Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/5DA1064CEA2811EFBC6A1C90762E951A.roa
File: 5DA1064CEA2811EFBC6A1C90762E951A.roa (raw, json)
Hash identifier: P90cbwXlUrLV8+6V8el3PJResNw+h/A5MMMgi1vS9VQ=
Subject key identifier: 78:32:C9:0F:BB:68:D5:94:95:3E:DF:5B:DA:CF:D8:19:46:B9:0F:40
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 3E
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/5DA1064CEA2811EFBC6A1C90762E951A.roa
Signing time: Thu 13 Feb 2025 16:34:16 +0000
ROA not before: Thu 13 Feb 2025 16:34:12 +0000
ROA not after: Sun 31 Dec 2028 16:34:12 +0000
asID: 30985
IP address blocks: 41.73.96.0/19 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 13 16:34:12 2025 GMT
Not After : Dec 31 16:34:12 2028 GMT
Subject: CN=67ae1f08-3d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:e2:46:60:97:92:58:4d:42:54:d4:3a:6a:
db:79:b0:5c:91:65:8c:00:d5:31:1f:d7:42:b6:4c:
b6:b6:02:b2:34:32:93:71:c3:7c:de:4e:af:43:ec:
fc:06:e6:3c:7f:81:e7:a2:e1:ae:68:36:58:16:65:
17:66:12:2c:80:a5:7c:7b:c0:af:20:fd:cd:ae:df:
2e:95:7f:78:a3:8f:3c:23:1c:d4:d2:a0:6c:4f:31:
45:70:0f:50:7c:f1:ec:5a:ba:99:bc:98:3a:55:5e:
fe:8c:45:7a:99:7c:30:5b:7c:e7:9c:32:03:ec:21:
ec:29:91:cb:6b:0e:fd:4b:79:fc:31:49:3f:ef:9f:
dd:5d:f4:55:af:eb:04:60:12:0f:55:5a:eb:60:b3:
56:ee:82:bb:2f:49:fd:f9:f9:df:0e:8d:ad:01:78:
9a:61:46:b8:aa:51:c3:d4:9d:dc:26:05:dc:57:a8:
92:03:90:c6:3c:f3:6e:01:14:47:3c:35:e3:03:3a:
be:72:6a:39:20:b2:35:5a:34:5a:66:64:cb:c1:5c:
fe:4b:fc:81:c8:74:43:77:c9:0c:d7:dc:30:d8:6c:
04:f3:d0:9d:2e:7b:98:eb:fb:5b:d3:cb:c5:28:0c:
b2:a2:08:1a:58:6f:a2:d4:a6:a3:7f:2e:ee:8e:e8:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:32:C9:0F:BB:68:D5:94:95:3E:DF:5B:DA:CF:D8:19:46:B9:0F:40
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/5DA1064CEA2811EFBC6A1C90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.96.0/19
Signature Algorithm: sha256WithRSAEncryption
41:1c:f8:02:2d:90:d1:fe:14:9b:51:fd:c6:99:b7:65:43:1e:
e6:bb:74:55:8b:97:bc:51:13:00:dc:f9:c3:c9:bf:a8:1d:2b:
2b:66:b9:f5:ea:1b:f4:cd:88:6e:c1:81:97:7b:c4:1e:0d:0b:
3a:25:31:1d:7e:e8:1c:61:b9:53:24:6d:67:13:05:25:d1:38:
92:b1:26:f6:d9:b9:60:97:e3:71:29:2f:6b:7b:83:3e:f9:8c:
dd:15:97:78:30:73:e8:fb:d3:12:93:53:e4:a2:e9:85:83:92:
f5:73:0e:90:6c:b5:11:76:64:5a:09:9b:98:fb:8d:f6:9a:f4:
ac:3d:72:76:a9:2e:a1:9c:62:87:17:7e:6f:dc:bd:7f:31:42:
02:3c:cf:41:b8:00:66:87:bb:2f:61:42:c2:f8:83:2d:44:d1:
80:cf:cd:1a:04:7f:14:f3:0b:49:75:35:dd:28:58:e6:c9:21:
9f:25:c0:27:dc:fd:24:20:60:b9:a4:2f:07:c3:2e:76:3b:89:
61:1f:ce:60:2a:56:5e:aa:8b:54:59:d9:90:f8:72:72:eb:b7:
34:c0:2d:b2:14:80:0d:98:da:dc:a9:37:c7:92:69:e0:a8:8e:
4c:27:44:d4:29:43:d0:97:ba:c7:2c:3c:37:5a:1e:bc:81:10:
0a:25:f3:fe
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBPjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
Q0Q3MkFGMTEwLwYDVQQFEyg3NzA4RTY2RjFDMDdDMUQ3NjcwQUVCREJBRTE4NkRB
NDJCQ0IzMEM3MB4XDTI1MDIxMzE2MzQxMloXDTI4MTIzMTE2MzQxMlowGDEWMBQG
A1UEAxMNNjdhZTFmMDgtM2Q5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMhI4kZgl5JYTUJU1Dpq23mwXJFljADVMR/XQrZMtrYCsjQyk3HDfN5Or0Ps
/AbmPH+B56Lhrmg2WBZlF2YSLIClfHvAryD9za7fLpV/eKOPPCMc1NKgbE8xRXAP
UHzx7Fq6mbyYOlVe/oxFepl8MFt855wyA+wh7CmRy2sO/Ut5/DFJP++f3V30Va/r
BGASD1Va62CzVu6Cuy9J/fn53w6NrQF4mmFGuKpRw9Sd3CYF3FeokgOQxjzzbgEU
Rzw14wM6vnJqOSCyNVo0WmZky8Fc/kv8gch0Q3fJDNfcMNhsBPPQnS57mOv7W9PL
xSgMsqIIGlhvotSmo38u7o7ouQcCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBR4MskP
u2jVlJU+31vaz9gZRrkPQDAfBgNVHSMEGDAWgBR3COZvHAfB12cK69uuGG2kK8sw
xzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYyRTk1MUEvZHdqbWJ4
d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZHdqbWJ4d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYy
RTk1MUEvNURBMTA2NENFQTI4MTFFRkJDNkExQzkwNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBSlJYDANBgkqhkiG9w0BAQsF
AAOCAQEAQRz4Ai2Q0f4Um1H9xpm3ZUMe5rt0VYuXvFETANz5w8m/qB0rK2a59eob
9M2IbsGBl3vEHg0LOiUxHX7oHGG5UyRtZxMFJdE4krEm9tm5YJfjcSkva3uDPvmM
3RWXeDBz6PvTEpNT5KLphYOS9XMOkGy1EXZkWgmbmPuN9pr0rD1ydqkuoZxihxd+
b9y9fzFCAjzPQbgAZoe7L2FCwviDLUTRgM/NGgR/FPMLSXU13ShY5skhnyXAJ9z9
JCBguaQvB8MudjuJYR/OYCpWXqqLVFnZkPhycuu3NMAtshSADZja3Kk3x5Jp4KiO
TCdE1ClD0Je6xyw8N1oevIEQCiXz/g==
-----END CERTIFICATE-----
Generated at Sun May 11 02:14:01 2025 by rpki-client