Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/028452423B9411F0AA4144BFDAE4EC9C.roa
File: 028452423B9411F0AA4144BFDAE4EC9C.roa (raw, json)
Hash identifier: DBnE3gYzeIq/VEKGJ/bBEcB8tP6B//htvanuOHqYyV8=
Subject key identifier: 94:B0:E6:E3:73:97:2F:CD:FE:26:6D:88:C1:AD:FC:53:AB:37:28:52
Certificate issuer: /CN=F36312D2AF/serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Certificate serial: 05BA
Authority key identifier: 31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/028452423B9411F0AA4144BFDAE4EC9C.roa
Signing time: Wed 28 May 2025 07:18:54 +0000
ROA not before: Wed 28 May 2025 07:18:49 +0000
ROA not after: Mon 31 Dec 2035 07:18:49 +0000
asID: 37236
IP address blocks: 102.213.128.0/22 maxlen: 22
102.213.128.0/24 maxlen: 24
102.213.129.0/24 maxlen: 24
102.213.130.0/24 maxlen: 24
102.213.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 14:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1466 (0x5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36312D2AF, serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Validity
Not Before: May 28 07:18:49 2025 GMT
Not After : Dec 31 07:18:49 2035 GMT
Subject: CN=6836b8dd-f9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:88:5d:e9:05:a5:95:49:ed:b8:e2:dc:1a:
37:fb:0f:30:ee:92:43:c4:70:09:37:01:27:c4:64:
56:86:3e:9c:ed:ef:56:2b:74:47:c0:cd:ba:2d:4f:
30:bc:db:94:99:c5:ed:4e:11:d8:7f:e2:02:b6:dc:
ff:83:8b:ae:34:2c:41:9d:8a:ca:d9:3c:0b:2c:7c:
56:0a:34:ce:ce:85:67:45:3c:d4:28:6e:80:dc:6a:
20:c6:9d:d6:75:e7:55:e7:95:4f:ff:1d:0c:ab:48:
47:bf:5c:2b:df:e5:82:01:33:ce:91:e0:5f:b1:ec:
7f:6b:de:b8:1e:f7:5c:8f:11:10:ee:d9:72:d8:64:
76:45:6a:f5:c0:be:a5:0b:37:74:00:6b:5d:fc:5c:
8b:1e:0a:9a:00:9e:ca:56:4e:c8:63:54:3d:0f:85:
16:06:6a:cb:fe:64:36:d1:e9:56:6a:eb:c8:58:eb:
ba:15:62:72:5b:93:6b:4c:5b:7c:54:8a:4a:2b:29:
45:0e:8e:b6:2e:14:83:84:ee:da:7e:74:54:59:15:
81:92:18:24:5c:54:06:13:12:73:33:fa:a9:e4:09:
db:30:30:38:c2:1f:26:39:56:e9:42:e4:a0:c1:07:
66:ff:39:52:f6:53:93:be:41:e6:76:b1:b0:6e:47:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B0:E6:E3:73:97:2F:CD:FE:26:6D:88:C1:AD:FC:53:AB:37:28:52
X509v3 Authority Key Identifier:
keyid:31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/028452423B9411F0AA4144BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.128.0/22
Signature Algorithm: sha256WithRSAEncryption
63:6a:a9:5b:71:17:d8:a2:3a:9c:03:a5:8c:d9:72:1c:0f:d4:
