Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D4440E48374411F09E58CFA6DAE4EC9C.roa
File: D4440E48374411F09E58CFA6DAE4EC9C.roa (raw, json)
Hash identifier: aRLkiYHBArdsDx2nMDPfJ3tmLodCWzzFzLaVVCJrSnc=
Subject key identifier: B1:01:05:9E:D0:3F:BD:4D:53:56:45:46:35:C3:B3:18:66:30:EE:29
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 067E
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D4440E48374411F09E58CFA6DAE4EC9C.roa
Signing time: Thu 22 May 2025 19:42:01 +0000
ROA not before: Thu 22 May 2025 19:41:56 +0000
ROA not after: Wed 22 May 2030 19:41:56 +0000
asID: 834
IP address blocks: 102.215.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 May 2025 19:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: May 22 19:41:56 2025 GMT
Not After : May 22 19:41:56 2030 GMT
Subject: CN=682f7e09-70ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:c3:53:99:b9:4c:8b:21:b0:4a:bb:96:8d:
69:04:02:4d:c5:20:74:22:33:11:97:91:51:c2:d6:
7c:c6:c2:91:a8:c1:28:68:5f:a6:f4:15:91:36:93:
24:87:b0:c3:9f:a7:f3:09:f1:7b:98:f8:48:92:eb:
be:e3:61:47:66:4a:d7:be:a1:64:a9:b9:6a:0b:5e:
3d:ba:04:c5:cb:62:b1:2c:52:93:ea:46:b3:68:30:
86:b6:db:f8:01:63:ac:e6:d3:14:c2:f8:95:a4:a0:
b7:62:da:e3:a0:c2:cf:82:57:ce:76:98:a4:eb:e0:
66:28:22:9b:c0:2c:50:e5:4a:4f:53:53:f7:3c:54:
07:e1:5f:86:30:3f:de:40:91:92:70:ee:17:19:88:
ff:54:48:34:34:74:6e:4f:90:aa:4b:c1:95:ad:91:
57:2e:c3:57:f7:ca:31:88:62:5c:2b:f7:11:85:da:
f7:cd:2c:90:f7:16:35:1a:4a:7a:f8:e6:cf:84:24:
a7:64:f4:bb:1f:d2:fa:b2:c0:0c:24:6b:f2:ac:fd:
7a:b2:55:d0:e7:6c:fe:6b:b6:7d:95:0c:e1:6f:6f:
cf:a9:d4:6e:8c:cf:48:48:55:ca:ac:02:ed:b2:21:
95:9c:8e:0e:77:67:50:0b:0b:46:6a:17:79:29:d4:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:01:05:9E:D0:3F:BD:4D:53:56:45:46:35:C3:B3:18:66:30:EE:29
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D4440E48374411F09E58CFA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:61:5d:e5:b8:b0:9c:7d:33:71:54:c7:35:37:68:8c:50:a7:
3e:7c:6a:ea:d2:da:d1:36:b5:3d:e7:fe:0c:e1:19:fc:3e:01:
55:98:4d:0f:78:2a:df:93:48:41:fb:f6:b6:81:24:d6:11:9d:
7d:43:21:b4:6d:f2:8b:93:89:07:b2:81:f1:bc:fd:54:64:d4:
c0:e9:ef:f3:62:da:57:41:66:04:b4:4e:cb:b7:91:ce:13:45:
fe:27:42:b9:9d:53:13:b3:e5:03:8c:54:3a:45:d2:79:7d:63:
00:c4:b7:34:33:67:0e:a7:88:35:0d:6c:89:48:e5:25:f7:3e:
02:38:b3:23:3f:ed:fe:e1:76:42:c1:34:d0:7b:83:7b:ee:8c:
08:cc:ec:d8:46:de:79:b2:c0:8e:6a:93:4b:47:79:19:df:a5:
25:2b:2e:b4:50:68:75:ca:d4:78:be:5c:bf:27:71:cc:05:39:
0d:06:8a:10:3f:35:61:bc:0f:81:bd:8f:7f:12:18:48:48:2c:
7a:1b:bd:4d:6a:af:0e:1a:c8:32:05:c1:c3:1a:9a:e1:7d:bd:
84:46:36:90:37:97:ba:44:58:79:d3:7e:e3:9a:78:0c:7b:75:
f9:f9:73:1e:d9:e7:28:ea:b6:ed:4d:63:0e:5b:7c:5c:d8:f4:
23:dd:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:46:36 2025 by rpki-client