Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DF1FB01E26A611F08FA3CB8BDAE4EC9C.roa
File: DF1FB01E26A611F08FA3CB8BDAE4EC9C.roa (raw, json)
Hash identifier: Lfm9p4ndY3FIh4kxWgev1rHOGAOJ14SCnqj3a7Te/ME=
Subject key identifier: 48:A3:F2:FE:85:A0:D1:30:4D:1B:3C:13:26:9F:76:CB:EA:BF:CF:15
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0997
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DF1FB01E26A611F08FA3CB8BDAE4EC9C.roa
Signing time: Thu 01 May 2025 16:11:00 +0000
ROA not before: Thu 01 May 2025 16:10:56 +0000
ROA not after: Fri 01 May 2026 16:10:56 +0000
asID: 36352
IP address blocks: 102.135.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 12:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455 (0x997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 1 16:10:56 2025 GMT
Not After : May 1 16:10:56 2026 GMT
Subject: CN=68139d14-c618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:d2:b7:02:c8:4f:4f:bf:2b:b7:22:c6:52:
56:8a:9b:1b:d5:85:ca:aa:36:6b:7c:ec:45:5b:bf:
08:6b:30:9d:73:5b:75:67:d0:3b:a5:82:59:77:92:
ba:cf:de:bc:10:95:fe:7b:53:7b:39:79:ac:75:d8:
c4:0a:02:65:ba:e5:e7:2f:e3:a5:55:6c:bf:1d:7c:
b9:51:f6:f3:84:7e:35:d8:b6:7e:c7:e3:63:ed:a3:
cc:61:25:d8:7a:99:21:a7:72:54:e6:7b:e3:c7:3c:
72:60:37:12:84:d7:b1:87:c4:b0:5c:aa:cf:c0:38:
36:dd:e6:9e:09:f1:a1:2b:39:88:16:5f:57:59:3f:
0c:09:dd:6f:5b:c7:62:bb:1d:c3:84:ee:3f:3f:61:
aa:64:f0:e8:96:e3:00:21:86:2f:2e:9a:60:45:04:
af:6d:58:41:65:75:4e:b9:81:84:54:2a:61:dc:9e:
e0:4f:3f:24:7e:52:c5:1c:7b:1e:e7:ee:91:10:4d:
fc:29:7d:32:28:32:b5:ad:f0:df:f8:b9:60:c1:da:
67:8a:c8:f7:7a:55:48:27:13:e4:7a:a6:06:4b:54:
9f:f5:6b:4a:19:d6:e0:72:36:22:0b:08:e7:7b:b7:
a5:77:13:58:6d:e1:81:2b:df:c4:42:15:a9:50:68:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:F2:FE:85:A0:D1:30:4D:1B:3C:13:26:9F:76:CB:EA:BF:CF:15
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DF1FB01E26A611F08FA3CB8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9a:c3:9a:2c:28:ad:a2:62:55:2c:4a:80:65:25:67:c7:d7:
51:2c:c5:67:be:86:00:0e:5d:89:19:4a:fb:0e:2f:4c:20:f5:
a8:f4:75:76:9a:47:da:85:9a:7a:67:fc:03:f0:64:44:d0:b6:
48:8e:21:82:15:85:4d:df:bb:6d:5f:a0:be:d6:cd:27:09:ad:
c9:e2:c5:55:81:4e:94:71:9a:79:3f:18:73:9c:4a:14:ca:22:
c9:d9:b2:f5:9a:a9:19:2e:27:8f:e5:22:86:08:a0:4b:d9:dd:
78:e3:e8:56:a9:45:22:6a:4f:b4:d6:ec:3a:92:4b:1b:ed:06:
c9:85:f8:68:0b:48:ab:c7:b8:a7:bd:2f:12:ac:9f:15:89:59:
f3:53:ea:af:65:29:c2:23:e4:a7:16:77:d3:20:e5:f6:24:db:
50:87:f3:f7:9a:d2:22:38:c8:6b:0d:eb:c1:3a:57:86:ce:5d:
15:e5:ea:a7:a5:54:ca:24:38:89:0a:ff:65:a6:ff:29:df:a0:
bf:3b:32:b5:5d:c6:c4:68:76:13:83:ea:8b:d1:96:13:bb:81:
74:05:ae:5f:a4:18:ba:f5:00:ae:9e:08:1b:2c:d0:88:ad:6e:
38:04:34:29:72:86:61:f9:b9:48:78:2f:7a:94:49:ea:0b:86:
8f:0b:18:52
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA1MDExNjEwNTZaFw0yNjA1MDExNjEwNTZaMBgxFjAU
BgNVBAMTDTY4MTM5ZDE0LWM2MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6RNK3AshPT78rtyLGUlaKmxvVhcqqNmt87EVbvwhrMJ1zW3Vn0Dulgll3
krrP3rwQlf57U3s5eax12MQKAmW65ecv46VVbL8dfLlR9vOEfjXYtn7H42Pto8xh
Jdh6mSGnclTme+PHPHJgNxKE17GHxLBcqs/AODbd5p4J8aErOYgWX1dZPwwJ3W9b
x2K7HcOE7j8/Yapk8OiW4wAhhi8ummBFBK9tWEFldU65gYRUKmHcnuBPPyR+UsUc
ex7n7pEQTfwpfTIoMrWt8N/4uWDB2meKyPd6VUgnE+R6pgZLVJ/1a0oZ1uByNiIL
COd7t6V3E1ht4YEr38RCFalQaD/5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSKPy
/oWg0TBNGzwTJp92y+q/zxUwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0RGMUZCMDFFMjZBNjExRjA4RkEzQ0I4QkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwowDQYJKoZIhvcNAQEL
BQADggEBAKSaw5osKK2iYlUsSoBlJWfH11EsxWe+hgAOXYkZSvsOL0wg9aj0dXaa
R9qFmnpn/APwZETQtkiOIYIVhU3fu21foL7WzScJrcnixVWBTpRxmnk/GHOcShTK
IsnZsvWaqRkuJ4/lIoYIoEvZ3Xjj6FapRSJqT7TW7DqSSxvtBsmF+GgLSKvHuKe9
LxKsnxWJWfNT6q9lKcIj5KcWd9Mg5fYk21CH8/ea0iI4yGsN68E6V4bOXRXl6qel
VMokOIkK/2Wm/ynfoL87MrVdxsRodhOD6ovRlhO7gXQFrl+kGLr1AK6eCBss0Iit
bjgENClyhmH5uUh4L3qUSeoLho8LGFI=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:49:31 2025 by rpki-client