Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/315E769615E311F0BD509C156EB8BCC6.roa
File: 315E769615E311F0BD509C156EB8BCC6.roa (raw, json)
Hash identifier: iAT38DZH09S6mCrVN+HV2Rmos/Bp3ATbu/MfsmP1Rxg=
Subject key identifier: EE:D0:A7:5D:DB:90:7C:CC:E5:0C:C8:57:35:8C:3C:5F:E6:01:D4:87
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08E7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/315E769615E311F0BD509C156EB8BCC6.roa
Signing time: Thu 10 Apr 2025 08:09:58 +0000
ROA not before: Thu 10 Apr 2025 08:09:54 +0000
ROA not after: Fri 10 Apr 2026 08:09:54 +0000
asID: 329007
IP address blocks: 196.251.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 14:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2279 (0x8e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 10 08:09:54 2025 GMT
Not After : Apr 10 08:09:54 2026 GMT
Subject: CN=67f77cd6-e3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:4c:35:67:6a:8c:a7:eb:58:6d:70:0a:71:
cf:80:03:8f:cc:ec:f4:4c:e9:f4:39:50:c4:0f:fe:
8f:8e:11:fd:bf:5e:4b:89:82:0a:04:c3:de:e3:53:
05:1e:36:97:95:4c:ec:8c:e5:6d:66:28:80:3c:34:
73:52:20:6d:e2:e8:f1:a3:b6:80:16:bb:f4:99:96:
74:f3:0d:82:8b:4c:4c:45:86:fb:79:bf:fa:d4:a6:
fe:5d:98:c3:8e:d6:a7:ad:5e:b9:c8:46:8f:fb:c0:
87:aa:32:a1:56:2c:2d:13:6f:a1:f4:9e:56:86:2f:
78:50:25:8b:a7:82:73:f7:4d:40:da:ba:48:d6:02:
5e:f2:d4:42:80:24:25:e0:75:16:4a:cc:ee:0c:ee:
f6:61:44:ed:5c:43:4e:64:f4:1b:7e:93:4b:b8:1e:
f3:bc:01:b1:3d:83:25:ca:ea:61:b8:02:84:fd:af:
5a:21:58:b6:84:f4:b7:ef:dd:54:58:cf:29:a0:ce:
6b:6b:6c:ad:b7:a7:ed:ee:7f:c5:e8:01:97:01:1d:
62:b9:8a:53:2b:cf:0d:8e:84:d6:ec:ef:17:3b:0a:
5c:7c:06:e9:a3:90:95:e3:14:1d:de:62:85:a2:10:
b0:3f:30:70:38:4e:af:6e:19:b1:a8:72:1e:40:ea:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:A7:5D:DB:90:7C:CC:E5:0C:C8:57:35:8C:3C:5F:E6:01:D4:87
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/315E769615E311F0BD509C156EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8a:7c:6d:39:43:98:d3:c8:00:1f:ea:88:49:7d:26:f5:be:
f3:8c:4d:e8:aa:8a:2f:09:d6:47:60:03:3e:9c:87:f1:77:a3:
5c:06:92:1d:d1:9c:69:b4:ed:57:43:76:1c:2c:5e:61:30:29:
3e:40:e9:cc:2f:36:13:da:e9:61:0a:a6:17:c5:a2:76:11:6c:
79:3b:36:66:19:98:f3:85:63:23:cd:94:cc:06:44:3e:07:d5:
df:af:06:ad:20:42:f7:2f:0b:26:9b:91:63:d9:79:64:36:c0:
f2:96:30:71:90:ad:c0:07:30:04:53:3c:27:0a:b7:8b:29:e7:
9f:64:fb:cf:22:a8:a2:10:6b:90:48:bc:06:97:1b:b2:94:9a:
57:46:c8:c6:be:65:6e:7b:5e:7c:53:bf:82:47:03:83:a8:14:
b9:79:8b:96:e0:53:21:2a:7f:73:da:69:04:b9:41:8f:8b:16:
ec:5b:84:72:17:ab:24:88:28:d0:6e:a0:d6:6c:cb:f7:fa:f8:
65:3b:8d:cd:49:ca:36:34:82:07:5d:95:c4:ab:41:a9:66:51:
89:5a:3a:20:82:08:3c:92:e5:03:eb:cb:1f:64:d2:5d:06:1c:
cd:f7:e5:8f:04:10:ba:35:c4:c2:5d:7e:57:a5:68:c8:c7:7a:
c4:4a:a1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:14 2025 by rpki-client on console.sobornost.net