Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/244DFAB4EA2B11EF9CD585A1762E951A.roa
File: 244DFAB4EA2B11EF9CD585A1762E951A.roa (raw, json)
Hash identifier: KkuoPtTg/LRKxeXrRWNo5FLYDwcW+JOCPloXRvO5GF8=
Subject key identifier: B0:4C:6F:62:30:58:82:0C:B6:84:61:87:FA:AB:B0:36:19:5F:E8:E6
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 46
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/244DFAB4EA2B11EF9CD585A1762E951A.roa
Signing time: Thu 13 Feb 2025 16:54:09 +0000
ROA not before: Thu 13 Feb 2025 16:54:04 +0000
ROA not after: Sun 31 Dec 2028 16:54:04 +0000
asID: 30985
IP address blocks: 154.118.128.0/18 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 13 16:54:04 2025 GMT
Not After : Dec 31 16:54:04 2028 GMT
Subject: CN=67ae23b0-9dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:de:24:4c:82:8d:33:51:b7:28:4a:be:90:
dd:bd:6d:c7:67:fb:c7:34:f2:b2:52:10:14:63:34:
87:98:e6:00:60:c9:4a:70:d7:ac:cd:cc:25:f7:cd:
b4:0e:ea:28:5d:0f:66:26:6d:06:2c:b8:c1:61:07:
08:15:d3:09:52:71:c3:0e:93:56:e3:9c:ae:d2:d1:
d1:32:69:ea:0a:3d:bf:d2:72:c1:f2:c0:f0:bf:a4:
f9:8a:75:54:23:5f:08:3c:c5:fb:e7:aa:8f:0e:a1:
64:a1:59:a7:52:4b:34:1e:66:2e:11:8d:79:a7:65:
78:61:39:9e:ce:66:10:87:62:4c:7b:41:65:3e:88:
7d:86:04:09:3d:b8:52:cb:33:0a:92:34:53:cf:16:
cd:92:85:a7:66:52:51:f9:98:16:1c:71:0e:34:02:
fe:1e:e4:b9:22:46:ba:e0:57:3b:cc:51:db:ea:63:
43:ba:cc:17:36:21:5b:82:32:59:4f:fe:b2:b5:bb:
3f:94:e8:0c:50:51:5e:a3:89:b9:d9:51:d1:1a:43:
19:f5:58:28:0c:60:c2:fd:80:bd:aa:cf:96:0c:b2:
bd:10:90:f4:7a:4b:9f:b0:01:ab:46:3c:a6:72:18:
8d:37:30:90:50:80:ca:19:33:f4:36:44:96:43:1b:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4C:6F:62:30:58:82:0C:B6:84:61:87:FA:AB:B0:36:19:5F:E8:E6
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/244DFAB4EA2B11EF9CD585A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.118.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:31:46:0c:25:ba:53:a4:d3:16:4a:90:56:cd:33:7a:ad:91:
d2:e3:d2:2e:bb:fd:70:e8:7d:c2:73:05:5d:34:f3:39:a4:db:
ee:5e:49:c6:22:68:12:ba:33:01:d3:b4:b1:3f:54:fb:19:29:
3f:33:0a:bf:90:ee:61:37:a1:83:ee:33:c8:2a:aa:81:9a:75:
9d:04:1d:a1:f0:8e:9c:ca:18:68:17:cb:fb:c3:e6:75:ea:8f:
1d:5f:a9:72:35:8f:5c:8a:3f:a2:d0:6c:51:64:41:99:09:b7:
d2:94:65:b7:14:3d:b5:27:97:86:bf:7c:ea:7f:ff:37:3d:75:
fe:76:b9:67:a5:7a:d7:da:55:ec:79:0a:48:58:69:67:d5:e2:
83:0f:4e:7f:4a:51:35:c3:80:97:39:cb:ab:4f:62:f8:3c:9b:
80:b2:56:00:77:0f:db:c4:fd:89:bd:09:5a:ef:8f:c5:c9:ec:
dd:19:5d:f9:31:a4:7a:bc:ed:cd:9d:66:50:2e:69:91:7b:9c:
15:c2:cf:a9:08:ef:08:bb:7f:d6:11:e4:d6:22:61:aa:59:e1:
a1:9f:ca:1f:2d:83:bc:ce:2a:32:cb:44:b8:07:01:9d:01:42:
70:e1:03:8e:58:c0:0c:8d:ae:14:47:aa:f1:0c:a4:05:9e:89:
9c:26:1e:d2
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBRjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
Q0Q3MkFGMTEwLwYDVQQFEyg3NzA4RTY2RjFDMDdDMUQ3NjcwQUVCREJBRTE4NkRB
NDJCQ0IzMEM3MB4XDTI1MDIxMzE2NTQwNFoXDTI4MTIzMTE2NTQwNFowGDEWMBQG
A1UEAxMNNjdhZTIzYjAtOWRiYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANdt3iRMgo0zUbcoSr6Q3b1tx2f7xzTyslIQFGM0h5jmAGDJSnDXrM3MJffN
tA7qKF0PZiZtBiy4wWEHCBXTCVJxww6TVuOcrtLR0TJp6go9v9JywfLA8L+k+Yp1
VCNfCDzF++eqjw6hZKFZp1JLNB5mLhGNeadleGE5ns5mEIdiTHtBZT6IfYYECT24
UsszCpI0U88WzZKFp2ZSUfmYFhxxDjQC/h7kuSJGuuBXO8xR2+pjQ7rMFzYhW4Iy
WU/+srW7P5ToDFBRXqOJudlR0RpDGfVYKAxgwv2AvarPlgyyvRCQ9HpLn7ABq0Y8
pnIYjTcwkFCAyhkz9DZElkMb0T0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSwTG9i
MFiCDLaEYYf6q7A2GV/o5jAfBgNVHSMEGDAWgBR3COZvHAfB12cK69uuGG2kK8sw
xzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYyRTk1MUEvZHdqbWJ4
d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZHdqbWJ4d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYy
RTk1MUEvMjQ0REZBQjRFQTJCMTFFRjlDRDU4NUExNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBpp2gDANBgkqhkiG9w0BAQsF
AAOCAQEAnDFGDCW6U6TTFkqQVs0zeq2R0uPSLrv9cOh9wnMFXTTzOaTb7l5JxiJo
ErozAdO0sT9U+xkpPzMKv5DuYTehg+4zyCqqgZp1nQQdofCOnMoYaBfL+8PmdeqP
HV+pcjWPXIo/otBsUWRBmQm30pRltxQ9tSeXhr986n//Nz11/na5Z6V619pV7HkK
SFhpZ9Xigw9Of0pRNcOAlznLq09i+DybgLJWAHcP28T9ib0JWu+Pxcns3Rld+TGk
erztzZ1mUC5pkXucFcLPqQjvCLt/1hHk1iJhqlnhoZ/KHy2DvM4qMstEuAcBnQFC
cOEDjljADI2uFEeq8QykBZ6JnCYe0g==
-----END CERTIFICATE-----
Generated at Sat May 10 09:54:09 2025 by rpki-client