Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/98A8E51C03EF11F0AA6768B1762E951A.roa
File: 98A8E51C03EF11F0AA6768B1762E951A.roa (raw, json)
Hash identifier: FhT0aWmXOR7vzflXaAmC+i44thUUmphpIVzhGTQ7BCk=
Subject key identifier: B8:88:80:6C:73:16:66:69:FC:95:7F:D9:35:75:C7:32:57:75:E7:5E
Certificate issuer: /CN=F36FDD86AF/serialNumber=107420265A86C5BE4810B597E4D4FFCD2E0F1790
Certificate serial: 09
Authority key identifier: 10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/98A8E51C03EF11F0AA6768B1762E951A.roa
Signing time: Tue 18 Mar 2025 11:53:24 +0000
ROA not before: Tue 18 Mar 2025 11:53:20 +0000
ROA not after: Sun 18 Mar 2035 11:53:20 +0000
asID: 37282
IP address blocks: 196.43.251.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 18 Mar 2025 13:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FDD86AF
Validity
Not Before: Mar 18 11:53:20 2025 GMT
Not After : Mar 18 11:53:20 2035 GMT
Subject: CN=67d95eb4-3f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:c5:69:d1:56:a5:c1:27:e4:8a:dd:ba:66:
28:0a:eb:e6:f5:1f:c3:d9:cd:fe:93:1a:b6:36:9a:
2e:c6:12:18:96:ec:5b:0f:62:14:f0:fb:0f:99:01:
1c:c6:bd:2f:94:b1:30:01:81:82:be:ea:1a:a3:83:
fd:3a:62:61:ab:98:6e:4f:4e:c7:27:49:d6:8f:a9:
2a:92:9c:c3:98:9d:6d:16:09:4b:ab:95:4e:7a:7c:
17:1c:b2:11:22:5a:a2:bc:9a:97:5c:ee:61:de:cf:
97:29:ba:89:79:82:55:0e:da:29:46:ce:58:e8:1d:
f9:dc:32:a8:5b:35:ee:60:2f:7c:6b:8f:fe:2b:0a:
04:64:02:78:ea:c9:2b:9f:e4:ab:04:17:7e:79:ca:
7b:4b:c8:10:67:17:9e:2a:72:a4:fc:0b:d0:09:52:
72:19:dc:07:32:b7:10:e8:a4:55:85:e6:1b:c8:b8:
17:44:33:73:79:69:be:22:84:6a:d9:dd:64:68:43:
7d:f9:c7:37:d3:78:7f:d9:d5:59:b8:33:af:3e:3e:
a8:68:0d:1e:2f:e4:1e:32:46:da:32:ce:59:97:27:
4a:cc:9e:cf:bf:c1:f0:46:ee:d9:a5:0f:e7:ab:04:
e7:77:44:0c:25:1c:84:98:00:80:83:ec:51:8e:b4:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:88:80:6C:73:16:66:69:FC:95:7F:D9:35:75:C7:32:57:75:E7:5E
X509v3 Authority Key Identifier:
keyid:10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/98A8E51C03EF11F0AA6768B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9b:78:d0:c9:5a:6b:0b:3f:78:1a:c2:80:3b:2b:32:a4:88:
d6:ae:93:0f:6f:fc:bb:5f:4e:33:7a:51:ee:9f:65:64:5b:f1:
69:c0:06:9a:60:75:c8:e3:07:e7:da:77:72:72:07:75:50:d9:
3e:23:37:16:b3:bb:fd:8b:52:d2:72:d3:be:75:e1:14:09:b7:
64:b2:cb:39:10:39:b5:81:3e:21:ca:1b:5e:43:53:1a:a9:d6:
fc:0e:23:75:94:aa:9a:22:28:9d:70:92:a2:6b:a3:e8:62:87:
41:5a:90:e8:96:32:75:9b:c6:7d:1d:91:78:07:1e:a7:19:b2:
8e:96:ff:6c:d9:a3:cc:f5:43:d4:a3:49:97:4f:0d:50:5b:2d:
65:82:43:62:4b:b0:0b:5f:0f:ad:51:a0:cc:6f:68:35:41:f5:
5f:46:6c:9b:47:55:02:4e:d0:bf:81:29:9a:ca:21:84:b3:08:
c2:28:50:4a:b9:64:29:05:a5:d4:80:4f:78:ac:1e:fb:9e:5c:
cf:55:b2:3b:5c:fa:ea:6f:a1:93:d6:1f:e5:b3:9f:60:7d:25:
ef:b3:07:06:82:26:6f:1a:60:8d:c5:66:61:a0:12:ac:d0:f0:
e3:66:9a:e2:8d:e5:95:8f:f6:d7:34:de:3d:55:f7:39:4c:81:
0f:fc:2e:ad
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
REQ4NkFGMTEwLwYDVQQFEygxMDc0MjAyNjVBODZDNUJFNDgxMEI1OTdFNEQ0RkZD
RDJFMEYxNzkwMB4XDTI1MDMxODExNTMyMFoXDTM1MDMxODExNTMyMFowGDEWMBQG
A1UEAxMNNjdkOTVlYjQtM2YyZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAML4xWnRVqXBJ+SK3bpmKArr5vUfw9nN/pMatjaaLsYSGJbsWw9iFPD7D5kB
HMa9L5SxMAGBgr7qGqOD/TpiYauYbk9OxydJ1o+pKpKcw5idbRYJS6uVTnp8Fxyy
ESJaoryal1zuYd7Plym6iXmCVQ7aKUbOWOgd+dwyqFs17mAvfGuP/isKBGQCeOrJ
K5/kqwQXfnnKe0vIEGcXnipypPwL0AlSchncBzK3EOikVYXmG8i4F0Qzc3lpviKE
atndZGhDffnHN9N4f9nVWbgzrz4+qGgNHi/kHjJG2jLOWZcnSsyez7/B8Ebu2aUP
56sE53dEDCUchJgAgIPsUY60tKMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBS4iIBs
cxZmafyVf9k1dccyV3XnXjAfBgNVHSMEGDAWgBQQdCAmWobFvkgQtZfk1P/NLg8X
kDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkREODYvMzRBOEZBRTgwMzNCMTFGMEFGRjZERUIzNzYyRTk1MUEvRUhRZ0ps
cUd4YjVJRUxXWDVOVF96UzRQRjVBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRUhRZ0pscUd4YjVJRUxXWDVOVF96UzRQRjVBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkREODYvMzRBOEZBRTgwMzNCMTFGMEFGRjZERUIzNzYy
RTk1MUEvOThBOEU1MUMwM0VGMTFGMEFBNjc2OEIxNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMQr+zANBgkqhkiG9w0BAQsF
AAOCAQEALZt40Mlaaws/eBrCgDsrMqSI1q6TD2/8u19OM3pR7p9lZFvxacAGmmB1
yOMH59p3cnIHdVDZPiM3FrO7/YtS0nLTvnXhFAm3ZLLLORA5tYE+IcobXkNTGqnW
/A4jdZSqmiIonXCSomuj6GKHQVqQ6JYydZvGfR2ReAcepxmyjpb/bNmjzPVD1KNJ
l08NUFstZYJDYkuwC18PrVGgzG9oNUH1X0Zsm0dVAk7Qv4EpmsohhLMIwihQSrlk
KQWl1IBPeKwe+55cz1WyO1z66m+hk9Yf5bOfYH0l77MHBoImbxpgjcVmYaASrNDw
42aa4o3llY/21zTePVX3OUyBD/wurQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:42:16 2025 by rpki-client