Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9AA22C0A138211F0B0FEA0A8762E951A.roa
File: 9AA22C0A138211F0B0FEA0A8762E951A.roa (raw, json)
Hash identifier: IsVHBhUscCg+PZH8PZ1o7fKaDeguKpNiA1PrKMnq920=
Subject key identifier: 82:FA:26:2B:D3:11:FD:62:5B:3A:AF:3C:F1:B8:D1:4D:D1:A8:FD:4C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08C0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9AA22C0A138211F0B0FEA0A8762E951A.roa
Signing time: Mon 07 Apr 2025 07:33:31 +0000
ROA not before: Mon 07 Apr 2025 07:33:26 +0000
ROA not after: Thu 01 Jan 2026 07:33:26 +0000
asID: 329007
IP address blocks: 196.251.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 08:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 7 07:33:26 2025 GMT
Not After : Jan 1 07:33:26 2026 GMT
Subject: CN=67f37fcb-c040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:60:fc:f0:c0:b7:de:1a:8c:bc:7a:0f:cd:
09:01:c8:dd:31:05:76:65:df:7f:f7:b7:0b:4d:db:
22:90:2b:0a:e5:8a:8b:6b:39:56:e9:e8:53:c7:0f:
ab:b0:ef:65:4f:ba:34:1a:23:ae:2c:cd:15:55:1a:
e0:2e:57:ce:8f:a9:c1:14:e6:45:2b:f4:89:7b:70:
ff:80:44:a6:bb:1a:80:ca:8e:8c:73:9b:a3:d6:99:
0d:46:3e:63:7e:c2:d9:0d:25:73:a9:0c:2a:48:76:
ff:09:f8:a2:45:55:33:cf:5f:f6:e5:ad:48:4c:73:
67:9e:9c:44:32:58:7f:c4:0c:be:cf:60:6c:10:48:
f5:f4:5a:1d:fe:fc:6a:3f:9f:d8:66:cb:56:71:05:
a2:d1:9a:9b:70:df:8d:f3:92:df:fb:a7:26:3e:90:
ed:53:fb:fe:ed:cc:cc:9e:a3:27:c4:3e:a9:e8:dc:
ab:29:9b:3c:55:77:0e:e9:d8:3f:41:4a:4c:81:ac:
ed:66:9c:2a:60:7e:bd:6c:f5:83:6c:df:c9:e2:c6:
df:14:72:53:ed:ee:77:28:c1:6e:99:48:c7:9d:e6:
2a:f5:cc:37:10:03:20:f0:10:48:bc:01:e3:94:26:
45:91:84:a9:00:4e:f7:6c:16:28:91:54:24:ed:68:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FA:26:2B:D3:11:FD:62:5B:3A:AF:3C:F1:B8:D1:4D:D1:A8:FD:4C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9AA22C0A138211F0B0FEA0A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:df:df:11:40:31:9e:1d:23:c2:b2:2d:58:ec:31:7e:31:fa:
5a:e3:08:04:e3:eb:ca:be:f1:89:0a:38:b9:ce:96:67:49:82:
cf:70:45:9c:59:c8:8c:73:26:f8:9d:d2:34:93:a4:0b:af:ee:
7e:ca:57:7e:8b:97:61:ff:2b:42:b8:fc:9b:87:c6:a2:e5:6d:
5a:c6:2c:56:f4:4c:da:d5:b1:a3:4c:d6:8a:06:a2:1d:88:f2:
e3:eb:ff:f1:4b:91:3f:6b:10:b9:41:f4:f7:65:3d:d5:fb:f3:
fc:15:37:d8:09:df:f6:5a:c6:01:ca:24:38:5d:d1:4d:97:3c:
23:4a:ef:f7:df:19:db:4c:60:dc:60:81:c8:15:2f:8b:e9:a9:
2e:52:7f:ea:a0:ad:a0:99:4b:a6:c1:53:45:47:42:75:1b:a1:
2c:63:15:55:24:71:07:d5:50:e1:f9:90:cb:85:ae:4b:ee:ec:
b2:01:e2:75:94:5d:cb:10:7d:9a:0f:17:87:57:dc:79:cf:23:
9b:5f:0b:1e:28:f9:a4:cb:ba:da:54:9c:e6:2c:2a:9d:a6:5f:
56:24:49:20:d9:c4:27:63:3f:e3:d5:13:39:6c:ff:34:c0:1b:
51:af:2e:32:39:60:11:4e:c2:ec:44:44:b1:b7:c2:47:8b:fe:
cb:d2:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:32 2025 by rpki-client on console.sobornost.net