Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/7932CB72EA2B11EF85D0D1A3762E951A.roa
File: 7932CB72EA2B11EF85D0D1A3762E951A.roa (raw, json)
Hash identifier: f+9ZD9DD63zgAcrwG+RcmBePg+pdEdY1cS6HUSDLIGE=
Subject key identifier: 71:33:7E:7D:10:43:F3:02:38:01:DE:99:EC:5D:97:DF:0D:5B:6F:81
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 4A
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/7932CB72EA2B11EF85D0D1A3762E951A.roa
Signing time: Thu 13 Feb 2025 16:56:31 +0000
ROA not before: Thu 13 Feb 2025 16:56:27 +0000
ROA not after: Sun 31 Dec 2028 16:56:27 +0000
asID: 30985
IP address blocks: 41.221.176.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 13 16:56:27 2025 GMT
Not After : Dec 31 16:56:27 2028 GMT
Subject: CN=67ae243f-0b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:f7:d6:55:05:47:48:5a:7c:a3:ff:0b:c6:
56:a7:40:49:c1:4c:a8:43:dd:e1:d3:11:21:5d:8b:
97:4d:66:10:26:af:c3:5f:26:90:13:29:6a:4f:17:
3d:e6:9b:14:45:05:b4:50:3d:d5:56:ed:f1:40:69:
66:fc:09:08:e9:f8:97:8e:47:7b:32:40:3f:7e:5b:
dd:1a:0e:b8:06:c0:7e:85:03:11:17:f5:09:12:c7:
ca:a0:c2:15:b6:44:5f:57:e4:a1:63:41:11:8f:32:
73:1c:74:e6:97:fe:fd:22:9f:17:63:32:5d:11:95:
ff:22:38:86:39:db:4a:94:0f:45:95:7d:d5:38:6e:
1e:e6:6a:ed:f4:98:a5:6f:e0:d3:99:5b:8b:8d:23:
4e:ba:35:cc:b1:ac:8c:4e:23:ed:7d:b6:cd:2d:6f:
7a:c4:1b:2d:96:e0:3c:23:e1:18:33:0e:7a:8b:5b:
4e:18:52:ab:f0:3c:a2:53:8e:03:d0:2c:02:43:08:
11:e8:ad:b0:cd:8b:1b:d4:24:96:cf:7b:10:17:24:
82:60:3f:62:dd:78:5d:63:89:aa:ab:41:24:94:ca:
52:5e:79:53:bf:d9:84:2d:84:d7:04:51:17:a2:a0:
58:a0:7c:17:f7:4e:33:db:fa:99:5b:80:72:ec:05:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:33:7E:7D:10:43:F3:02:38:01:DE:99:EC:5D:97:DF:0D:5B:6F:81
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/7932CB72EA2B11EF85D0D1A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.176.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:88:07:27:e0:54:d9:a8:b3:dd:c8:2f:e3:04:db:51:a0:33:
94:dc:5e:06:2a:fb:70:12:6a:dd:f5:6c:86:7e:cd:cd:32:0c:
8a:ff:12:eb:d1:81:7f:e6:1a:9a:f2:7f:47:c6:3b:1e:7e:a4:
20:39:ab:8b:38:8f:59:4b:95:4d:7c:a5:1b:9f:6d:4f:f2:8a:
40:31:8e:bf:90:f1:35:e4:bd:8c:35:33:fc:a3:f5:6e:a5:42:
b0:11:a4:43:31:81:20:40:79:49:33:bc:c0:c6:b9:f5:66:ca:
8a:1f:e8:24:17:26:57:94:22:1a:34:1b:34:de:43:fa:af:8e:
cf:c2:cc:68:3a:db:37:0f:8c:f2:4d:0c:86:d3:ef:c2:69:d8:
27:0d:84:45:60:3c:d7:e1:ac:57:4a:cd:a7:7e:9f:f6:19:63:
30:ba:de:5d:5b:af:30:ae:57:93:49:35:db:4a:21:ff:73:4f:
a2:76:b6:34:f7:e4:01:8f:d1:95:00:72:77:2f:1d:5e:38:16:
89:c3:80:42:8e:50:0e:25:bc:35:2b:ed:59:fe:07:10:c6:27:
34:6b:b7:9a:ea:4a:06:a4:86:17:60:38:d3:f3:4f:b8:22:04:
8f:11:c3:5a:4f:12:f7:e5:7c:f0:ab:47:ec:e6:20:83:12:c7:
af:d7:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:03:47 2025 by rpki-client