Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/31BAECA0029711F0A5442C91762E951A.roa
File: 31BAECA0029711F0A5442C91762E951A.roa (raw, json)
Hash identifier: yxfKp5oXfLN4ndXsjQDV4SErBcVMqGzxK5re6/91kpI=
Subject key identifier: C7:71:35:3C:A3:DE:15:1D:9D:38:C7:6D:E5:AD:5C:23:A9:93:DE:5D
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 061C
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/31BAECA0029711F0A5442C91762E951A.roa
Signing time: Sun 16 Mar 2025 18:48:05 +0000
ROA not before: Sun 16 Mar 2025 18:48:00 +0000
ROA not after: Sun 10 Mar 2030 18:48:00 +0000
asID: 834
IP address blocks: 102.217.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 12:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Mar 16 18:48:00 2025 GMT
Not After : Mar 10 18:48:00 2030 GMT
Subject: CN=67d71ce4-7603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:1d:ba:4b:7b:9a:87:5b:52:3d:79:6a:85:
72:88:51:b0:2b:7f:73:c5:34:a5:28:8a:10:f2:20:
91:23:01:21:b9:29:e2:08:85:dc:fc:77:cf:dc:85:
af:47:84:76:1f:17:56:95:1d:f6:e8:f0:71:10:65:
35:0e:56:2e:b6:42:e5:65:2c:70:47:bf:d3:62:49:
f7:6a:00:01:9c:7c:bb:8f:96:1c:76:86:a2:2d:4a:
94:3b:27:a8:3f:8c:b5:85:c0:46:20:aa:f9:c1:43:
ed:99:e9:a3:cd:51:ed:b6:00:8c:86:17:61:64:9c:
85:04:e6:2b:b2:87:a7:04:6e:fe:78:59:56:97:c8:
61:ba:97:f2:96:99:1d:0f:e5:b6:78:11:e7:fb:f7:
45:41:ad:f5:6b:09:36:40:87:a6:e6:55:90:61:c5:
92:0f:be:75:58:87:31:05:91:be:cc:6e:75:30:9a:
75:1b:55:9d:3d:9b:31:10:6b:4b:67:ed:e0:42:84:
6c:3e:a5:c2:ed:8f:92:cb:5c:d8:3b:19:fc:0f:5d:
19:97:f7:02:fb:62:db:7c:38:e1:1d:9a:05:b9:44:
c6:c3:97:06:2c:72:72:e1:4c:1b:05:2a:26:a8:f5:
5c:a3:88:d9:34:c1:3a:56:e7:7b:ce:f8:6d:1b:f9:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:71:35:3C:A3:DE:15:1D:9D:38:C7:6D:E5:AD:5C:23:A9:93:DE:5D
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/31BAECA0029711F0A5442C91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.106.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3c:52:1b:2f:df:13:bc:4f:c2:03:67:51:52:26:45:e6:f3:
b4:23:80:a2:d1:6f:13:80:9a:b5:ad:ac:17:97:44:df:94:09:
0f:a9:44:d2:9a:b6:db:37:5f:e7:67:d4:34:4d:18:6f:53:2f:
03:75:ec:0b:5d:b1:78:9e:09:f4:2f:4a:ae:51:56:10:49:53:
1e:43:f6:84:64:5a:75:a2:61:89:cf:73:42:67:a1:04:e9:31:
b1:b6:8d:e8:7a:08:77:e9:17:84:9e:b4:e0:8d:05:91:cf:62:
fc:b1:00:34:ba:e3:1a:79:7c:df:62:6c:e5:cc:4f:31:65:85:
06:df:a9:f8:1e:64:39:43:d8:b4:8c:34:75:2c:97:ac:34:7f:
93:1a:22:d5:6b:f6:6a:8e:31:3c:a8:21:b8:bc:00:52:bd:e9:
6d:4d:dc:13:87:79:85:66:02:6a:29:b8:ef:0b:97:bf:ec:f6:
16:80:a9:c9:2f:6f:56:4b:6e:b4:88:20:5e:51:46:59:f3:d1:
9f:95:1b:0f:fe:f2:e8:45:3f:16:18:ed:93:ba:63:a9:e0:ef:
df:9f:6a:ee:92:a7:74:09:90:e4:b4:b6:5f:3f:c7:2a:ac:ee:
d4:fa:fc:73:ae:d6:3e:69:56:7c:53:a3:85:1a:26:53:c7:20:
e2:96:7b:44
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yNTAzMTYxODQ4MDBaFw0zMDAzMTAxODQ4MDBaMBgxFjAU
BgNVBAMTDTY3ZDcxY2U0LTc2MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYhB26S3uah1tSPXlqhXKIUbArf3PFNKUoihDyIJEjASG5KeIIhdz8d8/c
ha9HhHYfF1aVHfbo8HEQZTUOVi62QuVlLHBHv9NiSfdqAAGcfLuPlhx2hqItSpQ7
J6g/jLWFwEYgqvnBQ+2Z6aPNUe22AIyGF2FknIUE5iuyh6cEbv54WVaXyGG6l/KW
mR0P5bZ4Eef790VBrfVrCTZAh6bmVZBhxZIPvnVYhzEFkb7MbnUwmnUbVZ09mzEQ
a0tn7eBChGw+pcLtj5LLXNg7GfwPXRmX9wL7Ytt8OOEdmgW5RMbDlwYscnLhTBsF
Kiao9VyjiNk0wTpW53vO+G0b+Y1tAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUx3E1
PKPeFR2dOMdt5a1cI6mT3l0wHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzMxQkFFQ0EwMDI5NzExRjBBNTQ0MkM5MTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2WowDQYJKoZIhvcNAQEL
BQADggEBAGQ8Uhsv3xO8T8IDZ1FSJkXm87QjgKLRbxOAmrWtrBeXRN+UCQ+pRNKa
tts3X+dn1DRNGG9TLwN17AtdsXieCfQvSq5RVhBJUx5D9oRkWnWiYYnPc0JnoQTp
MbG2jeh6CHfpF4SetOCNBZHPYvyxADS64xp5fN9ibOXMTzFlhQbfqfgeZDlD2LSM
NHUsl6w0f5MaItVr9mqOMTyoIbi8AFK96W1N3BOHeYVmAmopuO8Ll7/s9haAqckv
b1ZLbrSIIF5RRlnz0Z+VGw/+8uhFPxYY7ZO6Y6ng79+fau6Sp3QJkOS0tl8/xyqs
7tT6/HOu1j5pVnxTo4UaJlPHIOKWe0Q=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:17 2025 by rpki-client