Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/09A9AAA2388011F0827C21B4DAE4EC9C.roa
File: 09A9AAA2388011F0827C21B4DAE4EC9C.roa (raw, json)
Hash identifier: Q/eLnRBBtMiYywOIzlVVARGg3zc5yRXoMTGqvxtDj1U=
Subject key identifier: 72:69:6F:AA:89:58:A1:D6:16:88:E2:AB:2C:83:EE:25:CE:C0:30:62
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0361
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/09A9AAA2388011F0827C21B4DAE4EC9C.roa
Signing time: Sat 24 May 2025 09:18:22 +0000
ROA not before: Sat 24 May 2025 09:18:17 +0000
ROA not after: Fri 24 May 2030 09:18:17 +0000
asID: 834
IP address blocks: 102.211.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 18:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: May 24 09:18:17 2025 GMT
Not After : May 24 09:18:17 2030 GMT
Subject: CN=68318ede-2c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:0a:6c:11:cc:cc:1b:b0:b2:25:1e:96:a5:
bc:79:10:94:fa:45:ff:4b:44:f0:82:7b:1b:64:cd:
df:d3:57:b6:e6:cc:66:ba:a7:53:0b:00:31:47:7d:
44:0c:52:db:ef:d2:62:41:e2:df:63:c8:4b:d0:c2:
8a:f7:b8:1d:64:c6:3a:5d:45:45:4f:31:c8:5f:e9:
ef:63:d8:51:f2:09:58:d1:0d:ac:10:1f:b0:c5:6a:
11:17:bf:e2:ce:a6:5e:3e:77:e0:d8:05:14:90:82:
7a:b3:fb:d9:53:30:34:23:49:df:70:36:21:32:f0:
8b:56:ac:d6:2d:8f:0e:9f:1f:8d:d9:68:ec:75:48:
ed:89:de:9c:56:77:32:e1:c4:29:7d:57:8f:5e:0b:
2e:9b:7d:1d:d5:ac:0c:15:b9:f8:62:0d:38:85:a6:
b7:97:f8:b0:46:a7:bc:76:3e:cd:97:b7:60:08:7f:
e1:c0:ce:47:32:2c:6c:c7:fd:22:77:95:61:f2:1b:
c0:ec:57:06:17:a4:a9:22:71:97:61:dd:f6:96:ec:
1a:04:bd:34:94:d5:7f:12:41:4d:80:b7:dd:54:f0:
f6:f6:88:ae:3d:c1:a6:c0:fa:04:0a:14:1d:10:25:
d6:fe:11:eb:ec:b3:38:17:c7:40:4f:76:ac:54:01:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:6F:AA:89:58:A1:D6:16:88:E2:AB:2C:83:EE:25:CE:C0:30:62
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/09A9AAA2388011F0827C21B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ee:9b:30:16:40:1d:59:06:aa:8c:72:c5:56:6d:94:98:84:
f9:74:f4:67:33:db:68:60:4a:06:e5:ea:55:27:ee:1d:5a:0e:
12:c2:bf:5e:1e:28:d3:e9:62:d1:7c:dc:67:0e:d1:b2:91:3d:
80:0f:3f:55:1d:f2:81:91:bd:68:77:83:69:24:3d:8c:d5:99:
c5:c6:68:33:83:5f:2f:fb:64:98:ff:53:56:40:6c:d0:77:b3:
64:83:59:af:cd:47:c8:63:d5:87:d0:bb:64:8a:55:bb:52:55:
cb:0d:92:5b:6d:7d:12:43:11:b1:b1:dd:c1:5c:c7:61:b9:bc:
44:0f:f2:16:70:79:d2:6f:37:72:b3:e5:71:0f:49:44:21:d6:
4e:7a:ab:9f:37:85:0e:1f:04:37:48:1a:49:43:74:a5:15:be:
c2:ce:fe:16:af:91:e6:5e:4a:f0:5c:e2:00:96:91:cc:6d:0a:
45:dc:e3:b1:cc:e0:6f:74:18:fe:68:90:f6:62:6e:d0:54:a2:
5c:b3:21:6c:d0:9d:42:ea:90:01:fa:f3:e6:af:e5:1a:04:2b:
7b:31:22:8a:3e:f5:21:91:88:01:8f:8d:32:10:0b:9d:27:5d:
ca:cd:98:8b:39:aa:80:02:95:52:56:95:36:cd:53:6b:0b:45:
4d:9f:47:af
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy
MTlBOEM0MTIxQjAeFw0yNTA1MjQwOTE4MTdaFw0zMDA1MjQwOTE4MTdaMBgxFjAU
BgNVBAMTDTY4MzE4ZWRlLTJjMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKuQpsEczMG7CyJR6Wpbx5EJT6Rf9LRPCCextkzd/TV7bmzGa6p1MLADFH
fUQMUtvv0mJB4t9jyEvQwor3uB1kxjpdRUVPMchf6e9j2FHyCVjRDawQH7DFahEX
v+LOpl4+d+DYBRSQgnqz+9lTMDQjSd9wNiEy8ItWrNYtjw6fH43ZaOx1SO2J3pxW
dzLhxCl9V49eCy6bfR3VrAwVufhiDTiFpreX+LBGp7x2Ps2Xt2AIf+HAzkcyLGzH
/SJ3lWHyG8DsVwYXpKkicZdh3faW7BoEvTSU1X8SQU2At91U8Pb2iK49wabA+gQK
FB0QJdb+EevsszgXx0BPdqxUAa+hAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcmlv
qolYodYWiOKrLIPuJc7AMGIwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE
EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi
dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRB
RDlFNkZDLzA5QTlBQUEyMzg4MDExRjA4MjdDMjFCNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm0+gwDQYJKoZIhvcNAQEL
BQADggEBAB3umzAWQB1ZBqqMcsVWbZSYhPl09Gcz22hgSgbl6lUn7h1aDhLCv14e
KNPpYtF83GcO0bKRPYAPP1Ud8oGRvWh3g2kkPYzVmcXGaDODXy/7ZJj/U1ZAbNB3
s2SDWa/NR8hj1YfQu2SKVbtSVcsNklttfRJDEbGx3cFcx2G5vEQP8hZwedJvN3Kz
5XEPSUQh1k56q583hQ4fBDdIGklDdKUVvsLO/havkeZeSvBc4gCWkcxtCkXc47HM
4G90GP5okPZibtBUolyzIWzQnULqkAH68+av5RoEK3sxIoo+9SGRiAGPjTIQC50n
XcrNmIs5qoAClVJWlTbNU2sLRU2fR68=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:31:32 2025 by rpki-client