Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9EE336E6089311F09553AFA0762E951A.roa
File: 9EE336E6089311F09553AFA0762E951A.roa (raw, json)
Hash identifier: Z3zjlcpH7K2VndekB21Jy7aI5NmPx1ojjM8QaVP1TRs=
Subject key identifier: 4E:60:2D:E8:A6:90:80:F8:40:24:3A:0F:7B:B8:4B:3D:BE:80:67:32
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0630
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9EE336E6089311F09553AFA0762E951A.roa
Signing time: Mon 24 Mar 2025 09:37:37 +0000
ROA not before: Mon 24 Mar 2025 09:37:32 +0000
ROA not after: Sun 24 Mar 2030 09:37:32 +0000
asID: 834
IP address blocks: 102.215.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 08:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Mar 24 09:37:32 2025 GMT
Not After : Mar 24 09:37:32 2030 GMT
Subject: CN=67e127e1-3238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:d1:4f:06:1d:24:bc:47:f1:f0:57:ab:a8:
75:bc:9d:f9:6f:09:37:81:95:1b:e0:89:0c:9d:03:
0b:d4:f7:ea:32:fd:ea:a3:bd:da:90:68:98:99:29:
43:eb:eb:58:ec:99:71:f0:bc:42:31:e3:e9:d5:3b:
75:20:b6:9b:b9:f3:79:ae:3f:a0:29:bf:48:11:24:
b6:b4:1d:a0:8b:f4:79:86:26:63:37:75:f9:2c:9f:
e9:1a:3f:a9:13:b3:34:4a:ff:d5:28:e2:f7:60:73:
fd:b2:2a:2a:b7:be:fd:13:6d:c9:08:6d:cc:0d:6b:
fa:11:8f:8d:4c:42:4f:c8:fb:9c:06:61:58:a7:ab:
a6:1e:f3:88:8b:6e:bc:a9:22:2d:a4:fc:76:d2:81:
b5:28:bc:61:9d:dd:6d:c8:d0:2d:aa:07:40:ed:03:
96:e7:bb:25:55:cc:d6:a5:16:34:22:0f:33:57:12:
a2:c7:25:bc:eb:a4:ff:a0:6f:bb:f1:64:ed:9f:ae:
e1:03:6f:f9:d6:f8:ba:8b:c6:ab:70:46:ab:1f:29:
34:1b:a4:ea:b3:71:0d:c3:69:aa:a9:36:03:4b:26:
55:13:a7:ba:6a:41:9c:70:73:72:41:e0:f7:13:fd:
01:f3:b9:b2:a8:74:87:c3:75:f7:c5:b6:90:19:cd:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:60:2D:E8:A6:90:80:F8:40:24:3A:0F:7B:B8:4B:3D:BE:80:67:32
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9EE336E6089311F09553AFA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.227.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c5:dc:6b:c3:a9:cc:fa:7d:e8:6d:8a:1c:fe:81:55:7a:40:
ec:0d:5d:4a:8e:69:23:e1:03:07:2a:00:12:24:5c:06:71:31:
e5:5f:6f:6f:fb:c2:87:eb:9c:49:2c:fc:c3:e1:18:d8:b0:46:
d2:2d:55:a8:81:b9:ff:16:65:c1:9a:4d:34:f3:e3:7c:f7:5e:
9e:ab:2c:ff:15:33:df:45:05:5b:59:e4:b4:a4:0a:8e:73:3f:
d9:95:cb:27:57:9b:c4:7f:44:70:56:f8:93:e4:42:6b:e9:a0:
58:d5:11:30:3d:08:8e:f9:06:c2:6a:b0:94:a3:8b:67:b7:7c:
11:46:f8:47:f4:e5:6d:9d:09:e8:84:0b:68:0f:72:2c:ac:ec:
73:cb:69:e5:0e:f2:82:db:f0:4e:c5:07:db:6b:ac:78:a9:ee:
0c:ba:14:50:8c:26:52:e7:8a:52:5a:e8:ab:98:14:d6:92:98:
76:69:2f:30:a1:10:bc:e4:48:f6:79:19:f2:0b:98:76:6c:95:
c3:74:43:51:63:ab:d8:4f:ff:a9:8a:f2:79:e5:9a:18:7d:80:
6a:11:60:96:35:77:4c:eb:96:ab:a2:fd:89:4e:2d:cf:64:8e:
31:db:b9:7d:46:73:76:3d:4e:56:fc:4b:6a:47:29:85:e0:12:
e5:50:ad:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:39 2025 by rpki-client