Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/B6609AF6F2E611EF93BE3B88762E951A.roa
File: B6609AF6F2E611EF93BE3B88762E951A.roa (raw, json)
Hash identifier: xoynLj0G/MEHs3YLiFheZhPt6xhscqeAzovgF6Mubyc=
Subject key identifier: B5:42:FC:C3:4B:A2:F4:E2:19:9E:A1:19:8A:D1:20:96:60:E1:BD:90
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 05F9
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/B6609AF6F2E611EF93BE3B88762E951A.roa
Signing time: Mon 24 Feb 2025 19:36:59 +0000
ROA not before: Mon 24 Feb 2025 19:36:55 +0000
ROA not after: Sun 24 Feb 2030 19:36:55 +0000
asID: 834
IP address blocks: 102.215.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 07:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1529 (0x5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Feb 24 19:36:55 2025 GMT
Not After : Feb 24 19:36:55 2030 GMT
Subject: CN=67bcca5b-c39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:e3:2c:d3:1c:7c:d3:0b:ae:45:61:63:2a:
f6:4c:3a:ff:1f:d3:5d:f8:38:55:3d:3b:b8:2b:60:
f8:32:a4:6a:c6:82:fd:f0:94:2f:fa:55:91:71:58:
e0:ef:39:28:17:48:a3:24:1f:45:91:5e:89:84:59:
f3:3f:9b:fb:c5:a9:dd:00:10:11:fc:d4:14:d4:50:
a3:f1:36:1a:57:6c:f6:84:60:cc:90:10:44:8e:18:
91:59:3f:69:1e:f1:bc:9c:4e:f3:fe:fd:ab:dd:aa:
cb:f0:5e:8e:08:6a:a1:c6:92:14:06:e2:72:91:6b:
7f:23:30:70:56:1b:15:04:24:88:29:09:18:50:57:
e7:56:2e:e4:e8:14:64:09:c7:1c:65:f1:1c:92:e4:
08:3d:73:b9:ab:37:f6:47:5a:3b:70:ac:14:a8:85:
ea:f3:bf:2f:d2:c8:54:83:74:8f:39:93:78:fc:f0:
80:75:35:c5:da:93:3f:90:f6:ab:65:c6:c3:a8:dd:
1b:bc:ad:7d:85:2b:b6:5a:af:e0:e3:de:bc:31:bc:
32:ef:e9:e4:14:45:8e:5b:6a:96:68:43:df:95:34:
e5:db:c2:c2:f8:3d:a6:cb:63:de:45:63:69:21:d6:
dd:3a:47:b2:27:c1:58:4f:75:ab:4d:80:93:9c:09:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:42:FC:C3:4B:A2:F4:E2:19:9E:A1:19:8A:D1:20:96:60:E1:BD:90
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/B6609AF6F2E611EF93BE3B88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.224.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b9:4d:03:66:fe:66:c9:d5:5d:a1:73:3b:0a:dd:55:f9:22:
d4:ec:0a:55:79:fc:0a:85:ab:85:e3:d0:f5:7a:83:7e:6c:be:
24:15:dd:a9:0d:78:9d:da:89:b2:6a:8e:a1:cf:4e:80:c4:2b:
30:7f:86:5c:93:35:ec:f2:c6:ef:6b:b9:86:af:77:0d:43:27:
2b:2c:76:c2:f9:9f:1d:2d:e5:f4:8b:d2:a6:ec:27:c0:08:03:
9d:d8:42:8a:c8:0c:41:cc:e6:8d:20:d8:7b:22:c1:55:a7:8e:
4a:bb:61:f0:13:3c:da:80:a2:15:fe:1a:b0:4e:04:36:e8:a4:
43:a5:ad:67:2c:78:2f:00:2c:5c:40:bb:95:7c:b4:45:01:91:
57:96:eb:5d:b7:ee:62:c9:2e:6e:65:a3:2b:df:26:e2:6b:72:
97:69:3e:e4:72:bd:7b:65:63:99:fb:84:8d:60:8f:5a:31:a1:
b6:98:5d:8d:01:28:65:d3:3c:f6:9d:10:20:7e:9a:fd:b1:ae:
46:1e:61:62:ee:3d:4e:4f:2a:a6:5b:80:2e:6b:51:7a:18:44:
64:12:6e:42:62:e0:df:f1:ad:ce:57:e3:de:1a:95:aa:cc:82:
5e:6e:a5:58:6c:6a:f9:d7:9c:a3:e4:8b:65:0b:1d:1c:6f:d2:
09:1b:63:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:15:39 2025 by rpki-client