Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D32123943D6011F0B779AEEDDAE4EC9C.roa
File: D32123943D6011F0B779AEEDDAE4EC9C.roa (raw, json)
Hash identifier: c4d1i5XCvOyuzVQvTCyGeFlK5uaptv5VeSRmdJgAo3Q=
Subject key identifier: 02:86:9C:99:23:D1:F2:1C:DE:69:1E:AA:F4:0E:B9:F6:7C:70:56:A5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0AE7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D32123943D6011F0B779AEEDDAE4EC9C.roa
Signing time: Fri 30 May 2025 14:17:32 +0000
ROA not before: Fri 30 May 2025 14:17:27 +0000
ROA not after: Fri 29 May 2026 14:17:27 +0000
asID: 208485
IP address blocks: 102.135.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jun 2025 09:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2791 (0xae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 30 14:17:27 2025 GMT
Not After : May 29 14:17:27 2026 GMT
Subject: CN=6839bdfc-36aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:03:4b:0a:e8:d1:e7:55:ad:37:35:6e:e7:
9e:22:60:8f:84:1d:7a:16:17:05:47:21:35:d2:4d:
54:67:93:c8:84:c7:92:03:2c:54:0b:4d:e4:43:7f:
51:0c:d1:f9:80:32:77:e3:db:ac:8e:66:1a:bc:4d:
8b:e7:76:6f:9a:6e:14:d3:34:39:1e:14:15:4e:8e:
48:bf:31:7c:3a:da:fb:ba:3d:8f:ad:c8:5c:c8:6a:
d4:49:64:87:d2:8b:af:f2:d7:be:eb:85:eb:57:9c:
da:28:ab:87:f5:74:48:db:72:b5:4e:ba:b5:3f:fb:
9a:0c:8f:c4:e2:be:ed:6e:1f:9d:6b:9a:5e:53:a7:
43:95:91:6d:6b:06:f6:8c:ba:9d:c6:51:21:18:b0:
d7:e3:da:6f:04:51:64:0a:98:d9:34:bb:a8:d5:51:
0c:6d:52:0c:2b:ef:ec:09:92:7a:bc:ae:b8:87:ed:
4a:bc:d6:3d:5f:24:ae:99:12:fb:5c:ff:3c:e9:ea:
ea:bc:d6:6f:cd:61:98:59:26:89:c9:6a:1e:b9:15:
a2:01:15:b4:0e:73:3d:bf:59:45:e5:96:35:37:27:
36:eb:52:bf:64:16:61:c9:f6:c2:e0:75:0b:f4:13:
41:3a:7d:c7:b4:69:91:8f:3e:5b:1a:02:af:a9:ff:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:9C:99:23:D1:F2:1C:DE:69:1E:AA:F4:0E:B9:F6:7C:70:56:A5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D32123943D6011F0B779AEEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.4.0/24
Signature Algorithm: sha256WithRSAEncryption
da:c7:a4:bb:8c:67:20:50:e7:13:8d:5b:6a:0e:69:c9:56:52:
d4:df:f9:06:80:29:16:83:24:47:9a:22:87:3e:69:21:77:95:
59:8d:63:19:4e:b0:e6:30:54:8c:bb:2a:4a:44:92:fb:0e:60:
d2:30:22:87:bd:fd:5d:fd:1a:f0:57:93:d8:e2:a4:f1:01:c8:
34:d2:0b:ff:41:04:bd:59:f7:6f:e0:64:49:d8:e2:6e:c2:0a:
09:b9:61:0d:30:18:5a:37:59:7e:41:7c:c4:b2:bd:3a:f3:07:
89:53:ad:f7:5c:90:f1:3b:16:3b:4e:e0:ec:5e:09:65:f2:71:
14:64:8e:7f:e9:a3:37:7e:f1:ed:4d:a5:b2:91:58:97:e3:36:
2d:03:5b:fc:d3:02:0d:79:68:71:38:94:09:12:8a:c6:7a:dd:
c6:5f:6c:c2:b9:f5:7d:38:58:aa:39:17:37:44:4f:3d:e6:f3:
bd:90:85:49:17:8b:a3:65:cc:b9:bc:fa:16:fc:b3:ec:50:b4:
5d:41:17:43:e2:89:23:7b:39:6c:4c:d5:42:46:d5:d9:df:aa:
4c:50:1b:87:b2:43:bb:46:2d:6a:b8:b3:ed:0e:e6:d6:da:e2:
ea:89:93:1b:08:7c:80:e1:14:d1:49:e2:e9:44:01:33:c9:30:
a5:7c:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:19 2025 by rpki-client