Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC0D206151811F0A34887CA6DB8BCC6.roa
File: 7EC0D206151811F0A34887CA6DB8BCC6.roa (raw, json)
Hash identifier: 7GscdDjti91Ac5H8Fb1RX5SD84/3pmcHGQfDC8Kgxnk=
Subject key identifier: 36:AB:01:D1:63:A6:A9:43:BE:27:BB:3C:46:53:5C:2E:1E:FD:CB:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017884
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC0D206151811F0A34887CA6DB8BCC6.roa
Signing time: Wed 09 Apr 2025 07:59:00 +0000
ROA not before: Wed 09 Apr 2025 07:58:56 +0000
ROA not after: Tue 29 Apr 2025 07:58:56 +0000
asID: 39600
IP address blocks: 154.94.33.0/24 maxlen: 24
154.94.40.0/24 maxlen: 24
154.94.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 22:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96388 (0x17884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 07:58:56 2025 GMT
Not After : Apr 29 07:58:56 2025 GMT
Subject: CN=67f628c4-ee09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:ee:1a:b8:1b:15:c0:50:fe:62:de:3b:27:
6e:bd:a8:19:63:76:7b:cc:6c:c6:ad:13:18:7a:53:
ec:d9:3b:a2:c9:33:89:32:6e:f8:b9:ca:3a:d5:20:
8f:25:58:55:41:32:7a:cd:f7:88:e2:d1:65:09:71:
ba:96:db:e7:da:27:2a:41:34:24:4a:2a:4f:c9:41:
ad:38:a5:30:3d:f5:fe:96:3d:0f:06:e9:72:90:7a:
e0:0a:0b:69:62:57:cc:a8:0e:a0:19:e2:d9:1a:5e:
12:7f:b8:e9:52:ff:7b:fc:2b:de:08:0d:d3:87:e2:
e1:e2:ae:17:d0:0b:a8:c8:4d:44:0f:f4:2f:85:a2:
af:54:b0:2b:9c:5b:8c:ad:88:c3:ff:f2:ed:77:84:
14:36:99:6e:9f:c8:a3:dd:65:c7:52:b4:57:9a:35:
b2:34:ec:fc:91:86:ef:5c:83:fb:e9:71:f8:3b:53:
ee:5a:5e:3a:b7:59:f3:0d:9d:57:8b:38:c7:86:a1:
5a:80:44:18:12:b9:74:59:57:ec:83:fd:35:c1:e0:
97:c9:a5:38:c1:bd:a4:6d:2e:d7:7e:57:88:28:15:
e3:ac:59:f5:95:51:9b:ef:4d:b4:e0:4a:21:88:b1:
a7:ac:90:36:88:b2:f9:42:e8:bd:81:56:af:bf:27:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:01:D1:63:A6:A9:43:BE:27:BB:3C:46:53:5C:2E:1E:FD:CB:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC0D206151811F0A34887CA6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.33.0/24
154.94.40.0/24
154.94.51.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a1:1b:c5:07:ff:73:11:62:39:a0:76:a0:b2:d6:bc:46:c9:
2e:02:1d:83:09:a6:b1:b0:c4:9c:64:2e:5b:b6:fe:2f:84:23:
2d:92:56:b8:7f:37:8d:de:06:43:d4:68:07:c6:e6:8a:b5:7c:
f0:62:e5:ec:20:3b:8c:85:ba:67:50:60:ab:5c:49:cf:61:d3:
5f:4b:66:1b:06:a5:54:cd:2e:d1:36:aa:47:38:af:44:19:13:
6f:44:b6:17:a4:fb:25:13:f0:64:eb:82:7a:c1:34:ff:bc:ca:
20:9a:91:c2:19:c2:d7:4f:0b:18:f6:22:a5:b9:33:2c:8a:94:
3b:ec:a9:17:50:d0:f1:67:9f:df:d3:22:23:f6:59:a7:d9:30:
77:73:fd:69:09:82:ca:f2:94:ae:d8:c5:05:0c:c7:f7:ba:e6:
88:7d:ab:3f:dd:19:13:1f:60:96:8b:11:f5:c6:0c:ed:49:75:
85:da:68:ae:c7:8b:87:85:2c:23:bf:d3:f7:94:03:d2:18:b1:
1d:e7:67:78:40:bf:04:58:12:40:74:81:d8:2e:fd:f4:89:70:
96:8e:81:87:d3:b8:0f:16:ae:47:78:ba:70:d6:1a:f6:48:2c:
3b:83:1c:1c:b1:97:be:87:35:7a:62:cb:84:5e:04:13:15:56:
f1:99:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net