Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CED5CFA25BC811F0968165DCDAE4EC9C.roa
File: CED5CFA25BC811F0968165DCDAE4EC9C.roa (raw, json)
Hash identifier: n0//mvhjEtMr5frI7HQHgngFTEhgNVURmNXMtZePEmk=
Subject key identifier: 83:1F:39:0D:17:A2:34:73:CC:A1:E1:FA:AF:7D:FE:3F:D1:1F:A9:F7
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 06C0
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CED5CFA25BC811F0968165DCDAE4EC9C.roa
Signing time: Tue 08 Jul 2025 06:57:27 +0000
ROA not before: Tue 08 Jul 2025 06:57:22 +0000
ROA not after: Mon 08 Jul 2030 06:57:22 +0000
asID: 834
IP address blocks: 102.216.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Jul 2025 18:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728 (0x6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jul 8 06:57:22 2025 GMT
Not After : Jul 8 06:57:22 2030 GMT
Subject: CN=686cc157-b415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:04:84:5f:1b:6b:10:fa:1c:25:26:28:5a:
80:ef:a3:f4:88:bc:61:dd:e6:72:8f:f8:3c:d4:79:
a4:b2:2c:79:c7:79:5f:40:c4:95:27:86:30:a5:e4:
c5:08:10:43:34:bb:87:57:e6:22:a5:7a:fe:18:d5:
b1:c2:86:13:86:39:12:b8:14:08:5b:8c:d2:4e:2d:
5f:0d:e6:25:10:64:2d:cc:01:db:c2:7f:88:e8:61:
ec:f8:83:d9:8a:f8:54:7b:e6:86:0e:b4:de:5f:82:
20:c7:ee:24:1d:aa:5d:22:73:33:d2:26:e7:91:46:
5d:4b:68:4d:3b:3e:99:06:99:0a:ec:45:45:73:30:
db:64:10:5c:fc:fa:d6:d5:23:cf:51:6d:73:50:d4:
00:75:da:27:cb:a5:eb:cf:ce:aa:5b:48:de:59:24:
23:7a:e1:d6:54:bb:ce:22:05:fa:4c:1a:98:63:c5:
58:a0:16:27:88:d2:84:ba:8e:8c:88:88:90:ba:b4:
44:90:6e:99:96:7b:54:f1:0e:bd:95:4d:b3:fc:cd:
20:aa:52:37:a6:e5:c0:7b:5a:cb:ce:d4:3f:53:17:
bd:60:f2:4b:71:e1:50:1f:4a:24:34:a3:14:39:66:
cc:e5:ea:84:cf:8f:2e:53:d8:fe:75:a2:7d:f6:07:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1F:39:0D:17:A2:34:73:CC:A1:E1:FA:AF:7D:FE:3F:D1:1F:A9:F7
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CED5CFA25BC811F0968165DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/24
Signature Algorithm: sha256WithRSAEncryption
74:29:70:43:72:aa:52:82:fa:44:b7:d8:75:24:d0:ed:b4:b9:
62:d2:14:62:0b:b5:32:01:60:5f:b2:dd:cc:a2:37:f7:76:29:
a7:46:3b:44:91:bd:3e:a5:f7:56:e1:94:b1:2b:0d:5f:ad:bc:
05:86:59:6c:a2:f9:27:c2:7f:df:57:ce:64:0d:3e:d1:25:c0:
94:49:7f:ef:13:30:92:00:2a:d6:6a:f3:98:98:55:73:20:01:
d1:71:95:c5:8d:9f:74:f9:01:7b:1e:13:be:35:06:a3:35:c7:
d1:ca:5a:1f:ee:53:42:0f:f5:78:fc:57:11:a0:b9:0e:ed:69:
b9:dd:17:5d:a2:cc:a1:98:6b:32:ce:a6:23:0f:e3:00:66:54:
dd:0f:4a:88:cf:88:3f:02:3c:e4:1c:d4:d7:00:9a:29:8f:ac:
06:08:bd:d5:f9:0f:b9:56:bc:23:7e:a5:52:44:0a:76:54:3a:
df:67:81:f0:78:7c:2d:af:71:16:5b:cf:6f:02:6b:6f:86:ac:
a9:2d:c9:be:dd:f9:c5:28:1d:2b:dd:c2:2e:e0:39:9e:ba:59:
07:b9:09:61:4a:ce:fd:00:4b:49:af:6b:ed:fd:42:17:5e:56:
58:1e:83:fc:4d:10:bc:e7:a4:38:eb:9e:98:99:a4:75:1d:15:
47:02:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:38 2025 by rpki-client