Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/D4BBC836C70811EFB86EC5AD762E951A.roa
File: D4BBC836C70811EFB86EC5AD762E951A.roa (raw, json)
Hash identifier: CN+vr2vFNIt6TUndibf2BZ6IxjCTQB/PuBQfPG+hXTw=
Subject key identifier: F8:A0:4C:09:67:56:86:C7:A9:82:96:60:61:87:DD:00:B1:EC:67:D4
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 04ED
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/D4BBC836C70811EFB86EC5AD762E951A.roa
Signing time: Mon 30 Dec 2024 23:50:21 +0000
ROA not before: Tue 31 Dec 2024 23:50:18 +0000
ROA not after: Thu 31 Dec 2026 23:50:18 +0000
asID: 21003
IP address blocks: 2c0f:fb10::/32 maxlen: 32
2c0f:fb10::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF
Validity
Not Before: Dec 31 23:50:18 2024 GMT
Not After : Dec 31 23:50:18 2026 GMT
Subject: CN=677331bd-0de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:67:4e:fe:c2:cb:a9:2f:08:32:e6:70:e3:
90:82:e4:91:1e:5e:1a:89:e0:8c:ec:79:15:c3:cb:
de:9f:92:cb:ca:f1:fd:c7:ef:5f:e6:6e:12:73:c4:
5d:35:93:b8:93:70:ba:70:6a:e7:a6:cd:ce:2f:17:
25:98:4a:47:6b:c3:69:3f:81:70:58:51:0e:e2:76:
44:e2:2e:d2:31:ac:a2:29:14:ae:70:87:77:c1:f9:
36:8b:c6:7e:84:9d:bd:5f:57:df:a6:96:af:b3:ef:
5d:72:39:53:82:d5:cb:ad:4d:40:e5:71:72:c6:48:
75:18:97:45:d0:94:20:f4:ed:53:7f:d9:a0:08:c4:
a6:74:7d:1e:a7:85:f1:a8:53:97:73:cf:a5:ca:17:
e5:7a:3d:02:a3:11:74:3f:02:8f:17:9d:cb:94:19:
ca:ef:b1:19:f8:c7:c0:33:2a:22:19:b9:af:d7:31:
36:27:d1:a4:63:82:ce:49:43:47:9a:08:44:b2:3d:
e4:42:f1:5b:0e:70:ee:81:c0:fa:1d:0b:b1:ad:04:
cf:e7:78:00:00:5d:36:45:33:d2:e7:08:e1:9a:d8:
78:1a:8c:92:50:69:b0:bc:43:e5:71:da:3d:e6:71:
79:40:a7:77:a3:32:6c:4a:b6:e6:da:1e:82:70:84:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A0:4C:09:67:56:86:C7:A9:82:96:60:61:87:DD:00:B1:EC:67:D4
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/D4BBC836C70811EFB86EC5AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb10::/32
Signature Algorithm: sha256WithRSAEncryption
33:05:9d:7b:fd:5d:a4:f9:f9:02:a2:94:64:b6:d3:f0:a3:45:
43:a9:be:f1:c5:43:fe:57:21:6b:16:fe:81:50:e9:6e:17:b4:
65:5d:12:95:56:c5:99:da:4e:4f:2f:1a:a9:b3:73:3b:82:ce:
31:93:c7:c5:e2:bf:b7:a3:01:d9:c8:3e:06:58:06:38:41:39:
1c:32:62:cc:75:dc:de:36:bd:d8:3c:59:b4:7f:fe:1e:aa:53:
92:e2:72:f6:83:a9:c5:a6:ba:ec:97:20:21:33:ec:f7:ef:a1:
dc:67:5d:20:7a:85:94:af:87:6f:d8:8f:e8:1b:cd:76:23:2b:
1c:df:55:9b:ca:da:cd:af:3c:cf:0b:81:7b:e2:7e:82:50:2d:
6f:02:bc:82:6f:7e:26:18:b6:2e:d2:5f:73:dd:6f:37:e2:02:
6f:86:85:16:c8:9e:30:75:e1:82:a0:84:85:f8:fd:53:4c:71:
8f:f7:59:61:e0:20:a0:ea:59:c5:33:ac:7e:65:b2:aa:d9:2a:
c7:ad:f0:b7:6b:60:26:10:f7:1b:ce:9e:1a:e4:2a:7b:27:cd:
99:38:be:49:03:2d:81:b7:19:94:a6:4e:4d:02:5e:1e:dd:ba:
b5:80:3f:ce:bb:bd:f5:f0:a8:54:4a:5b:a2:f7:8a:e9:cc:0b:
0f:a9:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:43:50 2025 by rpki-client