Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/90CF2FECE92111EFA9D1B669762E951A.roa
File: 90CF2FECE92111EFA9D1B669762E951A.roa (raw, json)
Hash identifier: MgVL3Cx0QnXbuPCzi85FbtN2e6nLEhjuL4FYjI6USDY=
Subject key identifier: 07:91:B0:CE:80:29:84:C9:98:9E:BE:47:5B:5F:A8:99:33:01:13:1C
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 35
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/90CF2FECE92111EFA9D1B669762E951A.roa
Signing time: Wed 12 Feb 2025 09:13:04 +0000
ROA not before: Wed 12 Feb 2025 09:13:01 +0000
ROA not after: Sun 31 Dec 2028 09:13:01 +0000
asID: 30985
IP address blocks: 41.73.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 12 09:13:01 2025 GMT
Not After : Dec 31 09:13:01 2028 GMT
Subject: CN=67ac6620-d606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:32:d1:03:4d:da:79:2b:f5:3c:10:d7:22:
2b:73:45:a7:65:17:4a:c0:7f:00:1d:db:2c:4a:c6:
9c:c7:d7:cb:25:e3:5d:bd:5b:db:63:ad:08:5b:a1:
c9:0b:72:c1:96:5a:3a:55:7c:d7:9f:b4:6c:6b:73:
0f:13:fd:93:46:61:dc:ef:ce:de:85:ea:00:c0:78:
53:a1:6e:42:25:7a:03:89:f4:9a:a3:3d:09:01:b3:
ff:0d:d6:7a:41:ce:dc:55:92:2c:a7:21:23:ef:6c:
b0:52:19:91:1a:6d:9f:6e:fd:db:16:6b:71:4f:23:
bb:94:a9:6c:97:37:0e:d0:27:29:01:d6:5d:64:d8:
84:7a:47:72:27:61:a0:a8:be:51:db:3e:75:10:f3:
04:03:dc:cc:13:f7:4f:c6:54:9a:a4:5b:72:7a:3f:
53:ca:b3:f2:ba:bd:29:f5:ee:34:5a:0a:2f:dd:95:
9f:90:b3:62:dd:f1:5d:9a:6a:3e:58:4e:86:b3:bf:
a6:cb:33:82:16:e2:95:a6:e9:dc:85:e6:a7:0f:3e:
dc:0d:4f:a0:97:0d:c5:97:5d:2e:50:ac:a2:18:1b:
4d:98:18:59:4b:f9:85:f6:61:e0:7c:26:13:39:16:
d0:96:f4:6e:9c:32:3a:7b:17:f9:20:ee:b4:08:bb:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:91:B0:CE:80:29:84:C9:98:9E:BE:47:5B:5F:A8:99:33:01:13:1C
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/90CF2FECE92111EFA9D1B669762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.96.0/19
Signature Algorithm: sha256WithRSAEncryption
40:c0:84:80:59:46:f0:ed:75:04:48:96:68:5f:75:38:c4:90:
4f:c1:ee:65:a4:b9:44:89:ea:53:a2:58:3b:3f:c5:59:f7:ca:
44:fe:2d:00:7a:38:55:b9:ca:f9:1a:76:12:ff:48:96:c5:3d:
76:d1:c0:b8:20:4f:13:c2:bf:7b:c3:5b:76:98:81:58:a2:65:
0d:54:62:19:65:77:7f:f5:d4:b5:4f:87:d1:c5:8f:e8:03:98:
84:73:fe:aa:e6:fc:63:04:00:fa:6d:e1:14:f1:2b:3f:8f:e0:
f8:a4:e9:66:29:8c:ee:2d:39:6c:cc:8a:4b:f4:53:6f:e3:27:
08:77:80:9f:f0:b5:55:2a:4c:31:af:dd:31:9f:59:d9:40:aa:
49:71:0d:7f:1e:ab:c4:38:77:29:77:24:f0:1b:21:86:a6:be:
a3:c9:e2:8b:53:db:15:b5:33:42:e1:b5:a4:c6:d7:a1:29:54:
ef:dc:4c:bb:4f:2d:51:69:99:72:ff:4e:02:2a:04:0b:dd:96:
4d:a5:79:81:6b:a0:72:5a:a1:5d:59:b3:f3:33:db:85:18:56:
85:86:59:8c:76:e7:27:db:a2:e7:95:d0:36:05:dc:05:3a:e8:
13:dd:40:65:1f:fb:a5:8f:eb:87:cc:55:3a:bf:d9:8f:5e:03:
83:3e:39:12
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBNTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
Q0Q3MkFGMTEwLwYDVQQFEyg3NzA4RTY2RjFDMDdDMUQ3NjcwQUVCREJBRTE4NkRB
NDJCQ0IzMEM3MB4XDTI1MDIxMjA5MTMwMVoXDTI4MTIzMTA5MTMwMVowGDEWMBQG
A1UEAxMNNjdhYzY2MjAtZDYwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMbgMtEDTdp5K/U8ENciK3NFp2UXSsB/AB3bLErGnMfXyyXjXb1b22OtCFuh
yQtywZZaOlV815+0bGtzDxP9k0Zh3O/O3oXqAMB4U6FuQiV6A4n0mqM9CQGz/w3W
ekHO3FWSLKchI+9ssFIZkRptn2792xZrcU8ju5SpbJc3DtAnKQHWXWTYhHpHcidh
oKi+Uds+dRDzBAPczBP3T8ZUmqRbcno/U8qz8rq9KfXuNFoKL92Vn5CzYt3xXZpq
PlhOhrO/psszghbilabp3IXmpw8+3A1PoJcNxZddLlCsohgbTZgYWUv5hfZh4Hwm
EzkW0Jb0bpwyOnsX+SDutAi7/zUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQHkbDO
gCmEyZievkdbX6iZMwETHDAfBgNVHSMEGDAWgBR3COZvHAfB12cK69uuGG2kK8sw
xzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYyRTk1MUEvZHdqbWJ4
d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZHdqbWJ4d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYy
RTk1MUEvOTBDRjJGRUNFOTIxMTFFRkE5RDFCNjY5NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBSlJYDANBgkqhkiG9w0BAQsF
AAOCAQEAQMCEgFlG8O11BEiWaF91OMSQT8HuZaS5RInqU6JYOz/FWffKRP4tAHo4
VbnK+Rp2Ev9IlsU9dtHAuCBPE8K/e8NbdpiBWKJlDVRiGWV3f/XUtU+H0cWP6AOY
hHP+qub8YwQA+m3hFPErP4/g+KTpZimM7i05bMyKS/RTb+MnCHeAn/C1VSpMMa/d
MZ9Z2UCqSXENfx6rxDh3KXck8Bshhqa+o8nii1PbFbUzQuG1pMbXoSlU79xMu08t
UWmZcv9OAioEC92WTaV5gWugclqhXVmz8zPbhRhWhYZZjHbnJ9ui55XQNgXcBTro
E91AZR/7pY/rh8xVOr/Zj14Dgz45Eg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:27:32 2025 by rpki-client