Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/FCEEBB76E7C711EFA4274198762E951A.roa
File: FCEEBB76E7C711EFA4274198762E951A.roa (raw, json)
Hash identifier: BKnsilZ1XZ+y8rWDdkK8rE68vmoNt8jQ4bfdnIA9l18=
Subject key identifier: 6C:6C:F4:1C:1D:6A:20:F5:B5:1F:05:9E:4B:21:C4:86:45:B8:C2:C8
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 25
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/FCEEBB76E7C711EFA4274198762E951A.roa
Signing time: Mon 10 Feb 2025 15:59:20 +0000
ROA not before: Mon 10 Feb 2025 15:59:16 +0000
ROA not after: Sun 31 Dec 2028 15:59:16 +0000
asID: 30985
IP address blocks: 2001:42c0:3000::/48 maxlen: 48
2001:42c0:8f00::/40 maxlen: 40
2001:42c0:9300::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 12:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 10 15:59:16 2025 GMT
Not After : Dec 31 15:59:16 2028 GMT
Subject: CN=67aa2258-1a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:29:c9:10:bb:d6:06:16:3a:44:27:41:f4:
a0:ca:62:7d:65:93:d9:3f:65:f7:38:da:74:4a:70:
8e:9b:ad:1e:6f:28:1c:62:0e:62:00:4d:43:6c:df:
52:f4:33:73:56:64:4e:4d:d1:b7:d1:dd:58:58:e5:
91:7a:43:5a:fb:98:3e:14:ed:8a:a9:ef:61:ce:42:
12:8f:b2:69:de:92:6e:05:bf:61:b7:1e:66:7f:47:
14:48:ad:fb:58:66:9d:a4:d8:ed:ed:74:f5:68:b1:
de:3d:50:42:e8:30:0c:38:7c:ba:1f:6f:5f:34:f9:
8f:d1:f9:f1:e6:eb:ea:79:9f:e6:21:f9:4f:a9:24:
9b:b0:e9:86:cd:4b:db:fb:a9:4e:e3:a5:41:d8:72:
19:7a:f4:eb:0c:99:e9:66:d9:ee:9c:f6:67:02:e3:
e2:30:e2:0c:0b:64:82:e8:98:db:09:4b:3d:cd:98:
a6:10:b5:9f:aa:8e:4a:78:79:74:16:a3:41:34:c5:
9f:31:75:aa:a1:e7:71:96:62:22:10:c2:f1:b6:3a:
d2:0a:a8:21:7d:a8:fa:db:13:c9:b5:6b:35:0a:f3:
ed:7f:5d:29:81:4b:7f:05:a0:da:b8:0d:e7:8a:b1:
fc:e9:cf:81:ff:5c:44:c2:45:7d:e4:5c:10:10:05:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6C:F4:1C:1D:6A:20:F5:B5:1F:05:9E:4B:21:C4:86:45:B8:C2:C8
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/FCEEBB76E7C711EFA4274198762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:42c0:3000::/48
2001:42c0:8f00::/40
2001:42c0:9300::/48
Signature Algorithm: sha256WithRSAEncryption
9f:a4:9a:96:76:38:47:a5:0b:5d:cd:04:e8:6e:9c:e8:db:92:
a3:a0:1d:da:f9:12:0a:94:53:32:c3:70:2b:6d:c1:c2:47:89:
bc:41:f4:e7:59:df:2f:58:12:ea:a0:8d:56:fa:b2:9f:c6:c0:
04:51:f9:c6:0d:2d:c2:54:33:12:7d:8c:31:26:39:e4:e5:a5:
86:c6:57:78:8c:30:15:df:52:69:49:4f:64:19:c9:43:6d:f1:
36:7f:3b:41:0a:04:d0:fe:4d:7d:c1:9b:89:6e:a7:d9:6e:d6:
a2:50:5c:5f:fb:3b:37:eb:05:2d:38:a2:f4:ce:0f:18:de:85:
cd:20:88:b0:94:67:95:90:4e:b3:52:d5:b1:7c:ea:24:e8:5f:
fe:30:ce:ca:19:5c:f0:00:48:96:dd:17:41:3f:f4:32:3a:92:
23:0b:57:4a:2d:98:8f:45:c8:a8:73:42:b4:13:4f:d2:b5:68:
e2:db:d9:36:10:0e:d1:2f:a0:71:d2:5c:24:92:c4:03:ed:6b:
39:4b:f9:9f:a7:ce:7d:74:14:48:8d:a2:b4:56:d9:eb:e8:54:
61:74:4a:e7:bd:ae:73:4b:9d:68:71:32:76:b5:a0:6c:c4:4b:
6d:ce:08:26:fc:f2:74:08:34:d5:57:21:2e:1c:b7:bc:c5:4a:
0b:c6:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:15:26 2025 by rpki-client