c:
e2:f6:ee:7f:76:9c:80:4f:4c:74:1d:9f:34:1a:4f:3e:3c:27:
e1:cc:30:24:83:69:01:ca:1b:7e:30:e2:11:70:ed:24:b8:31:
da:52:f7:fd:b8:3e:51:e7:aa:0f:2b:a4:d7:10:98:0b:3d:62:
c2:b4:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:30:15 2025 by rpki-client