Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/C896EB9803EF11F0BF7708B3762E951A.roa
File: C896EB9803EF11F0BF7708B3762E951A.roa (raw, json)
Hash identifier: /Hy/ZaDy6F6ZyOBYssfhXkxt+wbXFOAyZxbXvMjAcaY=
Subject key identifier: 6C:A5:0D:E1:42:8D:CC:0B:17:EE:A8:3B:58:70:B0:6A:85:FB:86:84
Certificate issuer: /CN=F36FDD86AF/serialNumber=107420265A86C5BE4810B597E4D4FFCD2E0F1790
Certificate serial: 0B
Authority key identifier: 10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/C896EB9803EF11F0BF7708B3762E951A.roa
Signing time: Tue 18 Mar 2025 11:54:45 +0000
ROA not before: Tue 18 Mar 2025 11:54:41 +0000
ROA not after: Sun 18 Mar 2035 11:54:41 +0000
asID: 29465
IP address blocks: 196.43.251.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 18 Mar 2025 13:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FDD86AF
Validity
Not Before: Mar 18 11:54:41 2025 GMT
Not After : Mar 18 11:54:41 2035 GMT
Subject: CN=67d95f05-868d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:05:2c:b9:b7:2d:fe:fa:50:7d:47:b2:57:
ab:1c:f8:ae:93:30:e8:c6:76:60:97:1d:42:bc:bf:
7b:a0:3d:07:bd:4f:1c:cc:8e:3a:76:ad:89:5f:17:
63:9d:f2:b1:0c:2b:2e:3d:f2:01:f2:ce:5b:28:a6:
c0:c7:f6:d7:ab:13:1f:42:bd:1a:d5:1b:b3:3f:a6:
35:e6:46:02:11:5f:e9:7a:d0:04:00:d6:41:40:ba:
b3:12:40:3c:2a:b8:f2:81:c5:23:97:cc:59:ef:5a:
95:5c:66:89:f6:ef:d0:1d:ee:68:40:54:64:bf:b0:
35:99:aa:83:e8:cf:85:9c:76:93:0a:7f:af:c9:b6:
b2:a0:ed:af:bc:a8:a1:49:89:e6:0b:e1:f3:fb:7d:
cb:c8:b9:f1:a2:bd:64:c8:14:a7:99:b5:f6:76:d1:
3a:07:41:52:6f:92:12:61:08:c7:a2:ec:60:14:70:
da:db:d5:64:c4:4d:b0:16:d5:68:67:38:7e:9f:a8:
87:2f:52:bc:dc:f9:87:d8:d8:cc:43:9d:68:eb:0a:
41:e8:2b:a9:e0:64:13:2f:70:75:e9:e1:b3:f9:aa:
78:1d:3d:9a:64:cc:0a:11:3c:df:b2:7d:88:ef:e3:
9b:b2:4c:b3:8b:09:36:3f:9a:c5:76:fe:f8:1c:9c:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A5:0D:E1:42:8D:CC:0B:17:EE:A8:3B:58:70:B0:6A:85:FB:86:84
X509v3 Authority Key Identifier:
keyid:10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/C896EB9803EF11F0BF7708B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.251.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b9:b5:8b:ef:75:08:cf:9e:c2:e6:15:69:4c:cb:7a:34:36:
88:81:11:9e:d6:e5:98:af:2b:67:35:e9:49:8d:43:34:af:b6:
a1:e3:b7:c0:96:56:2c:ae:7d:33:b3:34:35:ec:95:5f:06:82:
5d:3c:cf:80:8c:d9:04:db:27:69:a6:01:70:a3:39:0b:1d:fc:
ca:2f:c2:96:d1:b6:97:fd:9f:bf:18:40:dd:f5:6d:b2:a6:a4:
ea:c4:df:2d:28:a3:c6:ec:da:20:e2:5a:a7:d2:f4:de:89:58:
79:ce:27:a4:18:6f:a6:17:4e:30:f3:a1:40:9e:ee:3f:73:cd:
98:18:37:79:49:17:40:f1:a4:d0:57:9f:07:c2:85:64:60:70:
2b:e0:8d:4f:4c:d5:88:13:e8:0f:9c:ca:63:76:bd:6f:c1:95:
7b:e8:e7:7c:36:dd:a7:02:08:89:5b:84:e2:5f:82:71:f8:99:
f9:fe:d8:47:1e:c7:9a:9a:7f:84:7a:9b:a5:f2:2e:82:57:14:
0d:30:24:ac:6c:59:8d:90:30:82:d2:cb:8c:e9:cd:d0:98:d9:
e9:01:ca:2d:64:bc:db:4b:b2:25:db:8f:10:ac:56:7d:7c:bf:
72:01:a7:f9:bc:03:f4:ba:21:03:b7:ea:7a:f0:6b:6c:89:95:
1f:b3:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:31 2025 by rpki-client