Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/FA736EB8625711F0991DC1DADAE4EC9C.roa
File: FA736EB8625711F0991DC1DADAE4EC9C.roa (raw, json)
Hash identifier: pQ46FFdxfU86rLgbZ13sha86+sVo5Uy/iE53L0jpCqk=
Subject key identifier: 27:06:C5:60:2B:B1:2D:D3:EB:74:45:18:31:85:6E:D8:AC:9E:72:7E
Certificate issuer: /CN=F36F68F4AF/serialNumber=627A43BB0DF3C6F5E6287ABFEA17A75DB7B2B303
Certificate serial: 0221
Authority key identifier: 62:7A:43:BB:0D:F3:C6:F5:E6:28:7A:BF:EA:17:A7:5D:B7:B2:B3:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/FA736EB8625711F0991DC1DADAE4EC9C.roa
Signing time: Wed 16 Jul 2025 15:17:26 +0000
ROA not before: Wed 16 Jul 2025 15:17:21 +0000
ROA not after: Mon 16 Jul 2035 15:17:21 +0000
asID: 37557
IP address blocks: 197.231.152.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 17:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AF, serialNumber=627A43BB0DF3C6F5E6287ABFEA17A75DB7B2B303
Validity
Not Before: Jul 16 15:17:21 2025 GMT
Not After : Jul 16 15:17:21 2035 GMT
Subject: CN=6877c285-b98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:7f:c0:8c:6b:ef:07:42:90:7e:96:d8:5f:
82:10:0e:fe:d9:81:18:10:55:26:44:53:be:5e:a2:
4b:62:46:af:47:84:12:61:7f:fc:9e:54:b7:d3:31:
a6:6f:97:6b:90:80:c8:34:ba:0d:e1:14:1b:e6:53:
a4:47:04:46:7f:6f:f5:de:45:37:f5:56:3a:34:41:
50:da:04:4d:e1:a6:9a:c7:28:8c:bd:da:59:62:27:
66:b3:ab:3c:9b:d8:2d:c0:7e:0a:91:6a:7b:cf:70:
9a:9a:aa:03:19:7e:90:10:b6:16:21:7a:ca:c4:b6:
87:bb:db:db:8b:29:76:12:d0:e9:65:2b:e4:d9:30:
d0:8c:8d:00:b5:c4:1b:5d:cf:8d:f7:98:e5:65:49:
02:0d:9e:98:74:8d:13:f2:f0:b5:b2:dd:8a:ad:64:
a2:54:2a:3e:ad:4e:8b:e9:dd:4b:95:8e:a1:ce:d0:
29:a0:ab:65:a9:77:84:bd:73:a4:da:09:d8:d3:56:
65:34:0d:c4:48:23:2f:dd:10:f9:ac:1a:71:67:fa:
85:e1:17:fe:e6:4a:a0:da:f9:a3:6c:13:87:f3:f2:
cf:5d:06:fd:90:23:f6:82:d9:99:e7:6f:a9:31:b1:
0b:a1:de:36:37:13:55:b3:f5:bb:dc:25:e0:50:5c:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:06:C5:60:2B:B1:2D:D3:EB:74:45:18:31:85:6E:D8:AC:9E:72:7E
X509v3 Authority Key Identifier:
keyid:62:7A:43:BB:0D:F3:C6:F5:E6:28:7A:BF:EA:17:A7:5D:B7:B2:B3:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/FA736EB8625711F0991DC1DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.231.152.0/21
Signature Algorithm: sha256WithRSAEncryption
72:43:01:d1:69:f4:f2:cd:da:6f:dc:45:8d:2f:b1:c0:de:8e:
f2:1d:f8:d2:94:8f:ce:be:78:a8:b1:2f:ff:1a:83:d2:12:51:
dc:f6:20:59:16:d2:e5:ae:6f:f8:42:1b:86:ec:07:35:5d:0b:
29:77:16:c9:ed:47:bb:30:93:40:16:aa:46:80:fa:7c:3a:53:
1c:d0:f3:34:bd:73:9d:1a:e2:b9:0c:01:a3:4c:00:61:8d:87:
44:4f:8c:b9:b0:dc:cd:a1:96:8d:f6:3f:9c:40:c0:fe:d1:d1:
59:f5:c4:50:5e:e7:8c:0a:d1:e2:4e:2e:c3:f9:76:98:32:de:
6c:a2:e5:d7:ca:d0:04:ab:a4:f1:35:71:6b:ab:e1:e8:71:ab:
0c:c4:76:b7:d2:fb:76:fd:f0:29:a7:dc:20:51:9c:5a:dd:96:
bc:cb:6c:50:ae:cb:6a:31:fd:d2:9b:c9:cf:1e:b8:ae:39:8b:
4a:2f:1d:e9:2c:70:9d:a2:a5:74:1e:ef:10:77:ce:b3:e8:5e:
00:83:5f:5f:a3:d2:77:b8:57:fd:17:f4:f0:a5:10:c0:7e:fd:
e9:89:6f:b3:9d:96:a1:d3:80:4b:8f:86:bb:2f:d4:c0:c2:12:
4f:44:42:26:58:6e:cb:05:09:bf:9f:f9:4c:fc:8c:91:45:76:
21:84:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:17:27 2025 by rpki-client