Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1DC1ADE61ABC11F0A8B789FC6DB8BCC6.roa
File: 1DC1ADE61ABC11F0A8B789FC6DB8BCC6.roa (raw, json)
Hash identifier: g8sOJZUt7HtBEIbfdxAoNT2c/t78HnTLayE4U5m0N+8=
Subject key identifier: 3F:F9:10:B1:90:40:5D:B8:E2:6A:F8:6C:E9:B6:09:63:CA:A3:8D:E2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 091B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1DC1ADE61ABC11F0A8B789FC6DB8BCC6.roa
Signing time: Wed 16 Apr 2025 12:12:51 +0000
ROA not before: Wed 16 Apr 2025 12:12:45 +0000
ROA not after: Tue 13 Jan 2026 12:12:45 +0000
asID: 329007
IP address blocks: 196.251.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 08:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2331 (0x91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 16 12:12:45 2025 GMT
Not After : Jan 13 12:12:45 2026 GMT
Subject: CN=67ff9ec3-0465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:34:44:f1:59:35:33:25:84:6f:cc:2c:ca:
bf:9b:76:d2:44:84:50:0b:01:6d:33:96:6c:86:62:
da:c7:10:28:15:54:bc:95:10:15:e1:71:c1:7e:62:
b3:be:16:37:b7:e1:a0:0e:ab:f3:d4:4f:40:fe:c0:
bf:42:10:9b:53:b7:e1:2f:7a:4f:a9:e3:f5:14:a6:
bb:ab:7d:85:19:a9:c2:76:e2:5e:ae:77:c0:2c:e9:
41:12:32:fb:7b:fa:fe:6e:6b:cc:8d:26:59:c4:35:
23:a2:2a:01:e1:4c:9d:e3:cb:04:62:60:bb:c2:b4:
20:28:98:fe:35:03:74:5b:49:f8:f3:d2:94:68:f1:
78:32:81:d2:67:5b:50:9b:af:86:bb:ab:ff:20:7f:
52:81:98:73:56:04:42:94:69:e5:3e:9a:fa:6f:f3:
1f:34:37:82:74:a4:41:eb:9f:55:24:40:99:06:64:
ca:27:60:47:ed:19:97:3d:a7:3e:a5:ef:1a:47:3c:
d6:98:72:6a:f0:67:bf:f0:b5:89:0d:3b:8d:2b:45:
e8:30:e7:51:cc:86:67:dc:54:c9:b7:cb:78:91:e6:
2d:37:3c:f6:f5:a6:b9:cb:f3:9a:64:94:3a:ff:79:
f3:9e:d5:dc:41:fc:5a:32:8a:72:d3:c3:35:9e:b2:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F9:10:B1:90:40:5D:B8:E2:6A:F8:6C:E9:B6:09:63:CA:A3:8D:E2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1DC1ADE61ABC11F0A8B789FC6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.68.0/24
Signature Algorithm: sha256WithRSAEncryption
21:29:d8:ef:a4:f8:e0:f4:2f:a2:a1:66:17:4b:d6:60:a7:72:
7b:af:05:18:5d:52:a8:53:16:a9:10:8c:af:57:96:94:42:35:
78:2c:e0:41:d2:e4:d9:c9:52:2f:2f:97:fc:b4:3d:87:01:76:
9f:55:87:ab:2d:81:f6:50:83:a7:c7:93:90:f7:6c:50:1d:73:
ae:2e:08:7c:48:92:e3:85:20:2d:a8:87:fe:1a:10:29:80:d3:
23:88:8b:0f:a6:66:d4:6e:2f:d9:3d:8d:48:a9:a3:ef:5c:c6:
a9:f9:a9:4b:92:fe:ef:bf:0e:7b:ba:c2:71:ab:fe:a5:c3:7e:
96:13:21:48:f2:cb:cd:4b:f2:be:c4:b6:3c:61:9f:85:0c:d7:
6e:53:46:05:99:72:21:2c:d9:34:ec:d1:96:3a:bb:23:5a:6d:
24:1b:4b:8c:1f:00:14:d4:c9:db:93:b9:a1:fd:08:21:34:44:
bf:d2:c0:a9:f1:c6:42:25:07:7a:93:9e:6a:de:f5:2e:8a:34:
3d:ee:af:f9:15:6c:6b:33:33:fc:13:54:40:59:0f:9a:14:93:
1f:5c:15:15:a3:a4:fb:ce:d4:3a:7e:62:bd:13:d1:79:00:20:
5e:ee:74:55:cf:7a:c9:92:ce:9b:59:78:33:53:0b:cb:d5:1d:
3a:f6:e1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:32 2025 by rpki-client on console.sobornost.net