Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F91EF8F41ABB11F098024FFB6DB8BCC6.roa
File: F91EF8F41ABB11F098024FFB6DB8BCC6.roa (raw, json)
Hash identifier: 7WzQ5RO61qofSZWKXl+JxGB686LghHFHIy+/yoHyDNM=
Subject key identifier: AC:E3:11:6B:57:07:C3:BD:47:BB:50:DE:B8:20:4E:63:E4:7C:93:C7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0917
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F91EF8F41ABB11F098024FFB6DB8BCC6.roa
Signing time: Wed 16 Apr 2025 12:11:49 +0000
ROA not before: Wed 16 Apr 2025 12:11:44 +0000
ROA not after: Thu 01 Jan 2026 12:11:44 +0000
asID: 329007
IP address blocks: 196.251.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 08:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 16 12:11:44 2025 GMT
Not After : Jan 1 12:11:44 2026 GMT
Subject: CN=67ff9e85-d92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:aa:26:81:17:a6:9c:4e:55:0f:f2:8a:b5:
10:f3:98:f7:6d:cd:f0:79:bd:ca:f6:dd:58:59:dc:
df:44:23:00:06:d2:70:b6:e8:cb:87:53:72:ee:f7:
47:43:a6:76:95:75:67:1e:e8:30:a8:eb:04:38:d8:
e5:74:72:ef:0f:19:c9:96:bd:8c:8c:d3:56:ca:6d:
24:08:33:ef:cb:19:35:bb:4b:fd:4a:e8:11:31:8b:
d1:26:fe:3e:49:e7:c2:61:01:94:b5:66:06:6e:db:
fc:96:59:25:ab:d6:28:92:03:a1:c0:07:50:86:8e:
db:ed:0e:fb:b3:70:9d:c5:05:bb:cc:cc:14:58:15:
53:00:7e:da:6d:f5:6b:c0:9e:f3:e6:78:87:14:fb:
8d:d6:b1:9e:cd:c7:6b:55:f5:ed:e0:77:9a:bf:94:
e7:c3:72:ac:2d:8c:36:d0:0f:85:ad:60:be:98:76:
35:38:98:c2:67:30:23:e9:11:04:cc:74:90:92:7d:
63:bf:c9:04:b9:49:04:6c:10:48:15:3f:ac:13:ea:
4e:22:7b:ce:91:3a:3b:de:f4:24:37:a1:04:ab:a6:
d9:df:95:db:a7:64:3d:a8:37:a4:53:03:3f:5c:d0:
aa:b6:42:b4:6f:0a:9e:9e:b9:67:b4:3c:75:ea:91:
2d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:11:6B:57:07:C3:BD:47:BB:50:DE:B8:20:4E:63:E4:7C:93:C7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F91EF8F41ABB11F098024FFB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.108.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e9:7b:7a:5a:0a:10:f5:14:f3:f8:c7:62:c6:bc:74:a5:61:
76:65:d5:e0:f0:e5:cc:df:c4:b6:de:7e:1e:d1:c3:18:c0:b7:
77:60:4c:b8:9b:ae:7f:06:81:ee:1c:26:04:f5:30:20:d4:a1:
f5:b2:db:bd:1c:a4:20:cd:0c:59:62:b9:01:cc:f5:d8:db:05:
63:e4:80:b4:09:04:07:c3:f1:9b:e9:22:b7:2e:cf:8d:1c:02:
5f:0e:81:70:46:0b:31:81:b6:90:f1:5a:e4:6b:c7:21:6a:cf:
af:4f:4b:42:57:7f:2d:02:cd:d1:35:6b:f4:38:ef:61:98:a4:
65:30:b2:a8:b5:e7:49:24:3f:87:0f:f3:da:69:f4:67:b4:58:
c7:5b:cb:22:59:ce:0a:19:6e:b1:aa:b2:a6:44:e4:b4:cf:4c:
49:26:08:26:36:a4:7e:46:db:92:1f:62:5b:a5:fe:17:8e:9d:
62:24:70:35:c0:7a:26:25:bf:c6:1b:7c:aa:62:36:07:38:07:
58:94:a7:75:eb:f5:2d:6d:b2:44:43:b8:94:a1:77:24:85:38:
d9:e7:b9:7b:7b:ff:6c:5d:f0:47:cf:ad:64:3b:5e:42:e0:c8:
3c:c2:7d:94:67:93:f9:f0:aa:36:96:25:0d:c6:7a:75:b4:7b:
69:aa:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:32 2025 by rpki-client on console.sobornost.net