Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/9FA8606EEA2B11EFBA049CA5762E951A.roa
File: 9FA8606EEA2B11EFBA049CA5762E951A.roa (raw, json)
Hash identifier: /eIUrNjZ0RfTrx1LD2lxhDRRKUrMEDywlUDpuyHv5Ww=
Subject key identifier: 9B:0D:32:27:7B:9C:D0:4E:FD:66:FE:2E:1A:F3:9D:50:F8:2E:EF:96
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 4C
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/9FA8606EEA2B11EFBA049CA5762E951A.roa
Signing time: Thu 13 Feb 2025 16:57:36 +0000
ROA not before: Thu 13 Feb 2025 16:57:31 +0000
ROA not after: Sun 31 Dec 2028 16:57:31 +0000
asID: 30985
IP address blocks: 196.200.80.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 13 16:57:31 2025 GMT
Not After : Dec 31 16:57:31 2028 GMT
Subject: CN=67ae247f-d3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:45:f9:4d:a7:0c:64:4c:b6:5e:1d:8d:30:
d5:1f:0d:71:2f:12:12:98:bd:ea:df:fb:6d:67:d7:
8a:05:0e:3b:0b:f7:c7:fa:cb:5c:de:37:ee:2b:2d:
e9:38:97:81:52:5d:5a:5b:f0:21:fa:18:2f:cc:c0:
09:00:4e:02:f7:6a:e3:2a:9b:d2:67:f4:7e:53:f3:
3a:70:55:38:fe:9f:cb:6a:70:41:75:47:ed:7d:c2:
75:7f:d4:49:9c:28:2a:1d:d6:c7:42:02:da:c8:6e:
9d:8d:a5:63:ab:cc:4e:f4:59:d2:87:ef:b4:6e:d0:
d5:a4:67:ca:ee:12:78:08:55:db:04:9f:dc:30:2e:
2a:e3:ec:88:de:4d:60:23:8f:3b:64:fa:65:d2:cb:
26:e7:83:2f:e5:c4:cf:c4:fe:9f:d9:30:d6:9f:56:
0e:81:e7:47:be:c1:a2:d1:0c:bd:c3:c9:0e:5f:bf:
03:67:c2:46:63:cf:c9:74:62:d8:94:0b:63:5c:3e:
74:e9:54:10:82:0c:85:b2:a8:ff:09:1d:92:be:5a:
79:04:68:04:37:f0:a1:8e:79:6c:16:0b:c9:e3:fd:
9d:a7:7b:1b:41:66:62:a5:17:48:92:57:cb:94:8b:
58:9e:da:bc:1b:2b:2f:f4:fd:5b:25:35:d1:72:27:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:32:27:7B:9C:D0:4E:FD:66:FE:2E:1A:F3:9D:50:F8:2E:EF:96
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/9FA8606EEA2B11EFBA049CA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:1c:19:b6:81:fa:d4:67:95:f7:2f:cc:1b:ad:0b:87:be:a4:
d6:14:85:92:ab:74:bb:ff:76:75:2e:bb:21:21:9d:67:29:45:
30:9e:8c:85:5b:4f:40:ea:f3:09:2c:69:cc:08:c4:21:41:23:
d3:05:e6:5c:2d:fd:18:4b:fb:bc:bb:6d:e1:7f:be:9c:3c:22:
ab:6d:d7:f4:23:06:95:4b:e8:e8:d4:2e:cf:1f:44:39:23:95:
0f:8b:f5:c3:24:4e:e0:65:93:c6:6d:1e:24:d2:91:e8:45:77:
9a:fb:2b:ad:cb:ad:e9:f2:8c:9b:30:05:15:50:a1:9b:f6:9e:
07:99:84:01:3c:79:fb:48:d9:52:25:44:a8:00:83:95:c6:c9:
ac:d4:36:4c:b0:74:b0:b7:8f:dc:2c:fd:5c:5e:8a:20:58:67:
db:8d:91:7f:06:ad:8c:ea:11:dd:d5:a7:9c:ce:0f:2e:85:d8:
6b:c8:4d:53:93:16:17:3c:6c:57:fa:fc:75:00:35:9a:5b:24:
d3:f7:41:6b:ae:fd:c6:6e:0d:dd:7f:bc:78:fc:7a:a4:3f:f6:
a1:3e:67:dd:3d:e2:02:da:85:02:ea:b0:7f:0c:cc:0e:4b:78:
1c:33:02:bb:ff:16:1d:c2:44:fd:63:7e:43:a1:6d:26:ca:8c:
23:d1:64:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:12:27 2025 by rpki-client