Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/00C077D4138411F0BF21D8B0762E951A.roa
File: 00C077D4138411F0BF21D8B0762E951A.roa (raw, json)
Hash identifier: fdwn9eDBwz19jXrTH0zbQGPw3dem3KJSYJzbwNAeb3k=
Subject key identifier: 9C:6E:AA:52:64:88:EE:9E:38:EE:14:8C:80:8E:96:BD:A4:24:A1:E2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08D0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/00C077D4138411F0BF21D8B0762E951A.roa
Signing time: Mon 07 Apr 2025 07:43:32 +0000
ROA not before: Mon 07 Apr 2025 07:43:27 +0000
ROA not after: Thu 01 Jan 2026 07:43:27 +0000
asID: 329007
IP address blocks: 196.251.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 08:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256 (0x8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 7 07:43:27 2025 GMT
Not After : Jan 1 07:43:27 2026 GMT
Subject: CN=67f38224-eea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:92:51:28:b9:4a:8e:7b:0d:21:42:6c:d4:
09:b1:b2:15:e7:36:1f:b9:8a:c2:65:32:51:f0:b3:
f6:b6:75:e4:5c:c4:10:f5:2f:5b:b8:40:c5:6e:70:
4f:61:26:a1:5c:0e:34:3d:eb:14:e1:54:03:ee:45:
4e:97:95:83:b3:38:58:0f:4d:a3:2f:c1:d0:9f:46:
f1:f9:48:96:b3:d8:e3:49:c8:90:90:57:dd:1e:b5:
31:35:0f:39:e0:f1:c5:ad:35:07:ed:43:2f:aa:2e:
af:8a:42:cc:4a:2c:39:e1:fc:8c:0f:b9:c4:2b:24:
24:f1:ba:66:08:c3:b1:2e:86:d0:08:cc:58:b6:f1:
c8:1f:c0:64:4c:81:13:1b:43:27:42:56:45:5b:62:
bf:57:df:c9:59:13:b7:bd:95:2d:b0:ce:0d:2c:0a:
7d:f1:06:5a:f4:ac:bd:2b:f0:80:74:33:4e:d2:bb:
a3:79:7a:39:a9:27:92:a9:a3:58:0a:b7:ab:27:ac:
10:d8:5e:36:53:b6:42:96:38:ac:17:98:b4:ff:d8:
02:b9:2f:92:57:17:4b:cd:8f:a9:11:b0:82:44:1a:
f8:79:d8:f7:bd:cb:d2:f8:db:be:ce:56:4f:96:2f:
e4:4b:ac:4c:e8:9f:6f:4e:94:78:ef:ec:88:ea:7f:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6E:AA:52:64:88:EE:9E:38:EE:14:8C:80:8E:96:BD:A4:24:A1:E2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/00C077D4138411F0BF21D8B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.126.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ab:63:08:d6:48:79:00:7a:5b:1a:33:72:08:75:b5:a1:d6:
68:a7:03:01:c0:c3:0a:a1:2d:e5:2e:2f:8d:d5:c7:5b:4f:fa:
80:05:a9:67:08:42:c7:c5:e0:df:df:d4:94:c6:6f:b4:34:fb:
df:75:35:dd:d4:7b:2f:91:00:91:64:9a:c6:28:37:12:eb:6a:
17:d9:67:41:f1:5e:e3:44:4e:1e:00:68:59:f8:86:59:1d:4d:
d4:12:49:c2:9c:46:34:2e:3f:0f:fe:f9:6c:fa:bd:4e:e4:ec:
0b:7e:4b:80:a9:31:bc:e9:80:9a:97:e2:66:25:0f:59:eb:fe:
69:6b:b3:1e:d0:b2:18:07:4b:58:dd:a9:ab:d9:fb:5d:9c:12:
54:c5:41:d1:7e:c0:89:5a:ca:46:90:6d:34:6c:59:3e:fe:58:
a4:28:e1:77:c2:26:73:2a:0a:2d:85:44:74:df:4a:9b:ec:1d:
ee:60:bf:7e:99:6f:a0:bd:32:5a:7e:db:29:e3:2f:2c:97:a6:
3e:82:a8:46:63:eb:0d:59:87:ba:26:77:75:9f:99:08:7c:c1:
26:e5:21:42:f0:9f:b3:6c:ab:72:93:69:82:31:2a:22:87:fd:
09:ad:e1:2c:ce:86:47:c6:c1:7f:11:5c:74:49:7e:85:6a:c9:
3b:5b:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:32 2025 by rpki-client on console.sobornost.net