Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/77A913E650FC11F0AF266C91DAE4EC9C.roa
File: 77A913E650FC11F0AF266C91DAE4EC9C.roa (raw, json)
Hash identifier: r+NFy+EpDFvZ0fjeD0tmxxuJTJROQKGYUBK4Rg5Wxqg=
Subject key identifier: 9E:D8:6F:BB:42:26:84:CC:28:3C:5B:3B:25:5E:F1:2F:C6:2E:46:65
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BBC
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/77A913E650FC11F0AF266C91DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:09:32 +0000
ROA not before: Tue 24 Jun 2025 13:09:27 +0000
ROA not after: Sat 20 Jun 2026 13:09:27 +0000
asID: 2914
IP address blocks: 102.135.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 06:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3004 (0xbbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:09:27 2025 GMT
Not After : Jun 20 13:09:27 2026 GMT
Subject: CN=685aa38c-8dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:42:6a:41:35:b3:75:76:6b:a4:6c:2c:31:
18:3e:0e:a5:f5:85:aa:13:23:a0:dc:7f:ea:a7:0c:
d2:e4:34:b2:fa:14:af:44:33:04:d8:6e:01:52:25:
97:83:c3:d9:cb:c9:92:91:f2:78:fd:be:cc:bc:47:
6a:14:1b:bb:78:7e:ff:83:b1:0d:e7:ab:a5:b7:a8:
84:95:e9:46:bd:aa:29:e9:ea:da:d0:17:3a:96:6a:
51:7e:7b:a5:c6:d3:ff:e2:3e:80:ff:f2:d2:ef:4f:
2c:5c:58:6b:9a:ad:c3:68:6a:51:5e:c8:32:ad:8a:
11:7f:d9:9d:99:e3:71:51:e1:b6:c9:07:c1:f7:97:
4e:24:70:01:cf:3f:55:c8:3a:02:f8:1a:53:97:b7:
b6:0c:e9:87:07:53:8b:54:18:b0:65:f3:77:4b:6d:
fe:0e:62:98:f6:1b:d2:2d:76:23:21:41:c1:03:e8:
06:15:7b:53:97:ad:7b:9e:66:4e:55:f6:e5:14:ca:
80:3a:be:2b:b2:a9:75:17:b8:1e:8e:f7:9c:62:0a:
f9:48:0c:65:7d:63:df:f3:41:56:6f:62:b4:7d:61:
d6:e2:47:49:db:3d:e8:d5:79:47:0c:e7:db:e8:e4:
3d:3a:51:89:cd:ba:cc:7b:77:fe:00:67:17:40:cf:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D8:6F:BB:42:26:84:CC:28:3C:5B:3B:25:5E:F1:2F:C6:2E:46:65
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/77A913E650FC11F0AF266C91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:46:27:9c:c4:02:ac:af:5d:57:05:02:78:91:40:5b:51:a6:
02:e2:7c:14:e8:6a:53:1e:c4:31:78:c2:cc:2f:1e:62:42:50:
41:73:5c:a8:7e:8f:1b:93:ef:4e:c2:09:19:7e:1c:3b:23:90:
c9:29:2d:23:3a:bc:9f:6d:3b:1a:73:a5:0c:f4:0d:bf:65:e2:
91:36:11:b0:d0:7a:e7:99:89:06:49:e5:74:0f:fa:69:ec:49:
b4:ad:5d:a6:85:54:23:2c:25:ec:3c:a2:34:39:20:78:fa:74:
be:4f:7f:d6:18:3e:e3:99:c6:65:18:7c:56:eb:57:d8:89:3b:
3f:5a:6a:4c:bf:73:86:af:16:8f:5f:94:87:21:36:7e:39:81:
ca:69:77:d0:a5:12:a1:ca:db:12:f7:ab:5b:6b:5c:a0:e0:b6:
cf:d9:cb:cc:67:6b:12:54:fc:58:39:10:25:bf:bc:6a:c8:ed:
22:d4:74:0f:d8:f2:b4:fb:45:75:d2:27:27:d4:6d:d4:a9:79:
c1:d6:a4:ef:50:f7:33:67:0c:5c:3f:94:e7:dc:76:1b:b0:21:
da:45:bb:e7:53:52:35:69:c3:1d:15:32:4a:df:0d:47:9a:13:
97:57:38:f2:b4:b5:19:7d:91:97:35:98:07:39:a6:7f:eb:fc:
26:93:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:26:38 2025 by rpki-client