Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/405E8DAC31B311F0963E6CF5DAE4EC9C.roa
File: 405E8DAC31B311F0963E6CF5DAE4EC9C.roa (raw, json)
Hash identifier: yqb93WE0EQ5HZbqqbQ839SXNmIn5xJqjafqssxKDDco=
Subject key identifier: 62:9B:68:6E:24:C2:13:61:EB:83:6A:9C:ED:AE:5B:49:07:55:57:BE
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0355
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/405E8DAC31B311F0963E6CF5DAE4EC9C.roa
Signing time: Thu 15 May 2025 17:37:20 +0000
ROA not before: Thu 15 May 2025 17:37:16 +0000
ROA not after: Wed 15 May 2030 17:37:16 +0000
asID: 834
IP address blocks: 102.212.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 12:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: May 15 17:37:16 2025 GMT
Not After : May 15 17:37:16 2030 GMT
Subject: CN=68262650-fbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:45:1b:fa:c0:0e:e6:bb:f5:04:1f:17:47:
22:b4:7f:c4:3b:59:b3:db:97:c7:29:50:60:c2:d9:
a5:fb:8c:0f:e9:7a:bd:6b:cf:13:60:26:3a:7e:4c:
ed:fb:9c:f2:dc:b9:01:f0:5c:dc:b5:18:db:3d:55:
d8:4e:5b:1b:19:15:4a:9d:b4:2f:b1:6a:fa:ce:b4:
f0:66:b8:ef:d4:29:90:e2:f7:88:90:26:52:04:cf:
4b:35:e7:19:32:ad:12:8b:b9:99:35:f3:b6:ec:59:
3b:97:f7:98:fb:0c:0c:23:47:18:f7:44:8f:ee:b0:
7b:1c:9d:26:33:f7:9b:8e:8c:51:73:43:71:2b:20:
05:54:46:78:db:82:b9:27:e8:7e:29:a4:a5:b2:ea:
c2:8d:d7:e9:57:62:90:61:3a:a0:62:a3:ab:6e:0f:
9b:22:0c:0c:c3:12:81:b8:aa:da:da:b3:f3:47:18:
0e:c7:bd:16:a8:b1:d7:91:08:1d:c7:f7:70:86:8a:
29:fc:97:14:55:82:72:d3:c5:61:5e:05:ea:70:95:
67:fe:38:1f:04:6a:1c:71:3d:24:ab:1e:2a:88:25:
a8:97:88:92:56:8c:4c:0d:a5:b3:97:ec:a0:31:af:
07:5c:e4:4f:1b:15:69:e2:5c:31:37:aa:f4:c5:0b:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9B:68:6E:24:C2:13:61:EB:83:6A:9C:ED:AE:5B:49:07:55:57:BE
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/405E8DAC31B311F0963E6CF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.7.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ca:93:6d:0f:ce:e6:52:8c:c2:a0:cb:97:67:7e:6a:b9:73:
f6:ed:62:9b:1b:7a:7f:13:ac:e4:3e:e4:a4:92:26:47:95:4c:
38:1a:9c:6c:1a:af:d1:2b:ff:10:bd:34:a7:ab:2b:3f:8d:01:
8e:b4:ad:86:23:99:57:ab:81:e7:af:37:b9:76:d3:be:f0:a6:
89:3b:aa:cf:a2:45:8b:96:1d:43:1c:e3:d6:b7:5c:dc:f0:95:
c1:96:9f:13:90:61:2b:7f:c6:c0:ff:2f:a9:20:53:4a:e6:97:
07:75:e9:b9:9f:3f:d7:42:21:db:59:e8:38:d8:70:89:9e:55:
7d:90:db:b0:2e:80:ac:98:f2:d3:cf:98:ac:03:79:aa:d9:cf:
3b:af:03:5e:cc:09:1e:30:52:29:55:cd:a6:49:4a:e8:0b:a5:
2e:0f:e7:0d:07:34:74:02:c3:3b:8f:ec:de:7b:62:74:d1:c3:
74:54:24:93:02:1a:33:35:80:34:b8:cf:a1:85:26:53:31:92:
92:b5:6c:09:f5:52:c2:d4:8b:40:37:e5:4f:85:38:3e:42:73:
4a:7e:bc:e0:85:d8:a1:61:1d:d1:6c:7a:22:2d:e3:57:4e:9f:
04:7a:64:58:ce:b1:c0:c7:73:71:d0:33:df:2f:4a:18:cd:65:
6b:a4:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:27:09 2025 by rpki-client