Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0086AC78042211F0B88A7266762E951A.roa
File: 0086AC78042211F0B88A7266762E951A.roa (raw, json)
Hash identifier: C/66IWXRQ0f0BEn8c+IADmNqBaFznqOVbQfaj3kYvkc=
Subject key identifier: E2:52:FE:B9:AD:12:B8:B4:5B:52:C0:C9:90:04:30:F5:E7:ED:AF:63
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 075D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0086AC78042211F0B88A7266762E951A.roa
Signing time: Tue 18 Mar 2025 17:54:13 +0000
ROA not before: Tue 18 Mar 2025 17:54:10 +0000
ROA not after: Tue 17 Mar 2026 17:54:10 +0000
asID: 329007
IP address blocks: 102.135.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 11:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:54:10 2025 GMT
Not After : Mar 17 17:54:10 2026 GMT
Subject: CN=67d9b345-2a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:01:6d:40:68:f6:52:ca:81:20:75:22:e5:
60:00:0c:97:58:6d:da:8f:5c:63:42:3b:13:b7:cd:
9e:d5:e5:b9:30:7f:05:2e:89:75:8a:ee:37:d7:aa:
09:8b:d1:e7:d2:62:8a:33:67:80:73:6c:7a:b2:3b:
9b:b6:e2:5b:95:f8:90:fd:cc:2b:d9:5c:63:e8:9d:
b5:f7:2c:80:b4:c9:2f:2a:72:f6:9d:ea:f9:aa:9d:
3a:15:0d:e9:ee:c0:fd:ba:77:b4:c6:ec:aa:e9:45:
75:26:81:48:91:a8:f0:9c:aa:d6:4b:0b:63:66:0a:
cd:82:ce:aa:50:ce:fc:86:29:32:80:65:58:58:52:
e0:1f:48:f7:40:ff:9a:3b:1f:69:71:59:ba:fd:57:
a6:86:02:a0:d9:de:ea:ee:47:83:f6:da:98:60:d4:
12:6c:7c:ea:db:58:7f:d2:e1:79:80:17:7d:bf:44:
d6:67:88:64:77:a3:97:5d:5d:a4:d5:b0:59:a8:05:
99:32:66:ec:15:27:24:c6:b2:9b:85:39:11:50:78:
43:bc:8c:e3:0f:6b:04:2c:d0:5b:2b:a8:1e:0f:cf:
3c:44:88:7c:d5:a2:e8:61:90:85:cf:77:16:09:8e:
fa:71:80:43:40:1b:4e:e7:3a:3d:7d:af:c3:3f:ee:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:FE:B9:AD:12:B8:B4:5B:52:C0:C9:90:04:30:F5:E7:ED:AF:63
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0086AC78042211F0B88A7266762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5b:47:3e:e5:de:a7:d2:cd:5c:ff:d9:ef:21:78:f9:16:1c:
c0:c1:8d:dd:d4:21:33:61:fd:7c:0c:06:be:a8:64:7c:f0:ac:
b6:07:21:ea:6e:d2:6b:20:d1:4b:a1:d1:e7:47:2e:16:02:ad:
82:17:9d:1c:73:f3:46:a2:83:3a:99:db:6d:a1:59:b9:85:a3:
1d:c7:0a:eb:38:b7:46:6a:57:cd:b9:7a:ec:d0:35:2f:61:ba:
57:2d:23:7d:c3:b3:02:f3:28:a3:9a:1f:43:8c:03:b2:32:e7:
e4:61:f0:fb:91:6f:7d:3f:ba:27:8b:27:c3:06:57:58:49:b7:
8d:9d:bc:c2:9c:3c:1f:39:f6:a6:ca:db:6e:50:09:97:3e:56:
f0:5c:9e:91:4e:ee:cd:cf:5d:8a:53:2e:ec:33:3b:aa:a6:a8:
fe:b4:dd:b1:30:c5:31:c3:57:80:86:aa:5f:3a:b5:e0:e1:4b:
c4:57:0f:12:be:96:ed:58:d1:ad:c4:56:f9:29:ca:93:92:4c:
05:65:46:25:02:8a:6c:89:63:b1:5b:03:3a:0f:6a:39:12:c5:
b0:9e:84:97:43:a6:f4:ee:4d:99:e3:c1:e9:1c:b4:48:f7:31:
8d:a2:e8:1d:7b:e2:05:bf:ed:1d:6d:a5:6a:ff:eb:a8:9f:da:
2e:33:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:34 2025 by rpki-client