Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/6D02BDA2EA2C11EFA4F30DAA762E951A.roa
File: 6D02BDA2EA2C11EFA4F30DAA762E951A.roa (raw, json)
Hash identifier: uNMn6am23QL379jIpMW3vx7XU+VfVsr8+HwS6VGCbo4=
Subject key identifier: 29:4F:9F:D7:49:0D:50:03:A0:52:34:C9:BB:10:E0:AF:E0:AC:4C:59
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 4E
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/6D02BDA2EA2C11EFA4F30DAA762E951A.roa
Signing time: Thu 13 Feb 2025 17:03:20 +0000
ROA not before: Thu 13 Feb 2025 17:03:16 +0000
ROA not after: Sun 31 Dec 2028 17:03:16 +0000
asID: 30985
IP address blocks: 2001:42c0:8003::/48 maxlen: 48
2001:42c0:8100::/40 maxlen: 40
2001:42c0:8200::/40 maxlen: 40
2001:42c0:8300::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 13 17:03:16 2025 GMT
Not After : Dec 31 17:03:16 2028 GMT
Subject: CN=67ae25d8-5bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:66:83:e6:33:a2:e9:b5:f3:90:e9:e2:04:
e7:62:f0:1b:ea:9f:3f:f8:d6:07:a0:84:7f:03:14:
a9:92:08:00:2d:54:93:23:f9:f8:a4:54:98:dd:8d:
1d:82:01:93:a2:f8:b4:04:b1:d2:3d:70:b0:b5:63:
0c:3c:a4:ac:05:f4:e7:48:d3:e7:c1:e6:e1:b6:8a:
7c:7c:55:59:60:64:79:65:6b:6a:e6:0a:cb:e0:63:
0a:93:4a:b6:87:19:18:a8:06:ec:d5:12:18:4e:a6:
d9:c2:72:23:fb:bf:61:eb:d8:b7:1f:90:9d:17:a9:
28:4c:db:10:f5:91:83:e6:02:f9:7b:d1:02:47:6e:
d6:5f:40:f3:19:9f:2e:45:2d:6f:6e:74:f6:5d:1c:
92:b1:ca:29:3c:cd:b6:4b:23:96:16:6b:4c:38:50:
13:49:52:25:58:39:d1:f7:b3:5a:d0:1d:f9:2c:bd:
eb:70:bc:42:e0:dc:79:eb:dd:4c:57:91:de:d0:d2:
2e:ff:fb:76:98:a9:18:37:87:eb:c7:40:09:ce:e0:
d7:04:86:9a:bd:7a:2b:c7:cd:26:01:28:34:57:67:
23:5b:10:65:17:33:da:8d:bc:dc:36:be:39:1b:9c:
ad:94:af:8b:44:6a:86:eb:cf:74:48:f1:68:ba:15:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4F:9F:D7:49:0D:50:03:A0:52:34:C9:BB:10:E0:AF:E0:AC:4C:59
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/6D02BDA2EA2C11EFA4F30DAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:42c0:8003::/48
2001:42c0:8100::-2001:42c0:83ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ae:00:89:6d:d1:ac:6c:70:cb:9f:80:9c:96:ea:67:7e:39:b7:
a8:d5:7d:40:4f:24:5c:33:78:ac:88:a7:b9:5b:d2:c5:b2:1c:
2f:e2:d6:59:e7:7f:3a:9d:79:81:20:b2:53:76:95:47:cf:2b:
aa:75:e4:99:27:e0:e8:58:d9:be:88:af:88:88:51:37:2e:61:
53:71:1f:51:08:65:87:43:02:07:f4:ff:d4:d0:93:09:2f:6d:
1a:ba:b7:37:37:d4:f0:64:b6:1e:95:ad:20:27:e0:13:17:f2:
87:4a:ee:d8:b2:a3:e9:d7:67:76:46:04:3b:bc:54:a0:5d:6b:
3e:52:6b:11:6b:a0:67:fc:95:c5:53:ca:46:e0:9c:63:5c:35:
e7:7e:92:cf:1f:0f:ae:1d:1c:e4:94:32:ea:bf:6a:53:ac:e0:
d5:b4:dd:7e:ab:17:6e:2a:c5:64:09:34:c8:6c:c6:49:49:44:
e3:a9:c4:f9:34:0e:77:1f:42:d3:f6:e4:73:f8:84:62:3b:4d:
49:c7:5d:e9:5c:93:1a:6b:e7:c3:9b:a6:36:a4:d7:a9:bb:d6:
c8:6a:db:c3:48:35:b5:cb:a0:4b:61:48:2c:3c:06:8b:5b:8f:
72:20:a0:3b:0f:5f:88:26:bc:cb:24:00:a1:35:7f:fa:a2:24:
8b:45:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:58:19 2025 by rpki-client