Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/94ACB5F03BEA11F0A7078FE8DAE4EC9C.roa
File: 94ACB5F03BEA11F0A7078FE8DAE4EC9C.roa (raw, json)
Hash identifier: EiF9tMCQqY1GJflj7Ux7uOvOxmbQn0VhwUo2imMASaU=
Subject key identifier: 06:63:0A:CB:05:58:98:46:74:32:FF:08:90:3B:7E:77:81:40:5B:B4
Certificate issuer: /CN=F363763AAF/serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
Certificate serial: 03D9
Authority key identifier: 09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/94ACB5F03BEA11F0A7078FE8DAE4EC9C.roa
Signing time: Wed 28 May 2025 17:38:35 +0000
ROA not before: Wed 28 May 2025 17:38:30 +0000
ROA not after: Thu 28 May 2037 17:38:30 +0000
asID: 328535
IP address blocks: 102.36.212.0/23 maxlen: 23
102.36.212.0/24 maxlen: 24
102.36.213.0/24 maxlen: 24
102.36.214.0/23 maxlen: 23
102.36.214.0/24 maxlen: 24
102.36.215.0/24 maxlen: 24
2c0f:d80::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 29 May 2025 07:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363763AAF, serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
Validity
Not Before: May 28 17:38:30 2025 GMT
Not After : May 28 17:38:30 2037 GMT
Subject: CN=68374a1b-ae93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:ad:5b:02:02:d3:cc:65:42:ec:d7:6c:1a:
ea:08:34:d8:ed:85:4c:df:f5:1a:45:4e:85:2c:8f:
a1:ce:51:2e:5a:ab:ef:75:21:9a:26:8f:63:30:d9:
5e:92:cc:2f:cd:28:ea:8b:51:85:94:01:2e:19:3b:
4b:4c:24:16:7a:87:d1:c3:37:bf:4b:2c:38:d9:09:
70:17:a7:82:f1:f4:6b:af:fe:5d:19:c6:00:37:db:
f9:87:d9:1a:4c:0c:0f:d2:28:db:42:a4:22:db:77:
f7:a7:3e:24:87:92:25:c1:d8:02:0c:8a:7a:e4:23:
e8:a0:c7:b1:c7:c8:fb:06:ac:a6:f4:0e:be:72:83:
45:40:25:4b:d5:a3:fe:f8:58:bb:cc:96:d9:db:55:
df:d6:6d:73:d2:c4:ae:be:2b:6a:7e:04:c3:75:e1:
6e:b7:d2:98:6a:c4:2a:c7:f9:0b:ba:83:0a:5d:df:
de:88:49:0f:30:66:d9:55:b0:69:88:b0:3f:0f:dc:
dd:95:15:0c:40:5c:42:bb:db:8b:3f:90:de:d0:a8:
86:23:03:d9:19:3d:bc:fd:dd:57:db:c3:1d:83:ae:
d4:50:a0:00:5d:22:d3:80:11:0c:a8:9a:a9:61:52:
ce:74:06:94:19:fa:8d:fb:8a:69:b4:a5:b9:98:f1:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:63:0A:CB:05:58:98:46:74:32:FF:08:90:3B:7E:77:81:40:5B:B4
X509v3 Authority Key Identifier:
keyid:09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/94ACB5F03BEA11F0A7078FE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.212.0/22
IPv6:
2c0f:d80::/32
Signature Algorithm: sha256WithRSAEncryption
10:6f:9a:3d:f5:68:21:1f:f5:12:60:de:66:b7:14:20:b6:fe:
c3:dd:ab:8f:e8:93:3b:3e:50:b2:09:be:c4:0b:54:cc:de:18:
e1:30:88:ef:1f:84:36:ac:a7:26:5e:9b:0e:06:4b:a7:e8:9c:
fc:87:6d:7b:eb:f7:0f:4b:1a:59:a0:08:c4:7c:3b:e0:2a:14:
72:cf:e6:93:47:df:f2:91:cf:cb:70:59:82:51:ae:cf:8f:32:
c5:29:46:48:77:7d:ab:a6:6e:7c:fd:b5:1c:dc:5d:64:64:4a:
a9:eb:b0:1b:0d:ca:c5:e7:de:89:98:5e:54:d1:c4:dd:7b:65:
99:5a:d0:e8:86:e4:30:5d:46:32:e3:18:3b:ae:bd:49:cf:1f:
54:08:f4:f0:39:a4:d9:68:49:c6:e1:d7:18:40:3f:02:72:89:
a5:98:a5:4d:cd:d4:a6:22:63:4d:17:52:07:d8:65:55:fe:38:
98:2f:d7:b7:be:c9:73:c0:7e:d4:cc:f0:9e:88:30:97:6e:f8:
cf:40:46:14:7d:7e:0a:e3:89:2d:79:3a:1d:95:3c:5c:49:15:
79:76:ec:17:ee:f2:fc:bc:cc:d7:f2:b8:04:60:c4:f4:8b:7b:
e1:a7:c0:54:5d:9a:11:80:e9:d4:27:5a:e6:98:2b:b4:f0:60:
22:61:b3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:59:43 2025 by rpki-client