Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/17762DF0DD7111EFA0BD6277762E951A.roa
File: 17762DF0DD7111EFA0BD6277762E951A.roa (raw, json)
Hash identifier: b7nFTX7ceQihfy9koYNWXn/3rTUOTOphMXagf6s9rvQ=
Subject key identifier: D7:FF:88:4F:80:70:4D:7F:65:2E:2E:DD:FD:F0:E7:43:C2:96:C9:0A
Certificate issuer: /CN=F36BC6CCAF/serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Certificate serial: 02
Authority key identifier: 31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/17762DF0DD7111EFA0BD6277762E951A.roa
Signing time: Tue 28 Jan 2025 12:12:07 +0000
ROA not before: Tue 28 Jan 2025 12:12:03 +0000
ROA not after: Tue 31 Mar 2026 12:12:03 +0000
asID: 37563
IP address blocks: 197.231.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 28 Jan 2025 13:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC6CCAF, serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Validity
Not Before: Jan 28 12:12:03 2025 GMT
Not After : Mar 31 12:12:03 2026 GMT
Subject: CN=6798c997-144b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:ca:5a:27:20:4c:eb:18:fb:65:f6:4b:33:
cb:f9:69:ef:ba:fb:c2:4c:9c:c0:93:8b:8b:e6:52:
99:e3:26:8c:7d:2e:2f:4f:9d:d6:10:5e:2d:ec:e2:
17:18:bb:dc:2b:5d:4b:d8:a4:e3:31:28:df:81:0b:
12:e9:a0:bf:24:93:dd:67:f4:dd:2f:57:57:38:ea:
cd:25:ca:d9:f2:40:c9:e0:04:1a:b2:81:8f:39:39:
01:01:4f:c4:23:0b:19:03:78:ef:7d:38:e8:7f:58:
b7:4f:f7:76:66:c3:ec:43:85:7d:b1:23:cd:02:7a:
db:8f:bf:9c:74:6e:96:03:a5:a0:8a:e1:77:36:7a:
b6:7e:23:5e:19:45:c4:29:25:36:ff:01:d5:40:27:
d8:f7:25:23:52:a2:61:c6:58:d4:9d:45:2f:e5:79:
d6:3b:85:d8:1f:fd:97:6c:04:09:d5:22:a4:31:b5:
38:94:0b:3e:fa:65:04:6d:ec:30:e7:ab:da:89:de:
41:76:03:6d:95:61:7a:7d:62:f9:0d:2f:88:f0:db:
e0:fb:43:a5:19:df:af:ee:fd:95:ea:97:6e:08:ad:
40:21:ce:8a:cc:19:cd:b5:21:4d:66:47:28:d1:86:
b2:5a:42:c5:85:f8:e0:79:ef:15:e2:d8:32:e2:43:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FF:88:4F:80:70:4D:7F:65:2E:2E:DD:FD:F0:E7:43:C2:96:C9:0A
X509v3 Authority Key Identifier:
keyid:31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/17762DF0DD7111EFA0BD6277762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.231.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:33:ac:9b:7f:d9:d2:e1:b1:2a:78:0e:6c:a5:2f:24:26:5c:
3c:8f:60:82:dc:26:a7:7a:f7:20:3b:1c:e0:a4:f0:75:90:31:
86:1c:34:d2:c1:72:73:e1:4a:80:ca:b1:60:c0:3f:28:ac:dc:
00:e3:b1:b3:1e:08:51:25:d3:df:ea:52:83:21:71:b4:1f:8f:
49:34:9c:61:3a:31:f7:db:85:d5:03:f2:ec:c7:b2:05:bc:04:
85:30:e8:65:c8:dd:9f:2b:b5:9a:3e:0c:2d:e2:cb:2f:fa:97:
38:0a:35:ad:20:c1:88:be:db:2b:72:3d:0b:75:68:d3:15:4c:
94:3a:14:4f:d8:60:51:0f:f5:ee:b3:8c:28:8d:ad:e8:7d:7b:
ed:11:6b:50:8e:2f:17:d0:8d:95:26:5f:79:4e:30:29:99:87:
bd:36:8d:19:79:9d:da:5a:21:8a:5c:31:f0:49:f6:02:c7:6b:
1e:69:85:e6:83:38:8f:a6:25:24:7d:7a:18:7d:9b:86:f0:05:
0b:3f:bc:2c:38:10:3b:69:c7:9e:51:df:1a:d7:2b:09:28:81:
23:53:54:ae:7e:50:9f:38:4f:12:21:d5:33:9c:3a:9c:06:b3:
1f:70:b0:73:3b:8f:17:eb:e3:2d:a4:93:dc:e2:84:53:b6:cb:
ef:f8:b2:2a
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
QzZDQ0FGMTEwLwYDVQQFEygzMUY3OTUwMUY3MDBDNkE2NzY2MkRFMjdCNjE1RUVD
ODMwQjFCODc2MB4XDTI1MDEyODEyMTIwM1oXDTI2MDMzMTEyMTIwM1owGDEWMBQG
A1UEAxMNNjc5OGM5OTctMTQ0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANBxylonIEzrGPtl9kszy/lp77r7wkycwJOLi+ZSmeMmjH0uL0+d1hBeLezi
Fxi73CtdS9ik4zEo34ELEumgvyST3Wf03S9XVzjqzSXK2fJAyeAEGrKBjzk5AQFP
xCMLGQN473046H9Yt0/3dmbD7EOFfbEjzQJ624+/nHRulgOloIrhdzZ6tn4jXhlF
xCklNv8B1UAn2PclI1KiYcZY1J1FL+V51juF2B/9l2wECdUipDG1OJQLPvplBG3s
MOer2oneQXYDbZVhen1i+Q0viPDb4PtDpRnfr+79leqXbgitQCHOiswZzbUhTWZH
KNGGslpCxYX44HnvFeLYMuJD+dcCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTX/4hP
gHBNf2UuLt398OdDwpbJCjAfBgNVHSMEGDAWgBQx95UB9wDGpnZi3ie2Fe7IMLG4
djAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkM2Q0MvMEY4NTM1MzRERDM4MTFFRkIyRTRDNDc3NzYyRTk1MUEvTWZlVkFm
Y0F4cVoyWXQ0bnRoWHV5REN4dUhZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTWZlVkFmY0F4cVoyWXQ0bnRoWHV5REN4dUhZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkM2Q0MvMEY4NTM1MzRERDM4MTFFRkIyRTRDNDc3NzYy
RTk1MUEvMTc3NjJERjBERDcxMTFFRkEwQkQ2Mjc3NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsXnyDANBgkqhkiG9w0BAQsF
AAOCAQEAOzOsm3/Z0uGxKngObKUvJCZcPI9ggtwmp3r3IDsc4KTwdZAxhhw00sFy
c+FKgMqxYMA/KKzcAOOxsx4IUSXT3+pSgyFxtB+PSTScYTox99uF1QPy7MeyBbwE
hTDoZcjdnyu1mj4MLeLLL/qXOAo1rSDBiL7bK3I9C3Vo0xVMlDoUT9hgUQ/17rOM
KI2t6H177RFrUI4vF9CNlSZfeU4wKZmHvTaNGXmd2lohilwx8En2AsdrHmmF5oM4
j6YlJH16GH2bhvAFCz+8LDgQO2nHnlHfGtcrCSiBI1NUrn5QnzhPEiHVM5w6nAaz
H3CwczuPF+vjLaST3OKEU7bL7/iyKg==
-----END CERTIFICATE-----
Generated at Wed May 14 09:58:39 2025 by rpki-client