Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/C7D4A8BA4FFF11F0B39A65ACDAE4EC9C.roa
File: C7D4A8BA4FFF11F0B39A65ACDAE4EC9C.roa (raw, json)
Hash identifier: utLDjwgsFyTqx0sAaVgi+CfQ7MaoYWIL5JRvjQOYhR0=
Subject key identifier: 06:7C:69:B0:B9:F9:41:71:25:8C:DA:AE:8E:DB:FF:72:6D:10:82:D8
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 038C
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/C7D4A8BA4FFF11F0B39A65ACDAE4EC9C.roa
Signing time: Mon 23 Jun 2025 07:00:44 +0000
ROA not before: Mon 23 Jun 2025 07:00:40 +0000
ROA not after: Mon 24 Jun 2030 07:00:40 +0000
asID: 834
IP address blocks: 102.212.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 09:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 908 (0x38c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Jun 23 07:00:40 2025 GMT
Not After : Jun 24 07:00:40 2030 GMT
Subject: CN=6858fb9b-42cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:aa:b0:48:a3:7f:bb:86:ce:1b:42:87:66:
9f:ba:5e:c4:41:e8:7b:d5:66:69:ec:35:ab:19:5c:
c3:da:a1:e4:90:4c:1d:66:95:c8:00:af:81:74:f0:
20:70:7a:d2:7b:ea:39:6a:af:f8:59:da:49:ad:18:
dc:62:c0:d6:5e:17:24:f4:bc:7c:96:ea:1a:6f:36:
39:94:a7:f2:db:5b:0c:2b:10:e4:8c:41:e1:45:90:
83:b4:52:e8:23:57:f9:c3:a9:79:12:8a:7b:2d:d3:
19:6e:bb:30:fb:ff:a0:f0:c5:ec:ce:6d:3e:d5:73:
93:2d:9e:28:cc:34:ff:0f:bd:77:32:aa:41:03:a8:
ea:a6:19:50:74:90:88:ca:da:07:98:db:47:fb:a2:
97:c3:88:ac:44:07:25:77:d4:3a:95:9d:7a:4c:66:
90:d0:d5:b8:ad:3e:c8:aa:fb:b5:ca:b9:a1:7e:ad:
5a:d4:cb:51:c8:db:84:af:3d:c7:e6:60:a5:80:68:
f6:69:be:5b:94:30:a2:74:aa:52:e1:70:02:2b:6e:
9f:49:6b:8b:67:6a:c5:bd:a2:fe:db:f6:f1:e7:26:
05:c6:dd:8c:a5:2b:56:70:95:df:53:0b:bb:dc:e9:
a5:a9:0b:08:69:cc:58:aa:7c:53:fb:2e:37:80:e5:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:69:B0:B9:F9:41:71:25:8C:DA:AE:8E:DB:FF:72:6D:10:82:D8
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/C7D4A8BA4FFF11F0B39A65ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.7.0/24
Signature Algorithm: sha256WithRSAEncryption
02:21:d6:e0:3e:e1:3c:ba:1d:4f:09:38:7d:c0:5f:7a:51:e4:
7e:3f:01:f9:be:64:f6:29:ea:bd:5e:6f:ce:3f:4a:2f:ab:98:
2e:72:7a:da:2a:c4:83:9a:c9:62:83:1f:b3:3e:a3:5d:ea:d1:
cb:11:72:09:a7:09:0f:a6:1b:7c:79:c0:4e:6f:92:50:f6:c6:
c7:b5:ae:af:e5:41:d9:b5:1e:a0:a0:16:a8:68:6c:05:8d:02:
49:68:7e:65:2c:08:d2:1b:b2:63:53:2a:88:47:2b:f3:03:5e:
36:f6:b4:76:5f:20:68:b8:49:81:94:f8:00:8e:68:57:50:3e:
0b:cd:33:a2:e9:41:8b:de:dc:62:f0:4f:dd:74:52:56:69:37:
26:e1:c6:e2:2e:33:36:4a:fc:d1:45:bd:a5:fb:e2:0c:19:9b:
b4:d7:f3:ed:97:aa:ce:26:b6:07:1f:d8:b2:8c:e7:24:c8:26:
79:7e:61:ac:f7:0b:f8:8c:67:06:08:96:bd:0e:0e:85:ff:c2:
b9:cf:bb:be:eb:cd:e2:f4:ce:81:33:3c:f0:2a:4b:e1:d1:a7:
be:83:87:b7:40:a4:62:36:f9:ba:e2:07:4f:26:2a:af:31:5e:
87:b7:eb:58:76:b6:99:72:f1:c8:34:d9:08:2a:30:66:93:a2:
b1:a3:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:23:06 2025 by rpki-client