Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/11E73D40138411F0B24CFFB0762E951A.roa
File: 11E73D40138411F0B24CFFB0762E951A.roa (raw, json)
Hash identifier: QrLKKM9BX/QB6OSV3zzuA/8f3uGDYgnYMbSKs2mT6aQ=
Subject key identifier: DE:86:DB:DD:68:66:CD:EB:4C:D6:5C:26:3C:E4:34:CA:74:6D:7F:11
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08D2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/11E73D40138411F0B24CFFB0762E951A.roa
Signing time: Mon 07 Apr 2025 07:44:01 +0000
ROA not before: Mon 07 Apr 2025 07:43:57 +0000
ROA not after: Tue 01 Dec 2026 07:43:57 +0000
asID: 329007
IP address blocks: 196.251.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 08:44:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 7 07:43:57 2025 GMT
Not After : Dec 1 07:43:57 2026 GMT
Subject: CN=67f38241-fbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:3e:6d:e1:c3:20:1e:17:aa:b1:29:9d:ac:
3a:6a:f9:16:9e:74:a1:ea:ab:95:e4:71:04:cc:f4:
cd:48:39:b2:21:2c:c9:44:30:f2:2a:74:7c:5c:6b:
04:eb:ec:27:81:8b:ef:a2:94:76:2a:2b:c2:19:b5:
d9:34:09:75:08:92:9b:10:51:ab:bd:30:03:40:b8:
2f:75:ba:57:0b:cd:e7:8a:d2:9a:c3:e0:55:25:03:
7d:73:54:85:81:04:09:c8:00:47:e8:02:eb:b4:32:
1c:6d:41:52:08:b0:aa:5a:ff:79:4c:17:5e:06:42:
c7:14:a1:cf:62:61:24:f3:e6:da:fb:0c:58:f7:b9:
70:d6:ee:f2:33:dc:28:29:55:73:d1:07:dc:8d:6b:
84:26:52:4b:6e:26:5d:4f:7d:14:f9:68:be:c5:2f:
73:12:0d:3b:5b:c2:2b:ed:d9:d4:f5:2f:e2:95:73:
56:31:0a:69:b4:83:0c:e5:48:5d:12:11:4e:6e:61:
48:92:96:81:59:32:28:d0:dd:d4:8d:98:f7:59:74:
7f:ea:f4:02:c8:27:b8:8e:d5:be:49:cb:90:04:bd:
f0:f3:22:31:31:93:68:1c:c2:5d:bd:9d:9a:73:a0:
c8:56:48:84:ea:d5:4a:a4:ff:12:54:67:2b:0c:3e:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:86:DB:DD:68:66:CD:EB:4C:D6:5C:26:3C:E4:34:CA:74:6D:7F:11
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/11E73D40138411F0B24CFFB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:48:9e:c2:41:c1:a1:07:c8:f1:e0:3b:39:f5:ff:42:90:2c:
fe:c2:87:2e:18:86:b7:68:a2:4c:9e:81:67:bd:69:f6:bc:1d:
ba:16:b1:4c:1d:0b:27:91:bc:07:1d:47:6a:aa:b1:0e:9c:5a:
4f:e9:33:3e:03:8f:8e:77:da:ac:f3:67:08:7b:10:38:f9:8f:
b4:84:39:c2:51:28:83:71:db:d8:85:ad:cc:66:83:59:88:1b:
29:57:d2:80:8a:35:2b:ff:3d:46:5a:39:90:2b:aa:4f:bc:5a:
64:e1:0c:8f:b2:8a:9b:7d:0d:bf:f7:f8:53:7c:91:f7:df:9e:
b2:62:f2:2b:37:d6:95:76:62:1c:ae:42:e1:51:c9:47:d0:32:
df:39:2b:4a:80:9f:3a:de:96:04:a1:54:f6:12:b8:1f:d8:2f:
55:ed:af:4c:83:0c:b0:42:7f:75:7a:77:05:34:30:b8:f3:55:
c3:4e:6d:d0:9e:0c:bc:25:03:37:ce:f9:22:40:35:ea:a3:f2:
ab:a8:41:93:95:20:fb:5e:18:90:b3:21:b8:8c:e0:82:10:de:
25:ac:d6:ea:44:ee:18:c0:d4:f8:f1:71:9c:f3:bf:ce:12:a4:
5e:69:3a:20:5f:67:29:ed:00:27:f4:ad:45:15:9a:bc:b0:5c:
80:d3:06:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:32 2025 by rpki-client on console.sobornost.net