Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/AEDF14A4E48D11EF9B1CAB6E762E951A.roa
File: AEDF14A4E48D11EF9B1CAB6E762E951A.roa (raw, json)
Hash identifier: Ut06TsXsR3KUGyKis+DcsHe+sY5slDcRm20e2vdtLF8=
Subject key identifier: 73:E1:FD:4F:37:6C:46:6E:66:0C:BD:00:A5:7D:B0:F8:C7:CE:42:99
Certificate issuer: /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial: 57
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/AEDF14A4E48D11EF9B1CAB6E762E951A.roa
Signing time: Thu 06 Feb 2025 13:24:25 +0000
ROA not before: Thu 06 Feb 2025 13:24:21 +0000
ROA not after: Fri 06 Feb 2026 13:24:21 +0000
asID: 36868
IP address blocks: 2c0f:e8f8:2000::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Feb 2025 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Validity
Not Before: Feb 6 13:24:21 2025 GMT
Not After : Feb 6 13:24:21 2026 GMT
Subject: CN=67a4b809-62f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4b:e2:67:bc:3e:89:c1:84:d9:39:f1:13:a3:
cc:88:f1:96:84:af:5d:40:c5:14:be:64:2c:cd:45:
04:4f:9c:b9:11:09:09:83:51:bd:ca:3c:d9:9a:47:
7d:16:18:24:b4:cc:c6:0b:96:07:6a:de:62:ea:35:
80:96:ed:91:23:70:0d:5a:90:a3:ba:b2:17:e4:50:
08:49:dc:74:7e:c7:d7:c4:89:de:ca:71:0c:1f:bc:
d9:e8:ac:95:52:63:e4:5f:2d:a1:6b:78:f6:12:d2:
0d:28:23:2e:12:7e:75:3b:50:3d:6d:1a:2d:64:7c:
23:ec:af:b2:80:89:76:dc:c9:29:67:99:a3:f5:ea:
ee:87:1e:f9:ab:9a:72:49:9d:48:1d:d0:3a:f4:99:
93:88:c7:71:b7:51:cf:f7:6a:d1:0b:3b:db:31:f0:
eb:10:cd:91:28:a4:10:30:97:ca:93:fe:5d:42:86:
ec:0e:fe:80:c6:d7:85:3e:fc:74:4b:4a:af:c2:9f:
ee:14:45:57:b1:dd:40:16:1f:89:aa:09:95:36:b3:
dc:ce:98:47:17:a2:f6:33:d5:82:12:b9:73:2b:61:
7b:95:1c:a6:6f:f2:1b:bc:f6:c4:1b:1c:84:92:4e:
25:e5:9d:97:32:36:47:e9:fd:47:32:80:d2:1c:ba:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E1:FD:4F:37:6C:46:6E:66:0C:BD:00:A5:7D:B0:F8:C7:CE:42:99
X509v3 Authority Key Identifier:
keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/AEDF14A4E48D11EF9B1CAB6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e8f8:2000::/40
Signature Algorithm: sha256WithRSAEncryption
6b:e5:b6:ce:ab:ed:bc:25:da:9e:1f:d3:0a:da:91:8e:5c:44:
ea:50:ae:0a:53:46:60:b8:9a:ae:0f:0e:97:dd:49:f8:79:e9:
25:3e:89:e1:27:2a:c2:3e:ba:6d:59:d9:dd:48:50:12:3e:46:
96:ac:4e:96:f7:d8:a2:48:fc:91:7b:fd:eb:c4:02:00:29:26:
e6:a8:28:d8:4a:35:7d:e9:d8:d6:e6:06:ca:11:44:b6:7b:64:
8e:46:43:46:26:9f:5a:5c:e8:7a:e0:9e:d9:ac:4a:ba:dc:61:
be:50:bb:46:d7:28:d6:80:aa:6e:d6:84:f7:41:e2:7b:2c:4b:
2e:14:32:21:7d:f3:e3:51:23:55:6c:42:31:c6:08:03:ac:e4:
2a:22:55:dc:4e:a3:83:d6:79:62:4b:01:5a:01:e9:e1:1f:85:
2e:2e:a5:27:90:e8:89:39:5e:c4:c6:0c:b2:db:23:ef:1f:67:
93:6c:5a:b8:44:bf:6b:5b:08:6c:cb:ae:6d:7e:fb:9b:a4:33:
a6:71:6e:69:87:c2:2e:a2:f7:51:b6:20:50:06:e7:f4:0f:5c:
1d:c4:ae:9b:e6:a4:43:46:fd:1b:8a:d4:e5:60:36:c7:f2:d9:
9b:d4:dd:8a:83:83:b2:36:88:ab:86:8b:84:db:7a:1b:13:4c:
b1:54:bb:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIBVzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
MjczREFGMTEwLwYDVQQFEyhEOEFBMDBBQjE1OTUxOUE2RDY1NjcwREU5RTU5OEI3
M0RGNkFCMkMxMB4XDTI1MDIwNjEzMjQyMVoXDTI2MDIwNjEzMjQyMVowGDEWMBQG
A1UEAxMNNjdhNGI4MDktNjJmMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPRL4me8PonBhNk58ROjzIjxloSvXUDFFL5kLM1FBE+cuREJCYNRvco82ZpH
fRYYJLTMxguWB2reYuo1gJbtkSNwDVqQo7qyF+RQCEncdH7H18SJ3spxDB+82eis
lVJj5F8toWt49hLSDSgjLhJ+dTtQPW0aLWR8I+yvsoCJdtzJKWeZo/Xq7oce+aua
ckmdSB3QOvSZk4jHcbdRz/dq0Qs72zHw6xDNkSikEDCXypP+XUKG7A7+gMbXhT78
dEtKr8Kf7hRFV7HdQBYfiaoJlTaz3M6YRxei9jPVghK5cythe5Ucpm/yG7z2xBsc
hJJOJeWdlzI2R+n9RzKA0hy6vbcCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBRz4f1P
N2xGbmYMvQClfbD4x85CmTAfBgNVHSMEGDAWgBTYqgCrFZUZptZWcN6eWYtz32qy
wTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjI3M0QvM0UyNjVFRkVBOEE5MTFFRkE1RTJDMkEwNzYyRTk1MUEvMktvQXF4
V1ZHYWJXVm5EZW5sbUxjOTlxc3NFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMktvQXF4V1ZHYWJXVm5EZW5sbUxjOTlxc3NFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjI3M0QvM0UyNjVFRkVBOEE5MTFFRkE1RTJDMkEwNzYy
RTk1MUEvQUVERjE0QTRFNDhEMTFFRjlCMUNBQjZFNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACwP6PggMA0GCSqGSIb3DQEB
CwUAA4IBAQBr5bbOq+28JdqeH9MK2pGOXETqUK4KU0ZguJquDw6X3Un4eeklPonh
JyrCPrptWdndSFASPkaWrE6W99iiSPyRe/3rxAIAKSbmqCjYSjV96djW5gbKEUS2
e2SORkNGJp9aXOh64J7ZrEq63GG+ULtG1yjWgKpu1oT3QeJ7LEsuFDIhffPjUSNV
bEIxxggDrOQqIlXcTqOD1nliSwFaAenhH4UuLqUnkOiJOV7Exgyy2yPvH2eTbFq4
RL9rWwhsy65tfvubpDOmcW5ph8IuovdRtiBQBuf0D1wdxK6b5qRDRv0bitTlYDbH
8tmb1N2Kg4OyNoirhouE23obE0yxVLsr
-----END CERTIFICATE-----
Generated at Tue Feb 11 03:42:40 2025 by rpki-client on console.sobornost.net