Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EDD3B2F84A9C11F0A10D558FDAE4EC9C.roa
File: EDD3B2F84A9C11F0A10D558FDAE4EC9C.roa (raw, json)
Hash identifier: nnQOczQBr3rbOQtsmlffB/aY9vtbQ8em3kO3IIpgoyQ=
Subject key identifier: 8C:B1:65:15:E9:44:87:45:63:04:FB:90:1B:A7:D9:29:44:2D:46:40
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B67
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EDD3B2F84A9C11F0A10D558FDAE4EC9C.roa
Signing time: Mon 16 Jun 2025 10:30:32 +0000
ROA not before: Mon 16 Jun 2025 10:30:27 +0000
ROA not after: Tue 16 Jun 2026 10:30:27 +0000
asID: 29802
IP address blocks: 102.135.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 17 Jun 2025 10:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2919 (0xb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 16 10:30:27 2025 GMT
Not After : Jun 16 10:30:27 2026 GMT
Subject: CN=684ff248-d986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:ed:12:60:69:5a:c3:04:a1:73:c3:7a:3a:
fe:29:ca:51:fc:81:62:1e:f6:31:1c:e1:56:93:6d:
0b:48:55:d9:3c:74:5d:55:7c:88:b2:13:0b:5e:49:
97:ca:50:a8:45:32:ac:64:28:a0:d7:9d:04:d0:8e:
f6:37:04:79:ce:73:53:68:5e:83:db:70:9c:78:f5:
d7:59:73:de:c6:2e:a8:9a:a8:07:bd:93:36:5b:98:
13:d2:e4:e6:b3:c5:c9:11:71:61:57:cf:a9:ca:13:
84:f1:14:0a:d1:d9:6b:65:b5:a2:4d:4f:a3:e2:cb:
ee:fb:2e:0f:5b:af:a7:db:71:60:dc:76:3a:b8:46:
ae:b4:bf:75:1a:ce:c1:b2:2d:93:2c:91:38:e6:9e:
5c:36:2d:e1:5f:5d:a5:09:a4:bf:0e:b6:51:35:b7:
34:cf:6a:b3:28:30:a1:c6:f7:5a:ce:61:65:fc:05:
8f:74:a2:4e:20:60:a8:f2:61:f1:d1:de:de:d6:3d:
f1:46:46:d3:b1:ad:61:41:6f:8e:11:f5:8a:24:00:
3c:39:33:98:e1:bc:c0:cf:f8:d4:9b:07:a5:3a:87:
84:0b:b3:49:7a:79:2f:75:fb:88:da:63:eb:c1:3a:
44:c3:84:a7:6a:c2:4c:17:86:60:e3:66:b6:53:39:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:65:15:E9:44:87:45:63:04:FB:90:1B:A7:D9:29:44:2D:46:40
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EDD3B2F84A9C11F0A10D558FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:a5:b1:a7:85:c5:4f:ce:3e:55:9f:e2:29:3f:26:2c:59:10:
01:73:bf:ca:a0:2d:06:0c:1a:ca:e1:31:4b:c0:94:1f:64:c2:
9a:49:09:94:4f:fc:73:83:bf:62:d0:c4:0c:f4:30:22:88:73:
27:1c:b1:10:ef:51:1c:4f:ba:ee:d3:28:87:f5:9c:d2:cb:e3:
94:5b:a0:c2:cd:ea:db:e7:63:2b:6f:16:fa:77:7e:7c:46:3b:
d8:56:6e:d3:18:94:d9:10:68:bd:4f:ce:33:fd:89:b7:fc:91:
8d:20:69:c2:fb:eb:0b:b3:66:94:05:21:54:5c:2b:42:ec:0e:
c0:ed:57:74:d0:42:f2:08:1f:66:e0:69:23:36:ae:be:66:e0:
85:32:3b:70:32:7d:1d:d3:db:80:f0:ba:1b:69:3b:37:e3:be:
99:90:1b:c2:a1:ef:5c:62:08:e2:83:79:1c:42:d6:f5:23:ac:
6a:c9:da:d7:e5:9c:d3:51:d4:54:1d:d8:4d:aa:7b:5d:65:6f:
ae:b6:eb:f1:ab:6e:6a:80:b7:53:17:53:d7:f6:44:65:41:2d:
ca:d3:c6:c6:79:c5:6c:74:f4:0a:98:80:28:47:a9:82:3f:36:
e2:cf:a4:6d:00:1c:27:5a:b8:22:bc:02:01:81:78:9e:99:3c:
a5:cf:fe:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:50:39 2025 by rpki-client