Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C6325EA2138311F0A4AF9FB0762E951A.roa
File: C6325EA2138311F0A4AF9FB0762E951A.roa (raw, json)
Hash identifier: 4ywe8wHdlguqZkd8cUIys0+pMCy3pKSn0exNQFlbZ+4=
Subject key identifier: 5B:9E:3D:38:1B:C4:36:3B:23:71:8C:A2:06:19:A5:07:6F:3F:F0:32
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08CE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C6325EA2138311F0A4AF9FB0762E951A.roa
Signing time: Mon 07 Apr 2025 07:41:54 +0000
ROA not before: Mon 07 Apr 2025 07:41:50 +0000
ROA not after: Tue 13 Jan 2026 07:41:50 +0000
asID: 329007
IP address blocks: 196.251.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 08:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 7 07:41:50 2025 GMT
Not After : Jan 13 07:41:50 2026 GMT
Subject: CN=67f381c1-3520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:42:0f:a1:89:a3:6b:75:9f:a9:87:aa:80:
0d:85:fd:df:f0:e8:4c:2b:50:ac:bf:99:d0:c2:a6:
73:d7:a1:e9:07:78:04:5f:6c:58:d2:b9:5e:16:56:
9b:50:eb:1f:36:d8:03:07:ae:cb:ee:1c:d5:a5:4a:
4c:90:11:69:82:b9:70:b5:95:7c:26:2e:e7:ed:73:
84:d7:90:39:a9:af:f2:2f:13:a5:2e:4b:fb:7f:79:
e6:3b:98:3b:a8:22:99:13:0b:4a:b3:01:8b:ac:f8:
0b:e5:40:e3:32:79:56:ff:f8:f1:c3:53:a5:16:c0:
00:d8:ae:cb:2c:e3:68:e2:00:d6:d3:d6:0e:d2:34:
6c:f6:c9:54:47:80:9e:7e:10:1d:40:5f:1c:c5:df:
ce:89:62:ca:2a:b6:64:22:0b:98:9c:bc:b7:4e:db:
bc:2d:e8:3d:82:ff:da:fa:20:48:2f:a3:95:22:72:
12:a0:2d:90:77:77:49:38:85:67:eb:0a:12:96:9a:
01:ed:10:2f:46:4a:03:b3:a5:bf:64:7a:df:a6:0b:
a8:de:47:5d:70:fb:57:16:cb:bc:25:3d:9a:54:1a:
b9:67:4d:fd:7a:02:04:09:fc:94:c0:86:68:42:ef:
94:25:b0:b5:10:f7:69:76:4a:de:2e:17:0c:c3:62:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9E:3D:38:1B:C4:36:3B:23:71:8C:A2:06:19:A5:07:6F:3F:F0:32
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C6325EA2138311F0A4AF9FB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.125.0/24
Signature Algorithm: sha256WithRSAEncryption
09:42:ef:d8:92:95:fa:b6:f3:3c:cf:f7:5a:ae:3d:1c:f0:bd:
db:4d:9d:d4:1a:d0:43:da:89:03:d0:f1:c1:fb:47:ff:43:1c:
88:c0:30:66:e4:11:d1:6c:0e:fd:ad:9b:3d:2d:82:a5:1f:b4:
07:bc:f7:c6:4e:17:85:68:4e:6c:4c:b0:ab:aa:7a:45:c2:4f:
01:9d:56:fb:a6:94:fa:95:3b:f8:be:15:d2:2e:54:53:37:e1:
b3:cb:1f:9d:c4:42:d8:8b:f6:f4:3c:f6:8f:4f:a2:a3:b8:1d:
a6:a2:8b:87:51:fe:e3:7f:15:c5:a8:01:ac:92:78:b4:a9:1a:
1a:3a:1b:7f:43:cf:83:01:57:d3:d0:80:f4:57:48:41:71:f0:
39:8e:4e:1c:91:19:24:ac:5f:2f:82:c8:11:b2:a4:ab:30:4c:
e0:5b:77:fb:92:3d:71:0b:6b:9e:b5:d5:5a:8a:b5:eb:1f:36:
e5:6d:3c:43:1e:00:71:2f:e1:57:fb:c0:13:12:17:9c:50:ec:
06:ac:3b:21:ef:47:30:18:24:e8:67:f0:1d:d6:9c:ca:c9:46:
4d:7a:e3:93:0a:ea:53:37:47:f6:45:e6:8a:28:ce:a3:89:bf:
a1:bd:aa:b8:d2:e6:12:91:cb:4f:cf:45:78:f8:04:b8:c2:4d:
f2:de:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:32 2025 by rpki-client on console.sobornost.net