Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/93A041F6E7C411EF85188A82762E951A.roa
File: 93A041F6E7C411EF85188A82762E951A.roa (raw, json)
Hash identifier: DA19qwB5cMNTSLk846rvTS3Stz1Kk0xVFy8wsyLHKxU=
Subject key identifier: 6D:45:06:FF:5E:95:F8:80:EE:DD:18:A7:93:8F:12:DC:DA:39:7D:81
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 23
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/93A041F6E7C411EF85188A82762E951A.roa
Signing time: Mon 10 Feb 2025 15:34:55 +0000
ROA not before: Mon 10 Feb 2025 15:34:51 +0000
ROA not after: Sun 31 Dec 2028 15:34:51 +0000
asID: 30985
IP address blocks: 2001:42c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 15 Feb 2025 12:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 10 15:34:51 2025 GMT
Not After : Dec 31 15:34:51 2028 GMT
Subject: CN=67aa1c9f-a40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:c5:03:2e:3f:b0:fc:e5:e2:f8:c6:64:3c:
25:b7:fd:05:b0:f8:af:e2:67:fa:0c:b2:3d:b3:24:
46:70:c0:58:72:99:0f:1d:2c:a5:0e:83:6c:08:03:
d2:ab:83:90:8e:ed:1e:54:2d:ab:6d:8d:89:e9:9f:
55:0c:4d:cb:95:26:d7:0a:30:12:76:40:41:25:df:
7a:ad:ca:56:3d:96:f8:18:5a:d9:c3:b3:7c:ab:79:
78:36:d3:80:22:9e:61:49:bb:46:3f:0e:79:1b:18:
24:0c:06:57:7f:35:43:2e:29:53:e4:69:0a:e9:3a:
5c:d5:97:70:d1:de:9b:f2:71:1e:cf:40:9f:da:59:
6d:64:b8:d4:7b:40:cb:f6:85:2b:8c:e4:89:21:4b:
a8:67:79:95:b2:f1:66:b8:44:4b:24:ba:3a:f9:9e:
93:18:79:2d:70:5a:d1:b0:23:67:cb:8d:2e:bc:28:
6e:14:2e:ec:ad:a2:ee:9c:c6:f3:64:70:84:e6:2c:
ca:e0:1f:e5:5e:08:03:49:fd:34:21:b6:20:22:ab:
d4:56:60:9a:0f:95:99:e8:34:17:9c:8e:68:fb:80:
22:14:66:13:7b:0d:81:7a:90:b8:8c:27:b5:30:ba:
ee:f1:5e:45:cb:e7:4a:5f:e6:16:2f:52:a0:2c:4b:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:45:06:FF:5E:95:F8:80:EE:DD:18:A7:93:8F:12:DC:DA:39:7D:81
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/93A041F6E7C411EF85188A82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:42c0::/32
Signature Algorithm: sha256WithRSAEncryption
08:f2:d7:7b:9e:6a:08:67:1b:43:3e:ae:c2:6a:e2:24:a9:a5:
08:cb:4b:66:85:93:3a:10:a8:f9:26:29:60:37:43:2f:f9:8f:
1c:29:bc:16:d3:65:72:6a:a5:f0:0b:6e:2b:9b:9f:e0:53:90:
fc:e2:66:5b:12:30:3e:87:c2:ae:11:e6:98:3e:77:d8:9e:a7:
26:a6:b2:f3:04:84:5c:c9:cc:17:cd:2f:8c:d6:38:a6:f3:eb:
24:28:79:4c:3d:38:cf:0a:d4:92:68:82:bc:b9:86:03:8e:8e:
89:46:1a:cc:7f:e5:57:41:86:23:ef:9b:70:33:9c:8a:35:0e:
28:59:4e:4a:c5:fb:2b:ed:3d:3e:0b:6b:db:ad:5c:6e:97:b7:
fd:db:76:cd:ca:35:01:bb:8f:01:cb:9d:7e:62:88:70:e9:79:
f8:19:42:91:88:92:90:4b:47:ef:a0:c8:fe:3e:38:93:e8:ed:
4e:27:bf:da:af:9c:6d:bf:24:a3:d9:35:03:30:f8:d2:d0:02:
f4:bc:26:66:12:39:a6:c6:26:25:16:d6:98:45:f0:6d:80:ee:
77:e7:0b:f9:6a:56:09:d8:38:5a:e3:d1:55:c0:af:f0:d8:72:
ff:46:49:6d:9b:7b:f4:c0:c9:a3:b6:0f:43:50:cb:f2:28:05:
0f:12:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:03:42 2025 by rpki-client