Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/D0A8DC4EE92111EF91530F6A762E951A.roa
File: D0A8DC4EE92111EF91530F6A762E951A.roa (raw, json)
Hash identifier: kYD6rL1NfBtsVkI8Wxxeq1HT9OtKLopcjN4d9+iXpS0=
Subject key identifier: 36:28:CD:2E:10:94:7A:9F:42:78:1E:FE:AA:2D:CA:98:ED:FF:EC:93
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 37
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/D0A8DC4EE92111EF91530F6A762E951A.roa
Signing time: Wed 12 Feb 2025 09:14:52 +0000
ROA not before: Wed 12 Feb 2025 09:14:48 +0000
ROA not after: Sun 31 Dec 2028 09:14:48 +0000
asID: 30985
IP address blocks: 41.221.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 12 09:14:48 2025 GMT
Not After : Dec 31 09:14:48 2028 GMT
Subject: CN=67ac668b-0fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:40:ec:79:61:71:22:ca:1f:fc:49:5c:45:
50:38:bc:0d:c5:e9:68:33:d9:04:fa:15:f1:56:c0:
43:fe:6c:47:48:03:c1:3d:59:ba:13:61:a9:0f:bc:
74:49:8e:8f:16:8f:c5:b6:ee:45:ac:72:a8:00:c4:
63:b0:f5:53:80:27:34:d1:5a:eb:fb:65:6d:60:5b:
af:f5:9b:c5:4c:b2:f0:34:ea:f3:90:12:45:45:db:
f2:21:09:d5:8e:4e:ba:89:6b:f1:d3:74:21:fc:94:
a6:0e:a4:e9:81:94:78:9d:f2:b9:03:92:b6:fc:72:
6c:ff:03:03:0c:7e:11:b3:b9:6b:7c:46:54:3d:f7:
44:02:b9:c5:dc:2a:4f:96:1d:c5:05:39:4c:69:88:
2b:83:74:15:62:65:30:64:64:6c:0f:86:86:ea:da:
e7:50:51:d3:c8:d8:6e:37:ba:70:f6:7e:96:6c:fd:
1c:7d:f7:d7:1e:2a:17:cb:16:95:0e:16:fb:94:cd:
35:9e:6d:38:3e:ef:48:47:04:80:29:14:5c:0d:88:
86:4b:ed:38:8b:cb:1d:e9:1c:db:f9:39:c4:b6:33:
0b:2d:ef:4a:f0:99:29:5c:01:c2:d8:9d:c8:ca:88:
e8:3d:33:73:f3:cb:80:34:18:0d:25:c5:c9:58:bb:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:28:CD:2E:10:94:7A:9F:42:78:1E:FE:AA:2D:CA:98:ED:FF:EC:93
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/D0A8DC4EE92111EF91530F6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.176.0/20
Signature Algorithm: sha256WithRSAEncryption
d2:bb:59:39:d0:a6:36:cc:2c:ad:29:d3:c1:5d:45:6d:83:f8:
14:12:91:de:ab:f3:39:4c:c4:13:15:3b:ee:ab:28:75:f9:2d:
04:70:84:92:f4:85:f2:f6:f8:ec:d8:ba:0c:7f:8d:73:cf:da:
18:03:5e:67:5e:93:5e:cf:e8:7a:7c:b2:5f:58:2d:fb:95:1d:
ac:cd:ce:81:5f:b2:73:e1:7c:f3:c4:3c:d9:e3:b7:38:b5:0a:
5e:e9:64:b2:05:93:05:96:07:c7:d2:3c:0b:f5:39:16:83:47:
ce:78:e8:a0:0d:c6:fb:0c:9a:34:d2:29:a8:fd:6c:2b:18:10:
25:b5:9c:ed:6d:0a:21:c4:36:d3:19:3a:ca:d1:4f:12:4b:a2:
e3:d4:66:fb:76:07:69:a1:44:46:04:fe:07:5a:5c:39:2d:c6:
21:73:22:7e:bc:38:15:95:38:ce:20:46:9f:9d:28:93:ac:fd:
6c:90:c1:fb:6d:b8:87:fd:31:c4:26:5d:aa:ad:fb:88:03:de:
97:88:82:0b:83:e0:5c:2f:8b:25:e0:c4:d3:ad:5a:07:8c:10:
ac:91:0a:16:1e:67:e5:0d:0d:ec:8d:a1:91:dd:cb:0c:53:1f:
ef:2d:b8:b3:40:ea:ba:bc:6f:74:d3:dc:a3:2d:72:61:33:22:
33:5d:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:58:52 2025 by rpki-client