Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/17553592EDBF11EFB0EA8A74762E951A.roa
File: 17553592EDBF11EFB0EA8A74762E951A.roa (raw, json)
Hash identifier: Fx7T8ABC84m8oe4UPGsO9l55b42ukkBNztGjSvN6k7I=
Subject key identifier: B5:4D:37:C2:2D:82:8B:FF:16:82:0F:96:BD:3D:53:DC:9E:B1:A0:D4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 068D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/17553592EDBF11EFB0EA8A74762E951A.roa
Signing time: Tue 18 Feb 2025 06:10:46 +0000
ROA not before: Tue 18 Feb 2025 06:10:42 +0000
ROA not after: Wed 18 Feb 2026 06:10:42 +0000
asID: 43260
IP address blocks: 102.135.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 18:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1677 (0x68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 18 06:10:42 2025 GMT
Not After : Feb 18 06:10:42 2026 GMT
Subject: CN=67b42466-faab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:2b:e9:b4:2c:03:17:2d:90:a4:2e:57:74:
23:b2:2d:12:d9:e3:48:03:e1:ca:aa:9b:61:7a:8a:
04:06:b6:c8:34:89:d9:41:bf:0c:53:11:8c:c8:67:
7c:d4:33:e1:5f:06:4c:50:f9:de:ef:84:1b:59:09:
5a:b0:cd:35:44:f1:0b:2c:ce:14:7a:f7:84:dd:1e:
2f:fb:a3:49:4b:df:cc:91:8d:9e:4d:95:24:b5:b9:
a3:b3:66:4f:f0:a9:8b:40:5a:9e:95:41:6d:91:a0:
f8:0a:62:24:8c:20:bf:fe:1b:4a:31:25:99:c8:c1:
39:02:6e:a1:e1:ab:be:06:ba:b8:0a:d3:ce:ec:17:
4f:6c:ae:fd:bd:9d:a4:23:b1:7a:f2:b8:01:40:95:
aa:86:58:80:99:41:6c:5d:73:ae:54:ec:cb:62:d2:
24:95:88:df:4f:4b:58:9a:70:6a:e0:dc:2c:e0:e8:
ed:72:52:a6:e4:b6:8a:83:7c:45:51:7e:bf:8f:82:
a9:b4:a1:8e:2d:29:f8:e4:ff:bc:50:a5:93:77:79:
81:40:f6:d6:14:75:16:c2:83:81:fa:20:ca:ff:ba:
20:a6:e2:86:f6:0d:fe:3d:2e:7b:d7:68:ac:18:94:
a4:79:0b:3d:2e:2a:ab:75:43:e9:12:6c:13:71:c5:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4D:37:C2:2D:82:8B:FF:16:82:0F:96:BD:3D:53:DC:9E:B1:A0:D4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/17553592EDBF11EFB0EA8A74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:41:34:19:19:64:3f:f6:e3:d1:07:a3:df:cf:f2:fb:94:2f:
fd:5b:ac:1b:bf:04:c9:14:cb:c1:ef:d0:bb:32:4c:21:a4:13:
61:fc:9d:0d:f0:32:8e:0c:10:93:f7:db:cc:c1:da:0f:cb:17:
1d:46:30:94:ed:f5:10:4b:03:32:b7:c6:8f:a3:c5:69:2a:30:
36:5d:a6:9c:9e:74:82:df:7c:fc:8e:9f:00:a1:37:80:e4:f9:
49:b4:09:e6:23:a3:6a:f8:a1:91:41:af:38:7f:fd:db:89:c6:
49:7e:a1:33:4c:f1:2e:40:6c:d5:95:2e:d2:ed:e3:22:a6:a5:
f2:07:cc:69:77:3c:9f:13:5a:b9:f9:e4:b8:83:19:1e:5f:52:
65:d6:f8:8a:c3:05:49:a6:74:0a:95:26:db:87:aa:52:d0:14:
2b:42:db:31:83:4c:b7:65:52:c1:8a:eb:48:d8:24:20:cf:8b:
1f:f1:e5:bf:f0:24:c6:55:60:9b:5d:03:12:aa:59:57:77:e7:
d0:b3:35:67:be:73:2f:45:11:67:b7:26:16:4e:29:ac:37:d0:
b9:da:c7:63:25:37:07:37:4f:c2:c9:9e:be:7e:d3:7f:9e:0d:
aa:2c:d4:e0:1b:fd:6c:9b:90:2c:79:97:32:0f:33:1f:db:2d:
c1:10:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:04 2025 by rpki-client