Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/6264217CFCAD11EF8B848899762E951A.roa
File: 6264217CFCAD11EF8B848899762E951A.roa (raw, json)
Hash identifier: 8DAEbqEapTZf0R83WW+YlnFrDnESiOm5FwIt+wGfP1I=
Subject key identifier: 7D:2B:F9:72:5D:3A:77:90:E5:89:93:BC:06:03:08:5E:2F:C8:09:2B
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 0444
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/6264217CFCAD11EF8B848899762E951A.roa
Signing time: Sun 09 Mar 2025 06:11:48 +0000
ROA not before: Sun 09 Mar 2025 06:11:44 +0000
ROA not after: Sat 31 Mar 2035 06:11:44 +0000
asID: 33785
IP address blocks: 41.223.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 01:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF
Validity
Not Before: Mar 9 06:11:44 2025 GMT
Not After : Mar 31 06:11:44 2035 GMT
Subject: CN=67cd3124-333c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:52:7b:e8:2a:f6:36:86:e7:07:ef:51:1d:
d5:f6:7b:8d:f8:df:51:b6:2e:c8:fa:84:22:0b:1e:
f5:7e:51:2d:29:e3:8e:3e:46:9f:32:b5:10:d6:13:
cd:93:1e:34:d5:3c:de:2c:b6:29:8f:cc:4c:21:e2:
99:ce:10:5a:de:30:ec:d4:4b:a3:af:53:0b:87:48:
f2:42:33:ec:67:74:ef:9b:a4:3b:46:dc:9d:43:3c:
66:0c:08:10:96:56:46:f7:e0:50:f9:11:75:a7:2f:
33:72:a4:17:74:d5:76:bd:4c:ce:4f:d4:70:4e:20:
2c:b5:cc:9b:4a:78:25:4a:28:09:8c:dc:2b:eb:b5:
44:b1:e0:ed:bb:b4:03:af:69:19:47:df:06:55:e4:
01:c5:34:57:12:ac:2b:d3:5e:0d:e6:ff:d6:0d:f5:
3b:e2:3e:bc:e2:81:33:19:75:ff:7b:09:c8:b9:6d:
3b:25:90:0c:bd:a5:6e:a1:5f:4b:86:8e:b7:d1:d5:
f1:dd:e0:dd:92:d9:bd:3e:bc:fd:92:7e:35:9a:33:
5d:c8:90:9c:62:d8:5a:ec:c9:35:cc:43:4d:22:45:
12:87:89:ca:6c:2f:c5:00:4d:12:8f:69:2c:10:b3:
97:88:b1:45:0d:dd:3d:d3:9e:00:c2:89:7d:02:a8:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:F9:72:5D:3A:77:90:E5:89:93:BC:06:03:08:5E:2F:C8:09:2B
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/6264217CFCAD11EF8B848899762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:07:ba:9f:67:c1:4a:4e:ef:01:73:1b:67:ea:11:39:41:ed:
22:dd:4d:a6:4c:5a:c5:18:dd:02:79:24:64:1e:4e:3c:fc:28:
93:4a:00:bf:3c:19:0c:cb:58:75:7d:f7:c5:a2:e0:3e:cd:c7:
73:0b:5b:52:30:05:dc:7c:08:4a:0e:df:fe:3c:1c:ea:ac:a4:
10:42:be:9c:f4:58:84:7b:9d:13:83:9d:bc:72:06:0c:9b:ee:
21:2d:61:eb:b6:84:cc:ad:ce:b5:97:a5:56:a7:d5:d3:0d:a1:
92:f0:8d:3e:59:b9:0f:79:0b:f7:43:88:68:a7:75:62:7b:c5:
0c:e2:0a:98:e1:f6:3a:15:bf:ef:77:79:14:9b:8f:aa:df:ff:
92:f5:22:c3:fb:31:2b:1e:87:ba:8e:27:6b:b5:c8:ef:9f:65:
62:a1:f1:87:8c:cd:d4:c8:d1:51:bb:35:d9:dd:a9:e9:f9:53:
2a:de:73:4e:58:8e:4e:96:db:6b:30:86:c8:1c:9c:45:96:75:
51:5e:82:1f:64:21:28:50:0e:1c:0f:03:d1:69:69:aa:b1:92:
e8:8c:59:0b:94:9b:88:df:28:36:38:bd:d5:22:b2:e9:81:e6:
b3:1e:d4:e4:4c:21:b1:72:89:16:df:3a:4c:a0:5e:6e:a6:25:
ca:41:c4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 03:30:50 2025 by rpki-client on console.sobornost.net