Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1C615A12E85011EF9DBED694762E951A.roa
File: 1C615A12E85011EF9DBED694762E951A.roa (raw, json)
Hash identifier: eKriv8XJIWDTsmpy/lYspOs288bzGr2CgFNl3PedYLc=
Subject key identifier: 0B:82:8C:59:5C:EC:BB:A5:3A:7C:63:74:D0:BF:3D:0F:67:66:63:F3
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05D5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1C615A12E85011EF9DBED694762E951A.roa
Signing time: Tue 11 Feb 2025 08:13:44 +0000
ROA not before: Tue 11 Feb 2025 08:13:40 +0000
ROA not after: Wed 11 Feb 2026 08:13:40 +0000
asID: 401109
IP address blocks: 196.251.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 13:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Feb 11 08:13:40 2025 GMT
Not After : Feb 11 08:13:40 2026 GMT
Subject: CN=67ab06b8-63fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:34:34:bb:d3:f8:e6:ff:2e:69:c1:33:8f:
8f:e6:89:14:31:17:6a:69:f6:50:46:44:1b:73:95:
1e:2c:ef:d6:3e:94:a9:17:a8:e3:f6:07:3b:fa:23:
0c:a8:54:3d:e9:af:9b:0e:f0:10:ef:b7:d7:a8:71:
9f:68:a8:0f:87:7e:c2:a6:3c:8a:a9:9a:64:fd:4b:
bd:49:2e:ae:cc:54:22:14:1e:b1:f2:e5:e0:50:29:
01:16:df:eb:03:d8:50:0e:c2:e5:2f:25:81:76:0f:
b5:ce:f0:1c:ee:04:0b:23:6a:11:fe:d4:c0:20:68:
c0:3a:c6:64:0d:92:81:3d:1e:09:da:8b:f7:5b:05:
f8:78:80:c9:e9:39:34:be:7f:fa:ac:3a:1e:0c:6e:
8b:13:5f:3c:7c:34:4c:95:2a:7d:2e:51:da:e7:c8:
1f:79:15:fc:65:09:5d:b0:6b:02:40:92:97:44:38:
03:f0:ae:de:86:6d:70:b5:5d:65:2e:43:8a:70:5d:
af:4c:b5:ec:fe:c2:09:81:02:84:54:41:bf:7e:aa:
97:f4:c3:38:24:91:2a:7a:85:39:c6:cb:db:3e:54:
b0:ea:b3:51:5b:4b:43:95:38:ac:cf:e4:e8:68:1f:
70:53:10:3c:a6:d7:de:cf:78:8f:73:3e:44:d9:92:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:82:8C:59:5C:EC:BB:A5:3A:7C:63:74:D0:BF:3D:0F:67:66:63:F3
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1C615A12E85011EF9DBED694762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:c4:c7:80:cc:7c:49:49:41:d9:53:56:23:4f:b8:49:7c:77:
50:19:29:84:dc:39:a2:f5:58:5b:fb:ea:ad:d6:0b:6b:ca:80:
cd:39:a2:12:18:c8:f2:3f:e8:5f:ad:28:f3:5c:d6:ce:0b:37:
33:dc:dd:b8:36:e5:18:69:f4:86:ac:0f:94:7c:c1:0f:d0:fd:
57:f7:27:7e:28:cc:e2:b9:c5:b8:e4:80:44:fb:eb:3a:55:f7:
be:c2:65:2f:f4:7e:51:d2:cb:45:61:b0:c0:71:d3:83:a6:27:
52:3a:87:b9:dd:1f:20:45:a7:ac:6b:ba:e2:b1:b7:63:d0:c2:
ac:45:aa:d5:26:79:bd:c2:44:3b:46:f4:c6:8a:b0:fc:04:3a:
90:1c:06:a0:4e:e3:22:52:46:b3:db:60:02:29:6d:ef:c0:4f:
9a:8a:a3:db:fe:96:81:3f:16:29:56:88:d2:ae:6c:26:50:a6:
2c:56:91:d7:da:4b:9c:45:98:0a:0e:50:ec:7e:5c:1e:8b:e5:
77:1a:c9:d4:60:71:58:ea:13:8f:32:df:2f:6d:95:51:76:83:
bb:43:fd:43:d2:4b:71:4e:42:5c:30:db:a3:43:70:28:ed:f6:
09:84:4d:d2:ff:fa:9a:b7:5b:59:0a:68:5d:e3:8f:7b:72:46:
9a:8a:11:4f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAyMTEwODEzNDBaFw0yNjAyMTEwODEzNDBaMBgxFjAU
BgNVBAMTDTY3YWIwNmI4LTYzZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFFDQ0u9P45v8uacEzj4/miRQxF2pp9lBGRBtzlR4s79Y+lKkXqOP2Bzv6
IwyoVD3pr5sO8BDvt9eocZ9oqA+HfsKmPIqpmmT9S71JLq7MVCIUHrHy5eBQKQEW
3+sD2FAOwuUvJYF2D7XO8BzuBAsjahH+1MAgaMA6xmQNkoE9Hgnai/dbBfh4gMnp
OTS+f/qsOh4MbosTXzx8NEyVKn0uUdrnyB95FfxlCV2wawJAkpdEOAPwrt6GbXC1
XWUuQ4pwXa9Mtez+wgmBAoRUQb9+qpf0wzgkkSp6hTnGy9s+VLDqs1FbS0OVOKzP
5OhoH3BTEDym197PeI9zPkTZkviDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUC4KM
WVzsu6U6fGN00L89D2dmY/MwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzFDNjE1QTEyRTg1MDExRUY5REJFRDY5NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+1wwDQYJKoZIhvcNAQEL
BQADggEBALnEx4DMfElJQdlTViNPuEl8d1AZKYTcOaL1WFv76q3WC2vKgM05ohIY
yPI/6F+tKPNc1s4LNzPc3bg25Rhp9IasD5R8wQ/Q/Vf3J34ozOK5xbjkgET76zpV
977CZS/0flHSy0VhsMBx04OmJ1I6h7ndHyBFp6xruuKxt2PQwqxFqtUmeb3CRDtG
9MaKsPwEOpAcBqBO4yJSRrPbYAIpbe/AT5qKo9v+loE/FilWiNKubCZQpixWkdfa
S5xFmAoOUOx+XB6L5XcaydRgcVjqE48y3y9tlVF2g7tD/UPSS3FOQlww26NDcCjt
9gmETdL/+pq3W1kKaF3jj3tyRpqKEU8=
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:22:47 2025 by rpki-client