Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/54067276485511F0A4FD35BADAE4EC9C.roa
File: 54067276485511F0A4FD35BADAE4EC9C.roa (raw, json)
Hash identifier: chgOGWae5C3GylUvF5ZPlpFW5T/eFVXoJTQQvc/KcCQ=
Subject key identifier: C0:6C:82:A1:79:80:A3:6B:8F:86:EC:E8:E4:DF:59:FE:39:5D:5B:A7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B42
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/54067276485511F0A4FD35BADAE4EC9C.roa
Signing time: Fri 13 Jun 2025 12:52:57 +0000
ROA not before: Fri 13 Jun 2025 12:52:52 +0000
ROA not after: Tue 13 Jan 2026 12:52:52 +0000
asID: 329007
IP address blocks: 102.135.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 07:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2882 (0xb42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 13 12:52:52 2025 GMT
Not After : Jan 13 12:52:52 2026 GMT
Subject: CN=684c1f29-07f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:37:ab:3c:fa:b7:9c:2e:ae:37:6f:5e:6f:
9f:70:a9:02:7c:ec:24:da:cb:02:15:2c:c8:05:e9:
b0:47:ce:0f:61:7a:47:14:d4:64:5c:1d:48:ab:19:
ce:0d:62:c7:da:9f:a2:6d:13:d6:50:56:1b:09:e8:
e8:87:fb:57:66:9e:30:2b:17:84:3d:1b:3e:b0:7b:
6c:53:df:a7:01:1c:27:31:58:a6:32:d5:55:80:4c:
08:d2:80:38:97:48:b3:f1:a9:e1:3b:91:86:fc:45:
f6:2c:0a:ea:31:a8:8e:0c:f0:dc:a5:1b:4f:8c:f3:
1a:e3:2a:5d:c6:09:8c:c9:c5:b8:34:22:e8:05:c3:
2d:13:49:55:60:38:13:70:00:f0:56:d5:10:f1:c8:
4e:17:0d:01:33:e5:56:0d:81:c0:c9:49:b1:07:7b:
0c:62:e3:3b:4e:6e:ed:03:3c:48:0d:36:94:b9:5f:
16:3e:52:4b:08:0e:dc:2a:91:88:45:67:c0:23:c9:
c5:fe:c2:a8:57:b5:53:ea:31:a0:2e:e4:e1:46:d0:
4f:7c:bc:8a:be:78:fc:ef:ec:17:00:cd:b5:d8:da:
4d:a7:5f:e2:42:5c:32:68:cd:84:d7:3d:a6:e3:ab:
2a:a0:22:eb:93:bf:7a:64:ba:a2:06:0a:0e:74:63:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:82:A1:79:80:A3:6B:8F:86:EC:E8:E4:DF:59:FE:39:5D:5B:A7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/54067276485511F0A4FD35BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a4:8c:9b:7e:1b:2f:69:a9:cb:b4:da:bc:ba:98:30:e1:82:
5a:8a:71:0a:78:7c:5f:47:5a:6c:26:0f:9d:4e:b7:ba:b6:cb:
2d:99:76:37:f1:99:fe:ba:2f:e3:f7:9a:97:d3:ac:f6:03:8e:
c5:18:71:7e:7b:d7:53:95:5a:e5:9b:1b:dc:3b:63:d0:84:df:
38:cf:fe:73:e3:fc:f5:d5:6b:d7:57:a6:07:97:5f:2f:21:22:
84:43:43:32:17:2d:b9:1b:c4:87:35:82:4d:f6:39:e8:72:a6:
84:70:59:f9:9b:f7:0d:2b:36:ef:68:65:cb:6b:2f:32:b3:84:
91:f0:0f:72:87:b8:52:6e:64:a1:c1:6e:7b:22:89:5f:0a:1e:
33:90:cf:de:85:0a:21:e4:3e:80:f4:e1:40:8e:69:57:2f:20:
20:9e:c3:30:75:e7:0f:95:d3:fb:58:e2:06:5a:c5:a7:01:85:
dc:90:77:83:49:b5:03:92:63:6f:12:9a:37:43:35:22:f2:79:
01:fd:7d:e7:6a:24:bb:4b:3e:a4:f6:75:f6:19:dc:ce:16:13:
9b:ec:74:0c:6c:31:a0:c9:82:09:80:8b:7f:a0:fb:f0:d5:b2:
34:6b:93:72:30:7b:89:e6:82:c0:06:14:81:e9:54:d9:bd:cf:
a3:ed:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:33 2025 by rpki-client