Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/30F383C0138311F09908B3AC762E951A.roa
File: 30F383C0138311F09908B3AC762E951A.roa (raw, json)
Hash identifier: f6WzxZcxD4lkSwSmJO/2o05kLMeT3ZZ81Q8jy/b1CyE=
Subject key identifier: EB:49:CC:41:1C:BF:28:71:B2:B0:46:DA:53:08:63:C0:9F:88:8A:73
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08C6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/30F383C0138311F09908B3AC762E951A.roa
Signing time: Mon 07 Apr 2025 07:37:43 +0000
ROA not before: Mon 07 Apr 2025 07:37:39 +0000
ROA not after: Tue 13 Jan 2026 07:37:39 +0000
asID: 329007
IP address blocks: 196.251.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 08:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2246 (0x8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 7 07:37:39 2025 GMT
Not After : Jan 13 07:37:39 2026 GMT
Subject: CN=67f380c7-3eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:f4:6a:5c:1a:b9:8c:8a:f5:87:d6:cd:0a:
ad:6b:44:0e:3a:39:9b:3f:33:dc:6d:f9:e4:40:5f:
6a:a1:3e:32:6f:6a:35:4b:23:37:bf:af:f6:0b:11:
0c:39:46:e7:15:62:5d:4b:a4:0b:98:c9:47:f6:d9:
ab:e5:73:9c:46:19:ae:e3:7a:16:91:0d:96:85:9d:
5e:ff:f5:c1:2d:36:3b:d4:ab:6a:03:92:16:6c:58:
47:64:7c:50:58:72:d3:0e:93:d4:b6:cc:ea:f9:b8:
5f:ce:10:62:e2:99:0f:d9:73:fa:07:51:8f:8b:40:
92:e8:14:59:72:07:25:02:af:2f:0a:5e:48:bf:7e:
95:5e:a8:e8:af:d2:90:51:68:48:97:ec:15:db:cd:
b4:60:c4:72:d7:e8:c5:3d:ab:08:1b:06:a4:31:29:
24:ea:2f:e3:69:39:97:38:cc:d9:f1:d7:a5:c1:b4:
8f:d1:50:d3:61:dd:94:93:48:94:81:ae:14:d2:b4:
80:f6:12:9b:81:7e:43:92:f4:97:84:3c:73:12:e0:
53:06:70:b7:4d:59:32:11:ac:3e:18:19:bd:d0:df:
65:8f:76:68:8f:8d:0b:39:75:d6:2a:68:57:f1:b8:
7c:60:ee:e2:5c:a8:12:7e:36:af:1e:50:dc:59:32:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:CC:41:1C:BF:28:71:B2:B0:46:DA:53:08:63:C0:9F:88:8A:73
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/30F383C0138311F09908B3AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:16:c8:98:b8:cc:94:eb:2d:b6:3f:4e:ce:20:c4:23:ec:56:
5e:10:83:3a:cc:d5:72:af:97:8d:4b:f2:51:6d:c7:09:d1:ae:
f5:49:4d:29:0f:1a:a1:95:85:ca:49:b6:38:36:af:a6:4a:3c:
40:70:74:e5:60:0f:48:e5:ad:20:26:9c:bc:a3:8b:d0:81:64:
40:e7:85:4c:96:65:35:c6:b5:c3:d5:8e:7a:b1:ba:8c:94:fe:
e7:f9:3b:35:47:e3:0b:88:a2:33:19:01:e7:bc:d2:dc:02:48:
65:46:ec:12:90:a3:ca:2a:8e:17:9c:15:fb:c2:ce:d3:a4:c1:
4b:39:5d:60:7a:4f:f3:c9:85:8c:ad:0d:c5:37:b1:2e:85:18:
cf:08:3d:fc:21:d5:df:f7:4d:1d:4f:0b:29:17:20:4c:1d:c4:
2f:be:02:d7:72:45:48:e7:58:0b:0f:ee:5e:d9:28:36:20:0d:
3f:37:b0:db:31:98:77:78:03:a8:bc:d2:0a:b4:6f:1e:84:43:
62:0b:0a:41:11:94:e1:a5:c2:bb:7e:b3:af:c5:09:ba:e4:b0:
ae:6a:c6:f7:5b:11:3b:cf:7e:33:dd:d1:63:f8:a5:9a:46:7e:
c4:92:f2:e7:f7:cd:4e:65:7c:3f:02:0d:f7:94:6d:ae:9f:48:
8a:71:1f:77
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA0MDcwNzM3MzlaFw0yNjAxMTMwNzM3MzlaMBgxFjAU
BgNVBAMTDTY3ZjM4MGM3LTNlZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWv/RqXBq5jIr1h9bNCq1rRA46OZs/M9xt+eRAX2qhPjJvajVLIze/r/YL
EQw5RucVYl1LpAuYyUf22avlc5xGGa7jehaRDZaFnV7/9cEtNjvUq2oDkhZsWEdk
fFBYctMOk9S2zOr5uF/OEGLimQ/Zc/oHUY+LQJLoFFlyByUCry8KXki/fpVeqOiv
0pBRaEiX7BXbzbRgxHLX6MU9qwgbBqQxKSTqL+NpOZc4zNnx16XBtI/RUNNh3ZST
SJSBrhTStID2EpuBfkOS9JeEPHMS4FMGcLdNWTIRrD4YGb3Q32WPdmiPjQs5ddYq
aFfxuHxg7uJcqBJ+Nq8eUNxZMnXtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU60nM
QRy/KHGysEbaUwhjwJ+IinMwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzMwRjM4M0MwMTM4MzExRjA5OTA4QjNBQzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+3kwDQYJKoZIhvcNAQEL
BQADggEBAJwWyJi4zJTrLbY/Ts4gxCPsVl4QgzrM1XKvl41L8lFtxwnRrvVJTSkP
GqGVhcpJtjg2r6ZKPEBwdOVgD0jlrSAmnLyji9CBZEDnhUyWZTXGtcPVjnqxuoyU
/uf5OzVH4wuIojMZAee80twCSGVG7BKQo8oqjhecFfvCztOkwUs5XWB6T/PJhYyt
DcU3sS6FGM8IPfwh1d/3TR1PCykXIEwdxC++AtdyRUjnWAsP7l7ZKDYgDT83sNsx
mHd4A6i80gq0bx6EQ2ILCkERlOGlwrt+s6/FCbrksK5qxvdbETvPfjPd0WP4pZpG
fsSS8uf3zU5lfD8CDfeUba6fSIpxH3c=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:32 2025 by rpki-client on console.sobornost.net