Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/15940A1A2F2A11F0BD5DAA82DAE4EC9C.roa
File: 15940A1A2F2A11F0BD5DAA82DAE4EC9C.roa (raw, json)
Hash identifier: OdXFvlEawo5FioMP4k9vYNcjStUvDwf0sxqT1copuVg=
Subject key identifier: C4:CF:DF:9C:D3:84:22:3B:57:E8:45:5D:64:28:0E:29:5A:DE:EC:A5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0A19
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/15940A1A2F2A11F0BD5DAA82DAE4EC9C.roa
Signing time: Mon 12 May 2025 12:10:25 +0000
ROA not before: Mon 12 May 2025 12:10:20 +0000
ROA not after: Tue 12 May 2026 12:10:20 +0000
asID: 58349
IP address blocks: 102.135.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 04:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2585 (0xa19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 12 12:10:20 2025 GMT
Not After : May 12 12:10:20 2026 GMT
Subject: CN=6821e531-9bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:ff:0a:21:28:0d:51:eb:6a:b5:36:f8:1e:
0a:19:7b:b5:ff:69:e7:b7:59:29:d4:d5:76:97:52:
76:84:b9:85:7d:c8:ab:b8:4c:9a:2b:6f:43:dc:c5:
7b:7a:af:58:2c:7a:29:e4:42:e8:21:98:46:00:11:
9c:75:6c:b9:b8:23:b5:2e:f5:db:6b:26:00:ee:35:
dc:57:5f:a8:09:a6:cf:e2:ca:e6:43:02:c4:7c:fb:
2d:81:60:48:8d:8f:15:09:b9:38:f4:67:43:b2:73:
f8:9e:ea:cf:af:dc:87:f3:6b:8a:18:c4:84:9c:e5:
45:78:9f:e1:10:3b:a5:fc:5e:b1:81:00:26:48:fa:
32:f5:fd:4b:f7:f2:34:f0:37:82:7d:57:c7:cf:eb:
8e:ca:8e:de:cb:3a:5a:3e:12:d9:84:20:1e:03:27:
3a:50:48:57:4d:f0:42:37:73:8d:5a:12:c3:c1:d8:
3b:be:cb:80:7e:ed:8b:57:a6:07:45:c5:83:e3:93:
91:2c:4a:cd:25:35:7e:7a:17:80:f3:04:12:a0:3a:
3c:ab:54:30:d4:ff:f8:06:55:f0:2c:c8:b7:ae:45:
64:7d:eb:59:00:1d:eb:3a:ff:a5:1a:9c:55:19:d6:
48:43:d2:2c:9f:ee:89:01:50:3c:45:94:dc:dc:46:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:DF:9C:D3:84:22:3B:57:E8:45:5D:64:28:0E:29:5A:DE:EC:A5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/15940A1A2F2A11F0BD5DAA82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d3:ef:c0:8b:a6:22:10:57:96:ab:0d:cd:2d:67:3d:3d:68:
9e:2f:cb:70:80:d0:a6:d2:9b:b9:63:9d:0d:c7:76:99:b0:cf:
05:11:58:3b:44:0d:40:98:be:fd:a8:05:40:45:34:43:31:d5:
0a:78:da:90:97:59:0a:fd:4a:af:7a:44:1e:5a:6f:84:bc:29:
64:56:61:63:47:c4:5d:9b:fb:ce:be:4f:8a:0b:06:50:f9:ad:
60:c7:ca:7b:33:b0:22:14:9a:ec:28:76:c4:5c:47:ae:c6:8c:
78:2b:c3:f0:1d:e4:05:84:6e:18:35:15:ce:0c:2c:8a:e2:43:
d0:95:f7:45:ec:9e:7d:a5:40:ba:ab:68:6d:f6:b2:34:4c:47:
64:2c:1c:68:a4:c6:7d:e9:8d:7f:bc:62:7d:e5:61:21:14:5c:
d2:87:8f:dc:57:fe:05:04:ec:ac:6d:68:d5:6a:56:d7:55:6b:
ef:19:8f:30:f5:21:97:e3:22:8e:cb:22:7a:00:8b:dc:c7:2d:
e1:29:38:92:bc:70:5c:be:6e:fb:de:ed:6f:34:00:bc:f5:94:
2f:5b:67:4a:38:fd:32:aa:da:da:2e:58:6e:ac:19:e0:d0:88:
2d:df:c3:97:92:3d:ce:e5:d2:b9:ce:13:dc:4b:e1:98:e8:ea:
a9:d9:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:35:26 2025 by rpki-client