Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3571D3A8193B11F09E6996EA6DB8BCC6.roa
File: 3571D3A8193B11F09E6996EA6DB8BCC6.roa (raw, json)
Hash identifier: g50R4RVLXBWrlOcUfq+sciniriYY+dZ643Q0+TcxVhw=
Subject key identifier: 9A:48:FD:86:C6:7A:18:91:14:5E:45:A5:2A:78:D9:0C:4B:A3:D2:A2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0901
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3571D3A8193B11F09E6996EA6DB8BCC6.roa
Signing time: Mon 14 Apr 2025 14:17:34 +0000
ROA not before: Mon 14 Apr 2025 14:17:30 +0000
ROA not after: Sun 12 Apr 2026 14:17:30 +0000
asID: 36352
IP address blocks: 196.251.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 08:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 14 14:17:30 2025 GMT
Not After : Apr 12 14:17:30 2026 GMT
Subject: CN=67fd18fe-80e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:67:98:00:77:3a:e5:3f:f4:61:29:26:65:
13:ee:5a:15:0f:b8:90:13:2d:49:87:e0:28:05:cc:
68:54:ee:1e:c9:5b:75:af:d8:5a:bb:30:4c:82:00:
01:49:49:3f:59:56:2e:7c:83:66:31:6e:ec:90:ff:
b5:03:de:8a:f7:aa:bc:de:f7:18:ad:05:9e:5d:70:
c2:af:5d:15:50:4d:00:cd:a8:14:ce:a8:ae:11:75:
5e:82:72:f4:98:49:f3:95:e3:e2:34:41:2e:8c:e7:
66:50:d6:49:2a:a8:8c:b1:e9:68:d6:dc:b5:d1:ed:
7b:cd:1f:17:7a:23:af:07:e2:70:0e:8e:e9:8a:82:
c2:9a:ee:f6:63:7b:fe:c5:c6:66:53:5f:b3:b5:a4:
c3:c0:64:cb:a5:9a:95:58:a3:99:59:99:ed:56:50:
bb:65:f6:8e:ac:96:32:74:5e:f8:95:3c:b6:43:eb:
5f:8e:3f:92:0c:3d:ad:40:e9:6a:a0:ff:f2:c9:ae:
af:d9:39:6b:f4:5e:1a:be:ac:ce:57:08:c6:5c:86:
09:7d:36:d5:72:d8:ed:18:6d:7a:a4:3c:18:b4:7b:
53:4a:15:ca:09:a5:59:0f:08:c8:7a:35:87:e2:ec:
8c:cb:9f:83:ef:a4:aa:72:41:14:fc:e0:fa:e0:e3:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:48:FD:86:C6:7A:18:91:14:5E:45:A5:2A:78:D9:0C:4B:A3:D2:A2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3571D3A8193B11F09E6996EA6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.82.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b9:3f:6f:f6:74:ff:ae:c8:b6:05:ea:14:ed:91:54:18:29:
e4:ba:19:6e:ae:ac:d6:16:be:70:72:6e:00:f2:8d:92:79:2f:
32:c6:71:2c:4d:c2:26:67:49:35:83:fc:08:64:f0:2b:aa:5c:
d6:91:88:c3:1a:77:4d:e7:1f:86:4f:5a:e0:2e:37:89:c4:6f:
74:5b:5e:b1:f4:bd:6f:0f:55:ae:29:34:3a:4f:95:f7:f5:37:
18:db:24:d8:70:46:10:7e:5a:9d:bd:f3:9a:19:0d:c8:11:50:
df:67:a7:a6:26:71:38:94:70:1b:8a:af:85:0d:52:a1:ec:44:
56:b1:76:a2:e8:0b:56:ca:b2:80:74:3a:2f:53:f3:27:72:3c:
d5:bd:29:70:d3:71:0a:80:5c:22:0d:d8:c4:7e:6a:b3:ca:70:
55:9f:b2:ab:fe:a0:d0:3a:fc:5e:88:00:54:8c:57:79:93:51:
b2:e8:96:37:a5:b5:c8:55:a9:eb:53:8b:ae:12:48:7d:e6:db:
fe:f4:79:6d:37:fa:74:db:c9:e1:c2:f8:d4:a0:ca:8d:0f:16:
c2:7b:70:d4:6e:8e:b8:e0:72:52:16:a9:a9:02:21:fc:90:67:
9a:49:6f:62:16:89:79:f4:67:39:0d:b2:d3:0c:26:1b:1a:22:
1f:07:f6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 11:27:31 2025 by rpki-client on console.sobornost.net