Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/4E97344645C711F0B6A43790DAE4EC9C.roa
File: 4E97344645C711F0B6A43790DAE4EC9C.roa (raw, json)
Hash identifier: xzUBZ7UHsq/GEtzJNanOBfXDPU893Y96o393xRZhI5U=
Subject key identifier: EF:E0:A8:06:0B:5D:04:C1:98:59:AB:77:C0:54:55:92:8C:F0:A4:A8
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 037A
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/4E97344645C711F0B6A43790DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 06:51:17 +0000
ROA not before: Tue 10 Jun 2025 06:51:12 +0000
ROA not after: Mon 10 Jun 2030 06:51:12 +0000
asID: 213896
IP address blocks: 102.212.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jun 2025 08:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Jun 10 06:51:12 2025 GMT
Not After : Jun 10 06:51:12 2030 GMT
Subject: CN=6847d5e5-9afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:f3:a3:70:f8:07:4b:ee:44:ea:23:5b:da:
9b:76:24:e5:cd:52:8f:2b:ba:5f:70:59:98:b8:cc:
ab:3d:1d:21:34:11:cd:52:18:f5:fc:cb:d4:66:86:
b8:a6:93:69:22:6e:80:e3:43:89:7f:38:10:39:c5:
52:78:9f:73:9c:80:98:42:7e:9f:ce:c8:e6:20:63:
1d:40:e2:03:36:69:57:d1:ba:98:20:4d:a6:e3:b9:
bf:c6:1a:68:2f:41:de:20:34:6c:27:b6:8b:f7:ad:
41:80:a7:af:df:f3:ba:0e:3e:41:c2:54:3c:49:bb:
4a:19:86:1d:33:a1:3f:88:16:a4:68:3c:77:e0:ae:
ec:30:95:0c:73:57:36:22:6c:6f:d6:22:fd:39:82:
c6:2f:4c:80:ef:fa:27:df:41:ab:d1:85:90:78:27:
77:77:a1:ee:3d:b1:87:47:c2:6d:9a:02:62:c3:6d:
08:50:ea:ec:b4:07:b3:a6:d7:62:42:ac:55:a0:bb:
61:ca:e4:86:47:d4:96:69:76:ba:27:b4:c3:62:b8:
70:fa:c8:14:5c:0f:da:d0:c1:d5:ec:a1:b7:16:56:
52:f0:91:50:36:6d:9d:4f:91:f5:81:f1:11:d8:59:
e5:7a:2a:47:87:97:1f:d6:cf:42:b1:b6:fe:0b:6b:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E0:A8:06:0B:5D:04:C1:98:59:AB:77:C0:54:55:92:8C:F0:A4:A8
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/4E97344645C711F0B6A43790DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.7.0/24
Signature Algorithm: sha256WithRSAEncryption
06:33:a7:46:00:6c:44:67:9b:6d:ee:12:e7:dc:3d:50:3a:f2:
c2:50:81:4b:70:15:cc:9f:d5:cf:d9:4d:8c:f2:c2:d7:7a:38:
0c:da:a5:0b:da:f6:86:a0:19:dc:7d:6a:ec:3a:7a:83:0d:46:
e9:55:98:df:c3:7d:b4:dc:64:04:09:0b:d8:cc:d8:b6:b6:ae:
1e:7d:4f:65:86:fc:b8:1b:aa:d0:d0:9f:71:e8:17:3a:2a:e9:
14:f8:5b:d0:c4:e7:30:84:d7:f8:d7:ee:32:82:69:53:fe:4a:
a0:b0:3c:60:69:85:f2:80:e0:ae:31:fa:f8:1f:93:69:83:1e:
c3:af:ad:df:a2:ed:ab:cf:8e:cf:3f:95:75:29:6d:90:5a:16:
c6:4d:1b:bd:ed:22:62:bf:a5:e5:86:8f:d1:44:18:1b:52:07:
5c:dc:47:e8:e0:7b:0e:63:dc:a0:89:c3:92:04:54:f1:6c:89:
62:a4:96:86:5b:4e:9a:35:ff:60:73:02:c7:7a:77:a7:33:57:
80:98:ab:a0:28:86:ab:30:1f:f9:6d:df:f3:8f:90:58:1f:a8:
4f:3c:35:bb:4d:09:af:d7:af:47:60:a7:51:d7:ae:1b:1c:67:
ae:bc:a7:44:c1:5d:3a:e9:38:1b:b2:49:e7:ac:bc:f4:fb:40:
c7:83:dd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:29:27 2025 by rpki-client