Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/1BCD41404C7011F0BE7BC779DAE4EC9C.roa
File: 1BCD41404C7011F0BE7BC779DAE4EC9C.roa (raw, json)
Hash identifier: gyaiWnU0XDIHaL2HNnYTeHA913/Ko0k86SajagFRznc=
Subject key identifier: 41:EA:04:E0:67:E7:8D:60:0E:2A:A5:CA:AF:F3:E3:4A:05:0B:EB:93
Certificate issuer: /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial: 0E
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/1BCD41404C7011F0BE7BC779DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 18:14:44 +0000
ROA not before: Wed 18 Jun 2025 18:14:38 +0000
ROA not after: Tue 18 Jun 2030 18:14:38 +0000
asID: 328716
IP address blocks: 102.222.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 18 Jun 2025 19:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
Validity
Not Before: Jun 18 18:14:38 2025 GMT
Not After : Jun 18 18:14:38 2030 GMT
Subject: CN=68530214-51d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:cb:0d:de:2c:ff:2f:18:51:09:ff:f2:f9:
b4:99:24:d3:f5:5e:dc:48:ac:83:bd:f7:d1:98:c2:
cc:a4:48:e8:cc:b5:93:5e:24:e4:45:40:5c:b2:72:
69:81:7e:6f:b2:c1:ae:79:4f:92:b0:52:40:7c:49:
01:4f:0d:7f:a7:a4:64:21:ea:b5:50:2c:fa:74:14:
1e:32:a6:59:a1:17:b6:ec:45:25:41:6a:fe:88:7f:
d9:22:41:96:17:55:33:76:49:09:29:cb:2d:14:3f:
e0:b6:33:40:46:5d:78:8f:9f:3b:82:a3:a1:1b:7a:
d5:98:1c:95:2b:19:77:ee:43:c3:85:44:be:ae:74:
eb:aa:91:d2:3f:01:71:d9:bb:c0:46:ba:62:e6:3f:
d3:6d:b2:5e:fe:f9:6b:86:39:8a:2f:1c:38:8e:a3:
16:c4:cd:eb:f2:c4:14:ff:02:1a:17:81:2a:da:a1:
55:05:24:1f:ea:3c:e3:79:7d:94:5b:f6:1a:f5:4a:
70:3f:e1:b6:b3:60:7c:c5:aa:53:10:c5:14:5f:80:
b3:a9:0e:bc:db:71:38:4e:29:c5:6e:cd:23:81:c6:
49:6a:bf:41:22:ff:8b:9c:cf:8a:92:ef:de:93:98:
9a:06:bd:78:88:aa:06:42:ec:59:3b:66:ae:b9:f0:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:04:E0:67:E7:8D:60:0E:2A:A5:CA:AF:F3:E3:4A:05:0B:EB:93
X509v3 Authority Key Identifier:
keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/1BCD41404C7011F0BE7BC779DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.120.0/22
Signature Algorithm: sha256WithRSAEncryption
69:71:7e:07:c3:ca:74:5f:e3:da:ab:9e:26:f8:4e:91:09:d3:
b0:fd:03:4a:f9:30:b4:f3:9b:a0:2b:b9:e8:5e:89:fa:bb:f9:
ea:72:f1:e6:6a:d0:21:01:aa:c7:21:69:ba:b2:ec:dc:c9:2f:
21:fb:80:54:e1:7d:26:f0:fc:9c:ab:4a:b9:ad:d3:c1:7e:fc:
07:3e:c7:c4:27:58:a0:38:e4:ba:5e:36:95:a4:99:8f:25:d8:
84:6d:2c:bd:ce:7e:a5:d6:4f:6b:43:54:8b:3d:cb:d1:0b:62:
75:2e:40:25:75:54:4f:01:11:3c:77:00:d9:88:a3:8e:4f:a9:
27:6d:82:22:50:02:b3:45:4f:8d:d8:17:82:66:62:a0:cd:0f:
fc:ce:55:52:e7:de:48:54:54:a5:a7:79:9d:11:5f:6c:76:d4:
9a:d2:28:30:ad:d0:ae:2e:44:91:43:dd:3d:c4:52:51:5f:45:
90:84:1e:02:cf:a3:68:1c:8f:3e:60:81:33:83:45:ce:5b:36:
d0:8b:f5:fe:b5:17:ea:2e:21:14:18:75:e7:2a:2e:51:2b:ba:
18:a3:a8:00:95:53:1d:80:22:1d:80:9c:eb:bf:8f:d0:a8:aa:
f6:31:53:6b:a8:5f:7f:9e:9f:8a:80:0a:28:b8:86:33:31:d3:
57:7b:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:56:32 2025 by rpki-client