Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/68B4D9323D6611F09609E393DAE4EC9C.roa
File: 68B4D9323D6611F09609E393DAE4EC9C.roa (raw, json)
Hash identifier: V1sYgz1frkErM/Ag69FHub/dtVF5VLymuPsKXoS0/aI=
Subject key identifier: E5:4A:BC:9A:4F:81:D0:4B:38:16:73:70:23:18:2A:7E:3B:73:2E:20
Certificate issuer: /CN=F361785AAF/serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
Certificate serial: D5
Authority key identifier: AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/68B4D9323D6611F09609E393DAE4EC9C.roa
Signing time: Fri 30 May 2025 14:57:30 +0000
ROA not before: Fri 30 May 2025 14:57:26 +0000
ROA not after: Sat 30 May 2026 14:57:26 +0000
asID: 329467
IP address blocks: 102.208.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 02 Jun 2025 07:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361785AAF, serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
Validity
Not Before: May 30 14:57:26 2025 GMT
Not After : May 30 14:57:26 2026 GMT
Subject: CN=6839c75a-15bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:ec:d4:3a:51:a2:d8:51:fd:72:0a:bb:73:
f9:81:12:1f:ef:25:b3:84:00:da:21:b3:2c:cd:79:
2b:f0:a3:5e:9a:43:28:f6:e5:e5:73:63:c7:98:b8:
e2:0e:5c:1b:df:b3:e4:0d:52:a2:19:50:4f:e8:3b:
2d:6f:09:3b:e1:8c:8b:1d:c2:11:dc:22:dd:04:90:
f0:e0:76:d6:5a:a9:c5:42:da:44:4c:2d:6f:44:28:
8b:e9:1c:2b:76:5c:b2:a7:6f:b2:b8:7b:9f:04:d4:
88:32:d2:44:1f:6f:9e:cd:85:1f:12:dc:02:0d:85:
02:0e:f9:60:84:76:ff:a3:bd:a0:8c:2a:76:ff:cb:
c4:36:33:8d:5f:17:08:e7:fe:46:5a:38:f4:6c:10:
b8:47:e3:4e:49:58:8f:ed:56:92:d1:da:09:f3:ab:
2e:ad:c0:5b:7a:45:91:4e:d3:98:6b:7d:fa:31:87:
5a:34:0d:22:3c:1a:37:f1:95:01:db:4c:ba:a5:38:
f0:3a:c0:d2:c5:ff:ad:c7:e4:e1:87:d2:9c:9e:40:
f1:26:fd:6d:ba:26:19:6c:0a:04:96:1b:da:4a:5c:
df:3e:9e:3b:ea:31:00:f8:f6:95:2a:32:14:b4:dc:
43:ee:09:d4:84:4a:58:a0:c6:1c:aa:b1:6e:e3:25:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4A:BC:9A:4F:81:D0:4B:38:16:73:70:23:18:2A:7E:3B:73:2E:20
X509v3 Authority Key Identifier:
keyid:AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/68B4D9323D6611F09609E393DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:23:94:64:6d:f6:3e:cb:e0:7c:de:80:30:85:a9:b3:f6:14:
a6:0e:8f:d3:ff:92:55:3f:fc:d8:94:4e:8f:3c:ad:fe:bd:78:
db:e3:b3:e8:34:f1:04:40:e8:97:c3:6a:e8:8f:ac:b0:aa:cd:
94:a3:4b:5f:2c:d2:77:55:0f:91:08:05:ba:c6:45:28:2c:18:
94:ec:ef:30:fd:a9:52:7b:74:f2:09:0f:8b:55:75:50:ea:4e:
60:07:c6:b9:39:35:a7:89:5c:25:67:6d:c8:4d:01:ad:90:f3:
16:e0:65:6f:a6:36:6e:b2:a0:b1:0e:36:ed:2e:b3:05:a2:33:
21:2e:ed:65:30:e6:52:30:b8:10:b5:1b:9b:a9:d0:3f:37:4b:
17:72:78:3e:6f:94:47:32:32:3b:d7:a3:ec:60:fe:33:db:83:
db:85:4e:8b:b7:b3:79:d0:9c:9f:9f:19:13:29:fe:1a:36:00:
13:b4:85:40:be:03:a6:1a:47:3e:fc:cf:ed:97:c4:07:1a:a2:
7d:e3:69:d2:7b:d8:1e:06:4c:0c:fe:72:89:c5:65:08:d8:62:
56:4d:76:9e:2a:bd:f9:3f:fe:3f:4a:78:4f:49:9b:e9:2d:e8:
83:06:aa:86:55:dc:18:b1:b1:94:34:7c:e7:e0:b8:2c:c2:19:
65:09:a4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:17:40 2025 by rpki-client