Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/29B9C52A2F2A11F09208B082DAE4EC9C.roa
File: 29B9C52A2F2A11F09208B082DAE4EC9C.roa (raw, json)
Hash identifier: hCDaxIZM35P1GuV9ec1h+xVQFII6xolWUV1BS92ZVY0=
Subject key identifier: A4:4C:E7:04:06:0A:A3:3D:B7:BE:91:D9:66:16:7E:40:72:96:C2:5C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0A1B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/29B9C52A2F2A11F09208B082DAE4EC9C.roa
Signing time: Mon 12 May 2025 12:10:59 +0000
ROA not before: Mon 12 May 2025 12:10:54 +0000
ROA not after: Tue 12 May 2026 12:10:54 +0000
asID: 58349
IP address blocks: 102.135.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 06:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2587 (0xa1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 12 12:10:54 2025 GMT
Not After : May 12 12:10:54 2026 GMT
Subject: CN=6821e553-28c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:35:a8:55:b5:da:6a:3d:97:af:cb:9f:93:
90:0c:0b:ae:14:a0:88:11:ff:e4:81:0e:7f:6c:56:
31:bf:a7:4c:1c:7e:c4:ab:cb:31:a0:cd:e5:3c:c7:
45:a0:5f:bf:ba:9f:bc:28:4b:08:b9:3c:6c:28:48:
a2:25:c0:05:15:66:d2:70:f7:97:05:32:38:af:33:
c4:6d:a8:a7:f4:26:31:5a:b8:5b:f4:de:af:1b:9d:
74:ac:17:a8:8d:12:b4:c7:1a:ff:e1:0d:2e:37:26:
98:a4:4b:21:d5:0c:0e:d0:d5:d8:2a:dd:ca:49:67:
15:1c:60:a9:21:7b:c6:db:c0:ef:51:17:3d:f5:71:
e5:6b:a0:e5:d5:6e:0a:54:7e:ab:76:b4:de:b6:86:
97:41:40:14:9d:b5:bb:cd:de:dc:78:b6:66:78:34:
94:07:ff:07:11:ec:b0:97:32:e7:88:af:09:1b:d5:
1f:0a:0c:50:90:2d:d5:8c:6e:8c:bf:db:44:50:18:
84:ef:ec:a4:7f:23:1f:4a:a6:a0:3f:d6:58:79:f0:
09:20:bf:39:b9:3b:8c:ef:50:d3:08:48:67:d8:b2:
75:ad:32:43:03:ac:ec:80:de:86:df:50:2f:1c:19:
9d:b4:d9:bc:f5:b5:eb:d4:6e:de:80:12:14:86:a6:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4C:E7:04:06:0A:A3:3D:B7:BE:91:D9:66:16:7E:40:72:96:C2:5C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/29B9C52A2F2A11F09208B082DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.1.0/24
Signature Algorithm: sha256WithRSAEncryption
df:c4:fc:86:5f:2f:4b:11:4f:bf:15:7d:cb:fb:8b:0e:0c:d9:
e8:b2:72:30:36:90:e5:5e:d4:e2:52:c9:f4:16:b7:d9:db:6e:
a4:05:d5:a2:97:0d:5d:4f:fe:e1:27:f5:9f:1a:70:88:66:f2:
79:28:26:bf:45:6c:f2:0b:c5:77:07:5f:80:fc:df:c5:3e:5c:
44:ad:a1:54:d6:fd:34:6e:ab:93:d4:91:f5:cc:4b:0d:e3:d6:
92:45:70:7d:fb:db:a6:76:a1:de:c4:3b:3f:92:ae:0a:1c:ed:
c2:9b:e2:2e:4d:81:31:f3:bc:ff:38:7f:ec:e0:21:fb:eb:20:
2d:8f:14:a5:41:77:57:c0:2a:64:39:d2:50:58:56:d7:4a:c0:
3e:99:b0:03:3b:61:b8:5c:11:f7:30:0e:dd:37:f1:33:37:e5:
d8:a8:23:17:97:52:66:99:f7:72:d0:62:a5:25:f3:9c:28:a3:
f3:17:17:40:a6:bc:39:40:fd:59:1a:68:7f:7f:1f:07:95:55:
70:b1:6d:31:d2:eb:e7:7f:89:1e:71:d2:14:38:ef:49:96:13:
b9:3d:c2:ec:22:8d:b3:fb:6a:94:80:6e:a9:df:e3:68:06:77:
4b:f8:95:b5:af:4c:c8:c2:9c:ab:ca:7c:fa:29:b8:bb:fc:d2:
ae:ab:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:26:37 2025 by rpki-client