Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/091AEE1E042011F0AB14345D762E951A.roa
File: 091AEE1E042011F0AB14345D762E951A.roa (raw, json)
Hash identifier: 9RkKmsmZtJhbEVEFbWx973dbmUTUh0Xv6mFc2Z+XXQk=
Subject key identifier: 39:25:B5:02:D3:26:0B:9F:B2:05:A5:B7:B4:2B:EE:63:1A:7C:4D:17
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0743
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/091AEE1E042011F0AB14345D762E951A.roa
Signing time: Tue 18 Mar 2025 17:40:09 +0000
ROA not before: Tue 18 Mar 2025 17:40:05 +0000
ROA not after: Tue 17 Mar 2026 17:40:05 +0000
asID: 329007
IP address blocks: 102.135.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 05:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859 (0x743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:40:05 2025 GMT
Not After : Mar 17 17:40:05 2026 GMT
Subject: CN=67d9aff9-ff69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:53:79:79:44:c4:e1:78:0a:30:30:11:49:
e5:96:65:bc:f1:c1:c5:7c:29:8d:47:b8:79:f4:5b:
e6:33:e7:fd:30:c1:3f:c2:9a:8e:9a:3c:fe:71:af:
f0:07:3e:ce:8d:12:2e:2b:c2:b2:6a:81:52:de:fc:
d7:b4:ba:cb:2c:8a:49:25:fe:a8:cd:a1:7d:ca:a5:
ac:f1:b9:8b:46:88:16:53:2b:77:5c:c8:87:33:e4:
54:de:0d:f9:6e:2b:c2:ed:44:d7:f2:cf:b4:76:44:
b2:86:0c:69:41:da:45:5c:62:90:d4:a9:dc:fd:e0:
4b:d8:fd:b3:d7:a1:93:2f:2e:c5:fc:06:8c:7f:f9:
11:f7:25:eb:52:35:3f:97:0d:7f:8e:9e:6e:1e:59:
14:9a:15:ec:c9:97:cf:fa:af:36:ee:20:a2:2c:90:
99:21:57:2e:54:cb:a9:50:3f:98:ac:d1:f3:69:67:
44:5d:d1:a8:90:c3:d9:83:d4:70:dc:00:ff:7f:e3:
c9:f1:44:6d:be:48:f5:cc:72:76:60:b0:4a:53:b7:
67:72:fa:e0:63:1c:8a:75:fa:82:6a:3c:ea:75:e3:
ce:b7:2e:b0:69:aa:0f:a6:c0:c2:d2:40:06:11:42:
a8:a7:c8:dc:94:22:61:d3:95:a5:e9:c3:cc:4a:ac:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:B5:02:D3:26:0B:9F:B2:05:A5:B7:B4:2B:EE:63:1A:7C:4D:17
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/091AEE1E042011F0AB14345D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e8:b5:d4:51:b3:1f:9b:f3:66:11:00:4c:54:29:6a:f5:a3:
92:e9:5a:d1:60:33:4a:a7:9d:c5:a3:a9:44:2d:38:71:7c:36:
ae:43:22:26:46:f3:66:c5:a8:82:6b:df:45:d3:27:3e:d5:2f:
72:6d:77:46:9a:c2:b1:88:2a:81:be:bc:57:a9:21:21:38:d9:
49:53:2c:e8:ff:64:64:f2:d4:55:ae:cd:55:d8:ae:ad:8d:83:
2b:77:c2:30:c8:d0:9e:f4:3b:4b:fb:99:1a:5e:dd:32:9b:65:
b0:b7:0a:23:5c:10:20:ec:61:62:5e:05:a7:d9:0f:82:15:44:
14:41:dc:9d:cf:67:c0:4f:2f:90:20:b3:54:da:67:61:7c:79:
b4:fb:df:df:3b:33:a4:b6:61:af:7b:5e:72:0c:de:54:87:89:
76:c2:a7:1e:18:aa:70:d7:7c:ea:8f:6d:d0:bd:6c:ec:08:63:
fb:fc:39:3a:b6:84:eb:43:f1:19:2d:da:5b:77:b1:b7:15:76:
f6:bb:c2:09:d3:b9:20:87:91:e7:be:6d:14:a7:f7:02:87:d7:
d2:4c:4c:50:e5:63:1d:64:2c:0b:6c:5f:aa:65:c9:f3:75:10:
40:d5:7b:d0:39:91:ab:93:e2:e5:46:b0:d8:76:b6:ad:82:85:
62:0e:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:59:23 2025 by rpki-client