Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/7AE134EC7E1E11EEAAF848694AD9E6FC.roa
File: 7AE134EC7E1E11EEAAF848694AD9E6FC.roa (raw, json)
Hash identifier: X4BZUsUsVNWdsp0EfSGTmTFOsXNabGiqXOHHOO5MTjk=
Subject key identifier: 77:FA:5E:F3:2D:4C:18:86:0D:D8:C6:2D:F0:94:BC:78:45:14:C8:7D
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 01CD
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/7AE134EC7E1E11EEAAF848694AD9E6FC.roa
Signing time: Wed 08 Nov 2023 10:06:27 +0000
ROA not before: Wed 08 Nov 2023 10:06:24 +0000
ROA not after: Tue 09 Nov 2027 10:06:24 +0000
asID: 23764
IP address blocks: 2c0f:f7a8:9011::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 08 Nov 2023 10:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Nov 8 10:06:24 2023 GMT
Not After : Nov 9 10:06:24 2027 GMT
Subject: CN=654b5da3-59d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:46:64:5b:60:77:12:0f:e9:c2:28:96:74:
44:45:34:6b:4f:88:52:ef:49:24:3b:ff:6f:d5:e9:
c1:08:41:fe:98:c4:9a:4c:96:f4:9c:5f:c0:14:14:
5d:b9:55:95:4a:f2:ee:38:8a:54:8a:ed:91:cc:aa:
4e:f5:f0:05:4b:a0:a2:94:9f:51:e5:2f:58:1f:dd:
7f:2c:0b:d2:be:7f:c4:e0:43:6d:47:ff:17:ff:aa:
74:1a:1a:d0:fe:ff:e8:78:6c:29:12:f4:98:35:d3:
b9:e4:80:b8:4f:d8:be:07:09:5a:2d:53:48:15:4c:
1a:4e:b7:08:40:a5:11:34:09:b7:40:ae:b8:68:df:
aa:42:bf:3d:38:70:74:1d:1a:2c:2e:36:b2:53:28:
a5:4b:89:88:98:ce:57:2e:65:68:c5:e0:65:4f:e3:
38:f5:3c:0b:34:bd:e8:a3:1b:d7:e5:7f:5d:2f:93:
95:2d:3a:20:c5:c4:95:6d:61:1e:21:72:72:b0:d1:
a5:30:33:c1:df:6f:a1:58:a4:ad:8e:73:fa:23:2b:
6f:f3:8c:80:a2:bf:2a:c5:43:1c:b6:44:1e:df:63:
d4:f8:1c:cf:b1:c2:8e:4d:5c:5c:62:fa:87:0a:18:
cc:fc:ac:6e:f7:84:00:4f:be:64:97:3f:98:41:f4:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FA:5E:F3:2D:4C:18:86:0D:D8:C6:2D:F0:94:BC:78:45:14:C8:7D
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/7AE134EC7E1E11EEAAF848694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f7a8:9011::/48
Signature Algorithm: sha256WithRSAEncryption
62:75:17:bd:f0:84:a9:7c:2f:77:49:53:ac:e2:55:5b:2c:8a:
ef:0d:c9:2f:14:9b:29:d2:0d:83:06:ae:45:60:0a:c9:01:d6:
ee:b4:00:dd:85:1b:d2:88:e0:00:2e:fe:46:58:e9:ea:3f:ae:
e3:e0:ec:9d:8d:2a:3b:30:59:a6:46:fb:69:9d:52:cc:77:0a:
ad:f2:0e:8b:5c:a4:cc:19:d3:b4:55:1f:23:00:14:fc:e4:a0:
26:42:81:32:31:22:bc:f0:03:f0:03:39:80:f1:ec:41:d7:a9:
68:b8:95:9f:53:8c:d0:64:3c:97:c0:74:7d:aa:4f:83:a8:00:
fd:f8:55:b4:01:92:ed:d6:4c:6e:b6:e7:2e:bb:9d:63:40:ae:
06:5a:06:46:bd:0c:25:fe:b7:e6:cf:4d:cf:66:a6:98:5b:f4:
f0:bd:d0:e4:a0:16:d7:64:9d:70:db:6a:ab:5c:c2:d7:32:4a:
b0:0e:4e:76:a1:03:6e:ac:0c:d0:e9:35:73:a8:01:25:d6:8c:
19:4b:51:54:72:d5:92:7b:4a:56:61:21:f1:73:c4:12:a4:76:
fb:79:dd:97:f7:a9:ba:6b:80:00:6b:5f:ca:98:89:53:76:c7:
5f:92:1d:0c:d9:68:06:7c:57:52:00:ef:b3:da:f0:63:ed:44:
b5:94:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:38:48 2025 by rpki-client