Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/309D6B70258A11F0ACB0C2A3DAE4EC9C.roa
File: 309D6B70258A11F0ACB0C2A3DAE4EC9C.roa (raw, json)
Hash identifier: bArcJ/hdsHrW2Fxe6ns1wxqXj4FIKL0P520O2C12Unk=
Subject key identifier: 1E:EC:79:FE:25:59:AD:70:49:5D:03:2B:61:FC:8B:51:5B:24:3D:75
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0985
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/309D6B70258A11F0ACB0C2A3DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 06:13:10 +0000
ROA not before: Wed 30 Apr 2025 06:13:06 +0000
ROA not after: Tue 10 Feb 2026 06:13:06 +0000
asID: 208485
IP address blocks: 102.135.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 06:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2437 (0x985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 30 06:13:06 2025 GMT
Not After : Feb 10 06:13:06 2026 GMT
Subject: CN=6811bf76-310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:75:fe:41:8a:b8:fb:35:67:76:fc:9d:44:
0c:a7:97:f6:83:8c:dd:96:a0:e5:d5:b9:1f:8e:d0:
b8:f3:44:e8:b2:d3:d3:6f:b7:53:72:ba:35:3e:15:
76:da:28:aa:71:5e:5c:f8:f2:00:0a:77:7d:93:96:
8e:80:2c:09:8f:47:33:5f:36:02:f1:2e:97:5e:a9:
32:b7:e3:55:89:d6:8e:62:ae:e5:9c:6c:84:19:54:
30:f5:3d:44:02:e0:1a:d4:12:7b:ec:d3:fa:c1:5a:
ab:ae:0e:bb:31:3a:3f:54:fe:a3:fd:21:32:b3:e3:
00:f2:ac:c7:9e:70:ee:0e:7a:51:a8:5c:8e:76:a9:
ea:01:f6:18:16:0c:c6:e7:52:7c:8d:cc:45:81:dc:
65:f1:f7:00:f0:21:92:e6:2e:9d:4a:bc:1c:f2:a1:
30:3c:64:b8:79:c9:ca:3f:30:68:4c:ed:cd:b3:41:
d8:9d:88:41:92:39:b5:f6:9a:69:3c:73:b2:2f:d6:
9b:ca:ff:17:27:ce:94:62:21:0a:07:58:72:cb:0a:
14:2d:06:1d:2f:c4:86:15:e1:fc:b5:31:a4:b3:6f:
5c:03:5d:c1:35:e4:2b:18:87:8b:0c:5f:ba:d6:96:
94:03:92:ff:02:ba:4d:d0:99:22:fb:fd:1b:81:d5:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:79:FE:25:59:AD:70:49:5D:03:2B:61:FC:8B:51:5B:24:3D:75
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/309D6B70258A11F0ACB0C2A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:98:1e:7e:3a:bf:5b:c1:44:ab:98:e0:8b:49:ef:3b:f9:23:
20:7a:42:d6:e3:a4:59:4f:47:87:2f:15:3c:6f:b8:6c:7f:43:
e9:78:08:c3:0e:2e:d0:bf:15:bb:a5:d8:0e:d1:a1:b8:36:14:
ea:e5:fa:8f:05:01:69:d6:3c:86:8f:d2:ac:25:a9:bb:1f:ba:
12:e5:b8:90:87:c0:d5:d3:84:68:7f:03:ee:b9:af:ca:e6:38:
a1:ab:e8:90:a2:76:6e:83:8a:1a:a5:e2:2a:02:08:84:a4:f5:
60:ab:f7:45:6f:76:5c:a8:9a:6f:21:98:85:f9:1f:19:12:9b:
f9:34:c2:d9:0b:dc:24:07:cf:95:c3:7c:c3:86:18:7b:1c:ab:
2d:a5:d7:40:45:b4:cc:cc:73:14:36:b8:68:92:33:2d:2b:61:
b5:23:e3:7a:4d:ac:64:27:68:f3:e1:31:08:8c:f2:ab:90:86:
d1:ae:2f:e2:e0:19:f0:aa:4a:74:a1:cc:5d:9b:8a:32:8a:0f:
b4:84:b9:73:7e:d3:b4:ed:d5:54:bb:6f:91:02:5e:df:46:6b:
8e:0c:c2:29:8b:64:83:09:10:cf:80:40:31:47:1d:04:12:48:
9d:ba:98:06:a0:46:13:fe:0b:48:b8:67:be:34:46:6f:03:f1:
2a:b8:52:d6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCYUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA0MzAwNjEzMDZaFw0yNjAyMTAwNjEzMDZaMBgxFjAU
BgNVBAMTDTY4MTFiZjc2LTMxMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/z3X+QYq4+zVndvydRAynl/aDjN2WoOXVuR+O0LjzROiy09Nvt1NyujU+
FXbaKKpxXlz48gAKd32Tlo6ALAmPRzNfNgLxLpdeqTK341WJ1o5iruWcbIQZVDD1
PUQC4BrUEnvs0/rBWquuDrsxOj9U/qP9ITKz4wDyrMeecO4OelGoXI52qeoB9hgW
DMbnUnyNzEWB3GXx9wDwIZLmLp1KvBzyoTA8ZLh5yco/MGhM7c2zQdidiEGSObX2
mmk8c7Iv1pvK/xcnzpRiIQoHWHLLChQtBh0vxIYV4fy1MaSzb1wDXcE15CsYh4sM
X7rWlpQDkv8Cuk3QmSL7/RuB1fFDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHux5
/iVZrXBJXQMrYfyLUVskPXUwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzMwOUQ2QjcwMjU4QTExRjBBQ0IwQzJBM0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhyMwDQYJKoZIhvcNAQEL
BQADggEBACuYHn46v1vBRKuY4ItJ7zv5IyB6QtbjpFlPR4cvFTxvuGx/Q+l4CMMO
LtC/Fbul2A7Robg2FOrl+o8FAWnWPIaP0qwlqbsfuhLluJCHwNXThGh/A+65r8rm
OKGr6JCidm6Dihql4ioCCISk9WCr90Vvdlyomm8hmIX5HxkSm/k0wtkL3CQHz5XD
fMOGGHscqy2l10BFtMzMcxQ2uGiSMy0rYbUj43pNrGQnaPPhMQiM8quQhtGuL+Lg
GfCqSnShzF2bijKKD7SEuXN+07Tt1VS7b5ECXt9Ga44MwimLZIMJEM+AQDFHHQQS
SJ26mAagRhP+C0i4Z740Rm8D8Sq4UtY=
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:54:38 2025 by rpki-client