Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/DD8EA1D027F311F088D2E9C8DAE4EC9C.roa
File: DD8EA1D027F311F088D2E9C8DAE4EC9C.roa (raw, json)
Hash identifier: 1MgLEZNSgK7CUaTK90/BT5qomt7yH6YWrxWKuKcW6QM=
Subject key identifier: 64:68:AF:55:42:93:E7:67:ED:E2:98:D4:0D:30:14:DB:2D:3F:FE:F7
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0665
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/DD8EA1D027F311F088D2E9C8DAE4EC9C.roa
Signing time: Sat 03 May 2025 07:54:40 +0000
ROA not before: Sat 03 May 2025 07:54:35 +0000
ROA not after: Fri 03 May 2030 07:54:35 +0000
asID: 834
IP address blocks: 102.215.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 20:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: May 3 07:54:35 2025 GMT
Not After : May 3 07:54:35 2030 GMT
Subject: CN=6815cbc0-02fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:30:f2:4a:82:f3:36:07:39:b1:10:36:4d:
0c:5f:80:0c:5a:e4:d1:c9:1c:5d:65:da:5e:b8:19:
82:b7:b1:b7:2d:3a:76:09:a7:ec:c8:d0:79:d0:7d:
f6:6b:7d:75:8b:4c:81:05:94:b6:74:2e:31:09:a7:
aa:88:bd:d7:0f:60:5f:88:8e:11:f2:37:4e:bc:f2:
23:7e:f4:e9:85:b3:ff:40:2d:75:88:80:78:fd:89:
db:3b:bf:0f:35:c5:95:8e:7e:ce:86:3e:49:b7:fc:
89:e9:6d:df:c5:6e:c4:13:f6:ca:cf:ee:54:1d:15:
ff:ee:f8:2c:06:04:18:9c:9b:87:a2:0d:5d:bc:a4:
40:ed:bc:61:26:c1:1c:d2:2a:da:88:b9:12:08:30:
44:f1:5e:d6:c4:f2:62:37:17:e4:72:bb:19:d3:b6:
4c:fd:42:ac:13:35:37:2d:6a:e5:ab:36:e7:e1:b1:
a4:1a:b5:31:cf:61:90:d8:04:53:e0:5d:8c:62:34:
6a:ea:a2:61:11:e6:67:28:a9:07:55:9d:dd:29:3a:
de:84:dc:16:43:37:9b:f7:68:3b:74:d5:87:b8:41:
c1:16:e8:d7:4a:7a:44:61:2c:f6:d6:91:f4:26:3b:
d6:30:34:d1:31:61:f3:16:e4:05:b8:bc:80:c8:1a:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:AF:55:42:93:E7:67:ED:E2:98:D4:0D:30:14:DB:2D:3F:FE:F7
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/DD8EA1D027F311F088D2E9C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.224.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c1:e9:c8:65:d9:92:3c:33:8f:ac:9d:b0:53:dd:c8:ad:53:
17:ce:6e:98:e7:57:7b:e7:0c:8c:74:32:83:21:a6:14:8b:c0:
84:6e:6a:ae:3c:a9:e1:a0:7f:fd:66:e9:d6:a8:75:91:06:74:
36:f8:e0:80:54:c0:9c:eb:5e:a9:78:48:94:5b:24:8c:3b:83:
08:b6:9f:52:a9:99:9c:27:d1:5e:bc:e3:ee:f8:f5:5a:a1:76:
25:e0:6a:8f:c8:09:81:06:41:2b:8b:ae:77:e6:91:bd:d7:38:
83:da:f0:4f:9e:26:78:d0:bc:d8:55:63:3f:0d:be:4b:0f:bb:
c6:dc:97:3b:2e:36:17:be:f9:3d:68:27:c9:59:6f:3f:40:2e:
cd:bd:62:15:f4:22:66:af:55:99:76:53:f4:86:97:22:8d:a9:
1e:17:6f:aa:c3:21:f2:74:25:64:03:f5:24:52:6b:94:41:74:
07:7a:33:ec:56:e9:6f:97:a2:6b:65:8c:96:e4:ee:ce:24:bb:
77:3f:10:2e:58:ed:c7:b5:b1:08:96:68:4e:25:c7:6b:2c:37:
1f:b9:05:84:85:53:64:d7:4b:ae:c0:13:62:88:06:6e:74:01:
1d:60:43:73:9f:3e:40:51:ee:6c:e1:54:55:57:be:1b:31:4b:
22:39:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:00:17 2025 by rpki-client