Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3EC0608815E311F088A2CB176EB8BCC6.roa
File: 3EC0608815E311F088A2CB176EB8BCC6.roa (raw, json)
Hash identifier: letksf4Ru7RHw6EiIXZTHUoBI7D4n7wUEp04tSPKP/g=
Subject key identifier: AD:0D:DD:30:0E:CD:82:D3:CE:D4:5E:72:DE:A9:D2:88:8E:5D:14:28
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08E9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3EC0608815E311F088A2CB176EB8BCC6.roa
Signing time: Thu 10 Apr 2025 08:10:20 +0000
ROA not before: Thu 10 Apr 2025 08:10:17 +0000
ROA not after: Fri 10 Apr 2026 08:10:17 +0000
asID: 329007
IP address blocks: 196.251.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 14:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 10 08:10:17 2025 GMT
Not After : Apr 10 08:10:17 2026 GMT
Subject: CN=67f77cec-9afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:dd:3e:1a:73:2a:0b:bf:72:43:88:82:a0:
20:ce:07:5f:d5:78:68:59:8d:58:76:49:72:a8:ae:
61:69:16:ae:ce:0d:05:65:4e:30:35:34:7c:50:af:
70:d2:70:45:fe:39:e3:84:ae:ab:d7:e3:82:cf:52:
06:47:db:a7:cf:2c:5c:f3:dc:2b:b1:17:66:3b:0c:
58:76:20:e1:79:3d:63:6b:c8:85:e7:fb:33:44:d4:
c8:e9:79:5c:03:72:79:13:ea:5e:c8:ef:95:3c:82:
5f:43:5f:88:c7:38:0d:8c:9f:58:55:d7:88:f7:f9:
06:ee:f2:8f:f4:ce:32:32:f5:ed:96:15:82:72:3b:
29:51:67:1e:a3:c8:a2:a2:d9:49:80:88:a0:8e:68:
29:3e:b5:67:0a:ee:53:db:30:bd:6c:b2:2b:8c:95:
0f:7d:ac:cb:5a:50:70:50:ee:c7:30:c9:a7:73:0e:
38:46:ed:0a:89:25:1c:13:0f:07:4f:84:42:17:55:
9a:19:96:94:d9:8a:ef:87:e6:ef:d3:48:bc:88:9a:
7b:6c:33:59:56:8c:90:05:f3:9c:8d:37:ae:81:54:
25:a0:b4:3f:0a:87:bc:57:aa:14:79:b8:34:2e:af:
52:67:4c:c3:25:5a:63:93:56:2f:7c:20:1c:27:b0:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:DD:30:0E:CD:82:D3:CE:D4:5E:72:DE:A9:D2:88:8E:5D:14:28
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3EC0608815E311F088A2CB176EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.121.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ba:c4:d0:5f:f9:f7:f9:02:6c:e8:64:35:54:2c:d1:47:f3:
97:09:d1:25:ef:38:be:a8:f3:7e:79:54:ba:a9:52:b1:0d:93:
36:e0:c4:f9:6e:0b:ed:b5:a9:43:e2:65:26:ef:9a:38:a9:9e:
bb:3c:a7:7f:f4:32:84:14:40:56:28:9a:50:29:44:68:2a:e3:
90:55:5a:d5:51:86:95:62:31:83:15:28:63:56:4b:9e:0a:ec:
b0:1a:48:ec:61:68:40:f3:ac:ee:1f:51:f9:19:13:e5:d6:48:
4c:4d:3d:92:8f:48:80:e6:a8:01:e8:af:e5:86:7a:35:44:b3:
94:fd:bd:b1:ed:60:fb:4c:06:3d:f4:5c:be:44:b4:75:72:cf:
61:0b:df:59:f2:84:52:4c:19:99:6c:b9:56:5e:15:ac:f0:6f:
47:d7:b3:f0:76:4a:bc:91:97:50:a6:88:88:b9:40:e1:21:60:
99:3f:1d:63:07:20:1b:5d:fa:58:81:c5:1f:0d:5e:a6:cf:e8:
23:67:80:96:bb:f5:5a:1c:bf:2c:1c:82:9a:81:ee:df:ec:32:
af:9e:b3:4a:4e:6a:ce:36:64:ed:4b:89:88:5a:79:5b:2e:2e:
48:2f:90:bc:2a:89:8d:f7:1d:6b:58:d9:71:38:62:57:40:e3:
ac:9a:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:55:00 2025 by rpki-client