Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/68969C3443D311EFBED54274762E951A.roa
File: 68969C3443D311EFBED54274762E951A.roa (raw, json)
Hash identifier: 9j7Qf4aKj6gdyeKDumtdQXF1nD4oKdrXm68LcuStl9E=
Subject key identifier: 0D:F9:56:3B:17:14:73:A0:2C:9C:9A:D6:D0:DE:52:86:92:84:8D:24
Certificate issuer: /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial: 1F
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/68969C3443D311EFBED54274762E951A.roa
Signing time: Wed 17 Jul 2024 00:27:54 +0000
ROA not before: Wed 17 Jul 2024 00:00:50 +0000
ROA not after: Mon 01 Dec 2025 00:00:50 +0000
asID: 37140
IP address blocks: 197.191.1.0/24 maxlen: 24
197.191.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 00:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AF, serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Validity
Not Before: Jul 17 00:00:50 2024 GMT
Not After : Dec 1 00:00:50 2025 GMT
Subject: CN=6697100a-206d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:6f:49:83:20:bf:a3:99:ef:7b:38:41:54:
aa:73:a8:a6:30:ed:f0:d8:68:d0:b8:23:1a:8a:16:
50:46:d0:d7:9b:6d:ce:d0:7c:a8:c2:57:fb:8c:05:
80:93:ef:57:12:4b:aa:95:9f:b4:82:7c:a5:31:48:
13:b1:e7:26:de:5d:3e:e3:68:36:ca:b2:07:8d:1b:
69:2d:9d:72:53:83:32:6c:ea:ff:e6:49:a2:b7:9b:
f0:6e:24:88:a9:ad:dd:27:68:3e:f6:e8:92:5c:15:
a7:65:68:7d:38:a5:d9:5f:c2:ea:7d:2f:10:e0:c4:
b2:59:46:d9:12:28:47:29:2b:81:67:b9:b0:36:9a:
51:4a:13:04:86:7d:ab:94:b6:0f:04:d4:f0:66:64:
5e:50:be:6e:5b:db:69:48:52:23:af:aa:f0:aa:5b:
1b:80:18:0e:14:40:72:17:4b:c1:3f:5d:1c:64:33:
1c:28:26:93:be:07:62:ef:11:e8:2b:92:b7:0e:15:
72:a0:e3:f3:be:9d:6f:af:14:45:ba:e3:76:14:13:
b9:e9:2b:25:15:90:76:b5:27:86:f0:db:14:d9:ed:
a7:49:6b:b5:55:4a:b9:ea:7e:8a:ad:d9:63:88:1f:
cb:37:40:f7:c1:1e:4e:fa:aa:11:62:82:57:7f:09:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:56:3B:17:14:73:A0:2C:9C:9A:D6:D0:DE:52:86:92:84:8D:24
X509v3 Authority Key Identifier:
keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/68969C3443D311EFBED54274762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.191.1.0/24
197.191.3.0/24
Signature Algorithm: sha256WithRSAEncryption
be:4b:2a:f3:64:03:9c:ec:80:cd:6b:cd:0c:3b:0b:ba:5d:8a:
7e:34:a4:89:3b:a5:82:20:ad:57:9f:57:3b:52:fa:eb:cf:6d:
5d:9c:dd:f3:b5:e6:db:ef:8d:fb:05:16:9d:ee:11:91:43:5b:
3b:45:cc:f3:84:38:06:75:3b:a6:10:85:f3:5a:85:28:db:bb:
b8:ff:e8:fa:e9:45:ef:8f:c8:3b:ff:a9:9f:87:f4:69:ff:89:
22:af:e8:b8:6c:d6:73:a8:39:8d:d6:6d:4f:a9:c7:3d:dc:9f:
85:06:d9:21:26:63:c8:33:cf:fc:98:20:23:6c:7d:d0:34:d9:
41:c3:85:45:aa:49:9d:9a:d5:f8:df:11:8c:77:2f:7e:54:a1:
f0:f8:6f:4f:06:10:42:3f:39:09:10:87:d3:e1:c8:9f:e2:b1:
bf:51:bf:a6:39:83:fb:bc:01:31:59:cf:c4:b8:f7:fb:d4:01:
7f:58:ca:14:67:0e:74:5b:e1:d4:4e:8f:7e:3a:8e:ee:f8:b2:
1c:92:a6:77:28:d7:f3:61:dd:da:27:dc:2e:64:06:37:b5:85:
0a:89:a1:09:26:b8:1e:0a:3d:2d:8a:33:ea:91:13:40:68:17:
4f:3c:c6:c4:07:78:2e:bf:2d:14:a5:9f:93:af:71:45:77:a2:
a8:de:ad:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:30:48 2025 by rpki-client