Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/EE85126C90FE11EAA1EC8D70F8AEA228.roa
File: EE85126C90FE11EAA1EC8D70F8AEA228.roa (raw, json)
Hash identifier: 3pdGDBouFgfCJaNGf9knXpVy3ZDI7jAuGCmUwAZW+4c=
Subject key identifier: D6:A0:9C:33:5B:79:FD:14:52:1A:A3:67:2A:C6:99:A9:9A:2A:FE:C8
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 0C
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/EE85126C90FE11EAA1EC8D70F8AEA228.roa
Signing time: Fri 08 May 2020 07:38:39 +0000
ROA not before: Sat 09 May 2020 07:38:34 +0000
ROA not after: Fri 31 May 2030 07:38:34 +0000
asID: 37518
IP address blocks: 196.48.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 20 Mar 2023 10:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF
Validity
Not Before: May 9 07:38:34 2020 GMT
Not After : May 31 07:38:34 2030 GMT
Subject: CN=5eb50c7f-706f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:b7:cb:05:d5:17:ee:ba:79:7a:75:3e:55:
b8:fa:77:a7:e1:47:1d:89:15:57:14:de:b0:5b:fe:
d9:dc:e1:67:e4:95:44:cf:21:5c:e0:a0:ed:56:36:
a8:07:ec:9a:7b:c1:75:91:00:09:94:5d:26:4d:27:
fe:2a:73:7e:00:d1:f4:6a:1e:40:bb:c3:db:6e:2b:
06:b8:42:1e:c6:7b:35:c1:cd:f6:2f:f9:5a:9c:3f:
a1:70:c4:cc:13:cf:75:1e:75:b6:c3:fe:a9:0c:8b:
4a:ed:f2:4a:2e:e7:64:eb:f1:f3:40:2f:37:74:c8:
dc:09:37:d2:77:82:f2:f3:03:2a:03:13:3c:8c:43:
53:12:6f:bc:fd:47:9f:67:8b:37:b7:e7:31:c9:47:
90:75:b4:a8:76:fe:cb:5c:cc:c1:81:63:da:ea:8d:
80:b5:6d:24:06:9b:6d:81:e0:7d:e4:3e:f7:19:79:
6d:c3:de:9f:b8:89:a7:cc:b5:20:d1:9b:d1:a6:a0:
3d:0c:70:47:5f:aa:26:3e:71:b2:0f:08:8f:2d:d7:
52:a9:fd:d6:eb:16:8b:f5:07:66:f4:a6:7b:c9:91:
b4:93:96:18:9e:34:f7:51:0e:fa:5f:39:5b:8d:54:
69:2a:ce:d9:5b:7e:e5:eb:cf:98:47:16:ca:3b:ae:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:9C:33:5B:79:FD:14:52:1A:A3:67:2A:C6:99:A9:9A:2A:FE:C8
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/EE85126C90FE11EAA1EC8D70F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.48.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:66:c0:8b:3b:02:34:70:6a:bf:8f:ed:68:c4:dc:7c:85:ad:
5a:80:0f:f5:37:51:77:a3:7e:ea:06:76:04:8d:e2:12:01:f3:
98:88:2b:ec:d4:e1:8a:b5:17:a5:f9:83:99:f6:17:9e:b8:01:
ba:28:fc:fb:b9:1a:f6:8d:33:fe:ea:b3:9a:88:2e:45:6a:fa:
fc:ee:05:92:c6:75:38:16:a5:31:a2:fc:31:a6:e2:75:b0:6d:
db:6c:3d:d1:4b:b5:a1:1f:7e:68:ab:c8:84:21:a5:4c:80:26:
38:91:bf:a5:e1:f7:03:74:1f:88:46:bc:02:a0:01:ba:85:5e:
8b:a2:14:94:7c:43:6f:c6:3c:c4:0d:a6:17:87:65:33:06:e1:
6c:c4:2d:03:c1:5a:33:17:7a:a9:77:05:fa:9f:7c:e8:0e:c4:
88:f7:b0:01:98:67:d9:dd:3b:89:ab:0a:b5:4a:89:d9:4a:92:
b8:48:e2:28:31:20:4e:ef:8a:bc:2c:98:c0:d1:8b:d5:47:89:
18:ae:10:ea:fe:c8:7c:d6:25:da:55:19:bc:33:9a:d4:b0:fa:
84:86:45:b1:3c:5d:d8:da:a7:69:d6:08:f6:2d:6c:f5:b8:3e:
a4:f2:ed:8f:4b:de:ed:33:f8:f9:17:43:1b:00:1f:8e:50:6e:
c7:7f:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:53 2025 by rpki-client