Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/06C902404C3C11F0A19C60AADAE4EC9C.roa
File: 06C902404C3C11F0A19C60AADAE4EC9C.roa (raw, json)
Hash identifier: 4GuUQnPFZIlEO2At5iDB8+PvcxrI3cZsZ0yJR+oD5N8=
Subject key identifier: 0B:BF:66:ED:52:5A:81:E2:7D:AD:0B:2C:DF:49:98:DD:D3:76:4D:DA
Certificate issuer: /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial: 07
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/06C902404C3C11F0A19C60AADAE4EC9C.roa
Signing time: Wed 18 Jun 2025 12:01:55 +0000
ROA not before: Wed 18 Jun 2025 12:01:50 +0000
ROA not after: Tue 18 Jun 2030 12:01:50 +0000
asID: 328716
IP address blocks: 102.222.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 18 Jun 2025 12:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
Validity
Not Before: Jun 18 12:01:50 2025 GMT
Not After : Jun 18 12:01:50 2030 GMT
Subject: CN=6852aab3-c976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:ae:bb:fd:d5:ae:d2:64:33:8d:93:20:c2:
76:bf:6a:5b:cd:a8:a0:c9:9b:f8:c4:40:2f:46:0d:
9e:d2:48:3a:6a:65:19:a0:9e:88:98:5e:a5:da:26:
6c:d3:11:79:5d:03:f6:dd:14:20:37:66:38:f6:b5:
3b:ee:d4:a6:92:59:7d:8a:46:5e:21:e1:a1:b2:45:
2c:24:a1:0d:53:e3:2c:13:2a:84:d2:39:09:a3:c8:
1d:99:77:8f:cc:36:bf:38:33:50:bc:63:bf:82:ea:
e9:dd:d9:10:e6:be:65:5e:bb:5e:b1:7b:da:4e:a4:
04:0e:b0:fc:1a:a9:62:cf:ab:f0:bd:1c:3b:29:81:
14:32:94:c3:da:96:d0:d8:79:bf:37:5e:90:4d:d1:
22:a1:5b:a0:fa:bf:f3:8f:e2:5f:a4:7c:c9:3e:d1:
9c:64:7e:e5:b1:c3:56:ab:d3:36:66:33:88:12:b3:
c7:42:f5:f4:e2:6c:f4:c2:08:83:a4:cd:b3:12:1a:
83:c4:6f:43:1d:95:50:d6:90:b2:b9:8e:ea:02:a2:
a3:08:3c:c2:ad:f5:f7:03:b4:d7:1a:39:00:d9:73:
8d:b0:1c:e2:44:2b:7b:22:69:c9:e6:f4:91:5f:6a:
dc:58:c4:e5:64:12:11:56:47:e9:e4:7a:05:a3:60:
df:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BF:66:ED:52:5A:81:E2:7D:AD:0B:2C:DF:49:98:DD:D3:76:4D:DA
X509v3 Authority Key Identifier:
keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/06C902404C3C11F0A19C60AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.120.0/22
Signature Algorithm: sha256WithRSAEncryption
07:56:dd:d0:50:5f:aa:ba:9b:9b:d1:72:d6:2a:7d:8d:e2:6f:
7e:e2:1e:fc:b7:a4:3f:a0:c2:c9:53:e3:eb:55:3f:ed:60:4c:
f0:ec:3d:1a:ce:18:79:1e:1e:c2:d1:c6:1b:20:12:f4:46:34:
e0:57:8c:e2:aa:49:be:95:e2:91:5c:b0:6e:ec:25:33:a5:65:
08:08:f5:7e:04:de:b8:0a:5f:ae:9e:51:dd:7c:9a:33:3b:8f:
6e:fa:5c:d0:54:91:59:a3:6f:55:19:1c:f6:12:f6:10:2b:00:
43:59:05:7e:86:80:36:3c:00:c7:ea:db:78:95:93:53:f4:f9:
f8:9e:b9:9d:08:37:24:e9:52:ee:1f:18:a2:94:38:17:45:cb:
da:29:c2:9f:0d:08:27:99:44:0e:c9:08:3b:c7:37:28:85:56:
25:45:79:7f:ab:49:58:33:18:37:66:a5:5e:54:fb:49:03:d1:
c9:a2:e9:51:63:61:81:7b:2d:8a:76:a7:6d:9a:88:29:a7:1b:
68:bc:fc:6f:db:c7:92:9a:b0:48:17:3a:4d:fb:03:2d:bb:2f:
c0:ae:32:2e:b8:0e:16:d2:d7:20:3c:1b:df:ac:03:32:a6:32:
34:9f:95:e1:f9:85:58:2b:ba:dd:bf:a1:ba:47:9e:c0:f1:69:
74:e4:97:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:58:06 2025 by rpki-client