Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6CFEB4F24A9C11F0A219278DDAE4EC9C.roa
File: 6CFEB4F24A9C11F0A219278DDAE4EC9C.roa (raw, json)
Hash identifier: I3s6+y7he884QR0qXVOzYpJkca+nPSkfRmaPcsPvxMM=
Subject key identifier: 04:F9:9D:F7:22:41:28:2E:EF:92:19:68:E0:1B:7A:BD:D2:2C:DD:16
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B65
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6CFEB4F24A9C11F0A219278DDAE4EC9C.roa
Signing time: Mon 16 Jun 2025 10:26:56 +0000
ROA not before: Mon 16 Jun 2025 10:26:50 +0000
ROA not after: Tue 01 Dec 2026 10:26:50 +0000
asID: 29802
IP address blocks: 102.135.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 17 Jun 2025 10:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2917 (0xb65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 16 10:26:50 2025 GMT
Not After : Dec 1 10:26:50 2026 GMT
Subject: CN=684ff170-353c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:de:18:13:dc:7e:6a:6d:32:b8:02:a2:ac:
d2:1f:92:88:91:97:c0:a6:59:e1:85:d8:03:7b:47:
9c:10:ab:2c:9c:19:94:f4:99:53:a2:1e:9f:4c:e8:
7b:42:8e:64:40:9f:98:9b:4b:91:75:fb:53:ac:78:
1f:ec:38:44:38:02:91:23:d5:5f:ae:71:50:07:da:
ea:17:a0:31:1a:bc:90:b6:6c:e5:d0:bf:58:57:1d:
a0:b8:3a:e0:d2:e5:7f:86:e5:e2:78:fe:2b:db:70:
51:a3:4a:38:23:80:33:3e:1d:50:ae:bd:e9:a5:7e:
c8:07:3e:3a:9c:cb:32:c7:f4:b7:34:df:f7:dd:53:
7c:54:ac:2d:2f:95:49:c2:cb:f1:09:5a:13:bc:79:
06:41:61:92:58:69:6a:bd:c6:93:bc:4a:20:00:fa:
91:1e:39:59:67:c7:3a:cf:c1:7b:62:88:e2:c3:0d:
f9:78:a0:2c:0c:ed:f1:ad:b1:0b:5c:64:0e:22:db:
58:36:df:6d:ed:55:1f:49:f2:62:77:2a:44:08:e1:
77:59:fe:41:c9:af:58:36:b3:71:15:ef:68:f5:9b:
5a:fe:4a:40:51:4d:76:39:aa:c7:02:8c:53:7a:22:
7e:8e:12:9e:55:84:1d:db:11:61:f9:f2:85:71:1f:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F9:9D:F7:22:41:28:2E:EF:92:19:68:E0:1B:7A:BD:D2:2C:DD:16
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6CFEB4F24A9C11F0A219278DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.32.0/19
Signature Algorithm: sha256WithRSAEncryption
13:e5:71:48:5b:8a:07:6d:51:b8:3c:57:ed:bd:f5:1a:d5:56:
8d:3f:ca:c4:d2:14:c4:13:fc:1f:57:8b:3c:26:2f:bd:38:a6:
52:0c:36:ad:dc:4e:5b:3e:58:d9:22:31:f1:a8:eb:10:84:7c:
c8:ae:5a:c6:6f:85:ff:a9:ff:b7:01:61:9b:56:4b:60:f4:06:
30:cb:4b:89:f5:b2:2c:30:2f:96:7d:6a:50:03:eb:91:1f:8b:
02:0c:19:dc:62:79:51:07:7c:b5:d0:c6:b8:af:c5:e2:d4:f6:
3e:7f:70:94:21:b6:de:16:e8:3f:de:79:85:3e:75:d3:2d:ae:
a4:f9:de:70:5e:93:21:ac:18:62:53:d6:76:27:15:3d:a1:79:
e5:65:b5:3f:c9:75:fd:c2:8b:47:29:0c:75:67:f4:3f:f0:3e:
5d:12:e2:71:76:2a:e5:90:31:1f:fe:8e:90:e6:6f:13:13:82:
3d:41:4c:03:5e:9b:20:b2:80:a0:e1:f0:df:44:82:bc:fb:cc:
54:1a:26:5d:cc:f0:b4:6a:a4:b9:7f:f0:9a:d1:78:78:38:f0:
35:c4:2a:c8:93:56:12:e0:a9:fd:b8:61:07:31:2b:ce:87:25:
56:81:27:9b:14:81:23:fc:65:41:fa:3b:77:86:18:f1:15:85:
f6:c7:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:22 2025 by rpki-client