Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4B07A78C138311F0AB45B8AC762E951A.roa
File: 4B07A78C138311F0AB45B8AC762E951A.roa (raw, json)
Hash identifier: enIDyaZIXxhDemShGqFRV/fxMD7IG/kh9vamZlwB5y4=
Subject key identifier: 12:9C:CB:04:C8:84:15:D8:5C:68:FC:1D:D0:D5:5D:1B:5A:74:5D:4B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08C8
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4B07A78C138311F0AB45B8AC762E951A.roa
Signing time: Mon 07 Apr 2025 07:38:27 +0000
ROA not before: Mon 07 Apr 2025 07:38:23 +0000
ROA not after: Thu 01 Jan 2026 07:38:23 +0000
asID: 329007
IP address blocks: 196.251.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 08:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 7 07:38:23 2025 GMT
Not After : Jan 1 07:38:23 2026 GMT
Subject: CN=67f380f3-0429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:6a:8a:ff:f2:a5:e5:ce:64:88:a6:e1:0f:
8e:b5:c9:a5:26:9f:f4:ed:16:99:4c:e0:4b:7d:8a:
d6:0c:fd:49:33:1c:9c:a3:fe:12:c6:c9:9d:94:30:
a3:84:5b:bd:48:eb:28:5a:72:01:bf:a8:a0:5f:09:
b8:16:ea:d2:47:ca:cf:68:c4:db:da:0c:87:c2:74:
2d:85:15:ba:f0:42:ab:fd:ab:91:0f:64:6f:40:ad:
23:29:92:f5:78:e2:f0:40:e2:c3:e5:1e:db:97:fc:
8b:cf:0a:b5:db:38:71:e0:fe:09:9f:32:35:40:65:
55:be:ef:f9:60:8b:2d:03:ac:93:3f:ac:44:08:5c:
be:aa:c9:09:e7:1e:94:79:92:8f:95:60:b8:59:6a:
af:a2:8c:c2:9f:75:e3:43:10:12:8c:9f:29:5d:6a:
68:1a:ff:c3:4c:f2:ff:ec:0f:13:14:78:24:17:76:
3a:10:4c:76:46:89:73:60:00:35:b5:6e:50:8f:92:
2d:e7:3f:e9:f2:23:59:27:80:25:4c:ce:36:30:12:
3d:eb:30:63:d9:b2:08:c6:72:3d:c1:01:46:d6:1a:
13:b5:8e:e6:1b:36:00:1a:e7:b2:4d:81:ca:77:05:
34:fa:14:11:ca:9c:9d:bd:00:96:a3:ee:f4:0f:b0:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:CB:04:C8:84:15:D8:5C:68:FC:1D:D0:D5:5D:1B:5A:74:5D:4B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4B07A78C138311F0AB45B8AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:1f:0a:4e:e1:e6:e7:02:ce:c5:10:5b:bd:d2:29:cb:d2:b2:
83:f2:53:0a:82:83:a4:1a:4c:ea:16:02:84:ec:b8:ff:21:c8:
9e:2c:48:2d:0c:fc:c7:cc:0f:c9:6f:f5:ab:df:01:d7:01:46:
47:92:12:d0:33:ac:0e:c0:08:da:fb:ce:05:c1:51:28:b5:38:
da:10:2b:7f:4c:73:99:54:75:9b:4b:fd:50:5d:36:9e:ad:e8:
8f:a9:01:a1:4c:fa:57:0b:a0:7b:3e:18:2f:da:b1:82:1e:a5:
0b:dc:f7:54:e7:a6:4a:06:36:cd:b9:be:2b:f3:57:9f:b9:7c:
ec:09:a4:85:fb:75:e8:cf:78:3b:7b:16:0f:dd:81:7e:ba:09:
8c:7c:3b:cc:cf:2a:21:63:28:5c:09:cf:7c:a9:10:cc:45:1a:
ab:0a:af:ab:c1:eb:c7:16:50:31:1c:56:1a:23:3b:e7:d9:00:
07:31:56:30:2e:48:7a:e8:7c:53:16:82:24:f4:2c:cf:85:94:
b4:79:4b:bb:3f:59:62:5d:21:2b:99:7d:3e:d3:08:07:60:8c:
2f:b5:ba:d4:02:49:f8:72:ae:e0:15:ad:57:15:08:5f:f3:ec:
46:33:bd:bf:8e:f4:46:5c:c8:d9:14:a8:5d:1c:10:d7:8a:0c:
ba:cc:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:44:01 2025 by rpki-client