Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9A133124138411F0BD52EDB4762E951A.roa
File: 9A133124138411F0BD52EDB4762E951A.roa (raw, json)
Hash identifier: wWHOfSvJxCFt8bJ+waRZZrPz3+hXnbWxiClHTWBCeOw=
Subject key identifier: A6:92:23:CB:AF:4A:6F:BD:40:BF:CA:44:AA:64:DF:57:92:5C:ED:26
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08D6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9A133124138411F0BD52EDB4762E951A.roa
Signing time: Mon 07 Apr 2025 07:47:49 +0000
ROA not before: Mon 07 Apr 2025 07:47:45 +0000
ROA not after: Tue 10 Feb 2026 07:47:45 +0000
asID: 329007
IP address blocks: 196.251.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 11:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 7 07:47:45 2025 GMT
Not After : Feb 10 07:47:45 2026 GMT
Subject: CN=67f38325-39bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:df:d7:df:49:bf:37:22:e0:b7:e4:38:51:
cc:60:29:76:6b:ff:82:12:7d:7e:e4:9d:c3:14:b8:
29:b5:09:78:11:50:81:d5:6b:b2:76:73:91:2e:da:
38:b2:9f:25:ea:46:32:9f:38:a6:df:99:58:99:c9:
bc:1a:1e:dc:b7:e7:2c:11:0b:6a:9c:79:3c:9a:29:
48:34:e0:ba:81:f4:18:10:6e:55:dc:74:69:5a:85:
3a:ca:09:a3:99:4f:79:2c:16:98:31:62:ef:9a:99:
bc:34:50:bc:32:c8:26:d7:47:42:17:32:dc:10:be:
59:4c:bb:83:f0:07:79:72:a2:24:ff:19:ed:4b:03:
b0:8e:5a:1a:54:a4:d7:3c:df:d0:e7:93:97:ae:0b:
89:a8:48:f2:19:d6:eb:0d:72:96:af:c5:a8:f8:3b:
0d:c8:30:15:0e:4c:a8:77:04:11:79:66:d9:3b:be:
98:c7:b5:c5:e9:43:9e:c6:c8:19:05:6f:4c:76:65:
b8:b9:d2:e9:65:c9:11:80:4c:ff:41:1a:c6:5b:bd:
f6:23:cc:ed:ff:fe:2f:de:89:d9:45:05:cc:32:bc:
c6:57:73:3b:90:7e:50:bc:cc:e0:15:d5:18:f9:04:
b4:ee:ad:42:ca:68:af:2f:e0:76:0c:d8:c6:d2:e3:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:92:23:CB:AF:4A:6F:BD:40:BF:CA:44:AA:64:DF:57:92:5C:ED:26
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9A133124138411F0BD52EDB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.104.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4f:5e:13:54:df:57:4d:2b:4a:29:ef:83:4d:91:f7:f7:73:
2d:de:35:30:a1:6e:08:7b:7d:5c:a6:3c:d8:96:04:60:5a:1a:
d4:f1:99:15:2d:d3:c4:57:0b:67:9e:da:b0:fd:b4:39:09:81:
81:c9:ab:fe:83:6a:6d:94:d0:d5:34:89:73:bf:c5:9d:23:00:
c6:9f:31:99:f5:48:77:9a:17:55:f7:f5:75:3c:9a:24:f2:0e:
96:28:74:81:74:e3:f9:4c:36:6e:dc:8e:f5:33:d5:50:83:5e:
f4:d2:f5:c8:d0:39:42:4e:36:df:93:fc:aa:54:bb:ec:30:33:
ba:65:70:19:a9:06:ed:27:2c:de:c6:05:3c:f4:65:9f:ea:c1:
f9:25:5d:84:69:bd:10:93:0d:b7:3b:69:d3:1c:95:91:1e:6e:
5a:1a:91:4b:1a:07:5d:b0:e6:a4:eb:85:58:83:8b:16:d9:40:
ee:9f:db:e5:e4:61:9f:ed:da:04:d1:fe:89:f4:ab:65:13:e8:
3a:6f:94:60:57:b1:18:37:57:de:44:3f:61:55:95:22:10:f5:
1f:8b:f3:60:6a:43:27:35:b6:76:4a:b7:ed:12:2d:8b:a8:07:
cb:8f:ed:97:d8:5a:8a:01:19:21:9d:64:c8:6e:98:91:6e:3c:
16:02:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:05:28 2025 by rpki-client