Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/4F9BC03EEA2B11EF8EE803A2762E951A.roa
File: 4F9BC03EEA2B11EF8EE803A2762E951A.roa (raw, json)
Hash identifier: Rc4umuVsTic/1V0QZxjOub2OfE4lnTj7ybpKXyBpfhM=
Subject key identifier: 61:75:A6:45:BC:37:71:C3:A2:1C:37:2D:9A:9B:84:14:61:C2:E6:2C
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 48
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/4F9BC03EEA2B11EF8EE803A2762E951A.roa
Signing time: Thu 13 Feb 2025 16:55:21 +0000
ROA not before: Thu 13 Feb 2025 16:55:17 +0000
ROA not after: Sun 31 Dec 2028 16:55:17 +0000
asID: 30985
IP address blocks: 197.155.128.0/18 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 13 16:55:17 2025 GMT
Not After : Dec 31 16:55:17 2028 GMT
Subject: CN=67ae23f9-48ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:3c:43:0d:6f:0f:ad:64:8d:32:5c:07:05:
e1:7e:50:cd:6a:3f:19:0f:69:42:1b:5a:78:23:1b:
cb:67:bc:31:96:60:95:14:c3:0c:74:f2:06:d5:d9:
a7:94:1a:48:e9:ee:1c:bf:a2:a6:d9:1b:85:be:e3:
e6:7c:3b:29:b3:6b:73:f0:ee:e2:27:64:16:05:2e:
07:8b:35:18:81:8c:ff:b1:01:49:b3:04:00:f0:f3:
29:0b:55:32:eb:77:0d:18:d9:53:53:0f:ab:bd:08:
ed:c3:e2:f7:fd:90:34:2f:c6:e1:7c:cf:79:93:f0:
5e:39:d1:dd:f8:11:5f:db:db:91:c5:88:93:2f:12:
e3:ff:3e:1a:ca:6d:f8:94:89:89:2e:ce:dc:6e:f5:
ad:28:46:b7:63:37:9c:82:67:f7:fc:f3:06:d6:6e:
81:f8:58:80:d2:76:1f:9f:b1:45:72:ab:c6:fa:a3:
e0:38:2d:30:85:ef:5c:93:ac:3f:82:76:0d:72:38:
94:7b:f6:fa:cb:d3:f5:c4:cc:e1:c6:f2:ea:40:b4:
fc:12:f2:46:db:6e:ec:6e:4f:51:26:57:a3:c0:87:
79:c4:44:95:bf:cc:ae:ae:72:29:2b:a8:1a:b9:17:
b0:b5:aa:8a:c5:0a:27:fb:61:01:dc:82:b1:ea:ff:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:75:A6:45:BC:37:71:C3:A2:1C:37:2D:9A:9B:84:14:61:C2:E6:2C
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/4F9BC03EEA2B11EF8EE803A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.155.128.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:67:c8:6b:c4:29:7a:fd:7b:d6:f8:ae:aa:9d:9b:46:33:c8:
b3:9a:1b:dd:63:9f:e6:be:06:11:cb:c5:c9:78:47:ad:90:2b:
05:3d:da:97:7a:d2:46:bd:60:83:fa:de:41:50:c6:3b:69:de:
2b:5e:7e:64:e5:bc:9c:0e:cf:55:02:4a:04:ef:2f:6e:1a:e9:
c4:68:1c:55:d8:a6:5a:23:91:75:7f:b3:60:9a:1b:e9:16:ca:
64:ec:04:c3:89:90:26:57:45:0f:51:e0:b0:82:16:46:66:90:
05:a8:e9:f9:c1:88:3e:f9:25:eb:54:dd:0c:52:d3:34:59:c5:
1f:86:99:17:c2:47:36:2b:91:e3:68:2d:f1:ff:8f:c9:47:6d:
18:2f:19:e7:74:c9:e9:6a:70:bf:23:ab:3c:85:2c:75:55:33:
11:ba:57:2f:ad:2a:09:51:2a:b2:ab:56:31:ba:2d:b1:66:69:
11:71:2a:9e:0f:8f:82:b7:8f:bb:ad:d9:30:16:63:37:4f:76:
12:67:67:cc:f3:5d:95:8a:25:3b:35:14:ad:e1:09:2f:c8:d3:
dd:f6:54:52:1e:35:06:d8:10:37:0c:84:f7:67:1d:68:6b:95:
47:64:ac:28:16:20:63:3a:55:8a:38:42:6c:a6:98:3c:67:ce:
41:57:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:17:16 2025 by rpki-client