Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/16D38742138311F081957AAC762E951A.roa
File:                     16D38742138311F081957AAC762E951A.roa (raw, json)
Hash identifier:          mnXswCiubswO089M7XSn4J+i3vBhTSuddqxRQMd1R88=
Subject key identifier:   94:C0:05:7C:D1:3D:9F:CF:51:B2:54:92:75:90:A7:FC:42:C7:7F:FE
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       08C4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/16D38742138311F081957AAC762E951A.roa
Signing time:             Mon 07 Apr 2025 07:36:59 +0000
ROA not before:           Mon 07 Apr 2025 07:36:54 +0000
ROA not after:            Tue 10 Feb 2026 07:36:54 +0000
asID:                     329007
IP address blocks:        196.251.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 10 Apr 2025 08:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Apr  7 07:36:54 2025 GMT
            Not After : Feb 10 07:36:54 2026 GMT
        Subject: CN=67f3809b-2660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ab:f8:ac:2a:12:46:54:49:ff:f1:f0:f0:53:
                    3e:e6:9d:10:78:00:00:3c:c1:8c:b5:9c:38:84:0f:
                    5e:d2:97:21:93:78:c1:48:ac:4c:64:2e:3c:44:71:
                    93:cd:db:5f:b7:7d:88:24:ce:b4:69:c0:10:e9:3e:
                    c7:b4:94:59:25:a1:1e:5a:e0:5e:b2:ef:8a:cb:01:
                    93:44:68:8e:33:b3:a5:33:fd:f6:3f:58:6a:0f:d2:
                    9f:4b:67:36:b7:ce:1f:f7:4c:53:aa:01:0a:6e:31:
                    c1:b3:f1:7b:a8:e6:fa:7e:f7:2a:7c:1a:0e:43:6e:
                    e7:98:13:20:43:b6:18:28:e1:e7:36:60:8b:43:54:
                    54:24:fd:11:28:2b:c9:34:b8:19:40:ad:ff:d2:59:
                    69:74:dd:0e:f4:3a:61:f4:b1:94:ce:62:19:11:45:
                    fc:30:5e:b2:11:37:a5:cd:08:4f:37:73:0c:5d:90:
                    63:4e:8d:46:b5:a6:0a:05:79:8d:f0:7b:f2:20:59:
                    2b:b5:bd:1a:ed:13:d0:54:de:74:69:71:4f:4e:2a:
                    90:50:6e:49:5c:81:17:f1:17:8a:43:fd:52:54:a5:
                    52:94:c2:04:91:38:5d:02:7d:49:ab:6e:3c:81:64:
                    58:49:61:47:f3:86:7f:ae:b3:85:95:f9:b3:1e:60:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C0:05:7C:D1:3D:9F:CF:51:B2:54:92:75:90:A7:FC:42:C7:7F:FE
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/16D38742138311F081957AAC762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:a4:c0:bb:75:46:07:45:99:28:ae:23:a9:95:e1:13:8c:9e:
         90:1a:9d:6f:2e:a7:a0:fa:ca:43:ed:17:fa:b9:a9:04:d8:9c:
         90:8a:f0:8b:28:f6:9c:f5:2e:1b:06:77:f4:0a:8e:0b:77:a9:
         fc:01:44:59:65:f4:bc:e4:85:ce:5f:cb:2c:17:da:5b:7a:68:
         d5:31:0b:5e:e4:0e:49:4b:c5:3d:a2:6e:99:80:42:f4:91:82:
         ab:62:d2:99:e6:38:25:92:76:76:0a:b8:11:1b:09:89:2a:75:
         4f:25:fa:5d:dc:5f:78:66:83:96:1b:e9:ec:cf:09:c3:9e:3c:
         10:44:45:b1:25:8e:2a:41:79:3e:41:de:74:e6:1e:2f:c3:c7:
         9a:4f:3b:9a:f0:05:df:9c:7e:61:ec:eb:85:35:ad:9d:46:be:
         86:8f:cd:6c:f4:94:ad:fa:e0:60:56:fb:c9:e8:a6:70:e3:57:
         c0:53:66:ce:b4:78:ad:3b:80:af:f1:04:2b:8d:29:59:15:cb:
         db:ed:90:b8:6f:b0:9c:b1:87:af:11:40:43:a0:76:a0:c3:2c:
         fa:8d:29:71:c4:2a:22:2f:28:9a:f7:46:18:59:74:d3:d9:dc:
         43:87:3c:d0:59:86:2d:cb:ed:c3:15:57:cc:e0:dc:30:b7:39:
         c2:5c:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:30:32 2025 by rpki-client on console.sobornost.net