79:6b:66:1a:1e:f9:ad:1d:cd:da:2b:fa:0d:df:5c:e4:d6:ec:
1e:05:e0:31:81:61:24:1a:4a:7e:b8:56:e5:57:8e:b0:7c:11:
f5:7b:83:2e:a9:a7:c5:05:64:47:a3:eb:fb:06:21:9a:db:8d:
ce:18:51:63:45:0e:ef:7b:6d:09:fa:e3:7b:18:83:04:54:09:
22:d7:58:e7:80:6f:40:06:4c:a0:28:af:d1:cd:fa:7e:47:66:
a5:6d:01:22:c9:2c:a3:09:d4:2d:6f:b0:01:68:29:50:a9:b3:
85:77:2f:7c:02:30:99:0d:6c:27:52:d9:d3:b5:52:9b:42:10:
56:b1:21:9d:3d:e2:b3:51:fd:98:0f:68:3b:22:b4:3d:28:4b:
9d:41:a9:92:90:2a:e9:d9:f0:25:f5:ec:11:71:3c:63:e1:da:
76:a8:9a:fc:2e:a1:2a:03:87:9b:07:ba:74:09:6d:97:f3:d9:
9b:89:de:68:85:30:e9:91:c6:68:fb:99:ea:1a:ab:3f:14:fa:
6a:96:2c:18:f8:ec:a2:dd:bc:04:c6:cc:67:6d:49:ae:f5:8a:
eb:13:bf:a6:ed:52:94:9d:0e:46:f5:ca:f3:21:94:b4:db:f7:
a8:1a:45:ea
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBbowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzEyRDJBRjExMC8GA1UEBRMoMzFCQTVBQ0U1N0JGMURBRkJBODhEREFFRjQyRUM4
RjE1MTVFMTNDMjAeFw0yNTA1MjgwNzE4NDlaFw0zNTEyMzEwNzE4NDlaMBgxFjAU
BgNVBAMTDTY4MzZiOGRkLWY5ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5vohd6QWllUntuOLcGjf7DzDukkPEcAk3ASfEZFaGPpzt71YrdEfAzbot
TzC825SZxe1OEdh/4gK23P+Di640LEGdisrZPAssfFYKNM7OhWdFPNQoboDcaiDG
ndZ151XnlU//HQyrSEe/XCvf5YIBM86R4F+x7H9r3rge91yPERDu2XLYZHZFavXA
vqULN3QAa138XIseCpoAnspWTshjVD0PhRYGasv+ZDbR6VZq68hY67oVYnJbk2tM
W3xUikorKUUOjrYuFIOE7tp+dFRZFYGSGCRcVAYTEnMz+qnkCdswMDjCHyY5VulC
5KDBB2b/OVL2U5O+QeZ2sbBuRwKbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlLDm
43OXL83+Jm2Iwa38U6s3KFIwHwYDVR0jBBgwFoAUMbpazle/Ha+6iN2u9C7I8VFe
E8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMxMkQyL0ZGQTI1MTQ0RjBGRDExRUJBODVCNjQzRUQ4QTAxNENFL01icGF6
bGVfSGEtNmlOMnU5QzdJOFZGZUU4SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01icGF6bGVfSGEtNmlOMnU5QzdJOFZGZUU4SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjMxMkQyL0ZGQTI1MTQ0RjBGRDExRUJBODVCNjQzRUQ4
QTAxNENFLzAyODQ1MjQyM0I5NDExRjBBQTQxNDRCRkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1YAwDQYJKoZIhvcNAQEL
BQADggEBAGNqqVtxF9iiOpwDpYzZchwP1HlrZhoe+a0dzdor+g3fXOTW7B4F4DGB
YSQaSn64VuVXjrB8EfV7gy6pp8UFZEej6/sGIZrbjc4YUWNFDu97bQn643sYgwRU
CSLXWOeAb0AGTKAor9HN+n5HZqVtASLJLKMJ1C1vsAFoKVCps4V3L3wCMJkNbCdS
2dO1UptCEFaxIZ094rNR/ZgPaDsitD0oS51BqZKQKunZ8CX17BFxPGPh2naomvwu
oSoDh5sHunQJbZfz2ZuJ3miFMOmRxmj7meoaqz8U+mqWLBj47KLdvATGzGdtSa71
iusTv6btUpSdDkb1yvMhlLTb96gaReo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:00:24 2025 by rpki-client