Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/41AFD6D82F2A11F081F3BD82DAE4EC9C.roa
File: 41AFD6D82F2A11F081F3BD82DAE4EC9C.roa (raw, json)
Hash identifier: EfHClVqCC2dOkwa5ztlLBXDnF61ncO1KVBjRHzrCogc=
Subject key identifier: 3F:2E:98:C2:5E:BF:9C:3E:3E:B4:21:E3:00:70:05:C5:96:73:69:D5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0A1D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/41AFD6D82F2A11F081F3BD82DAE4EC9C.roa
Signing time: Mon 12 May 2025 12:11:39 +0000
ROA not before: Mon 12 May 2025 12:11:34 +0000
ROA not after: Tue 12 May 2026 12:11:34 +0000
asID: 58349
IP address blocks: 102.135.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 04:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2589 (0xa1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 12 12:11:34 2025 GMT
Not After : May 12 12:11:34 2026 GMT
Subject: CN=6821e57b-fd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:f6:30:a7:db:42:fc:4b:67:fd:0f:d1:7f:
7b:1e:41:73:37:c9:e8:2d:69:09:7f:cf:21:ea:db:
97:d6:ef:a4:af:32:9a:40:77:7d:3c:e4:61:37:68:
5d:b8:a2:8d:7f:fa:70:f2:23:81:24:76:9e:1c:89:
c3:ff:da:4a:2d:ae:87:7f:03:3e:f8:ea:10:68:05:
fe:e7:04:8d:5e:ee:ac:fa:f1:14:fa:09:25:54:24:
5a:8d:1f:f5:12:7e:6c:0d:0b:b7:ea:fe:3b:b7:c5:
83:61:0a:00:10:d1:f9:25:9f:ce:20:72:16:df:25:
4e:1f:a9:61:b7:83:fd:15:8a:b9:09:64:7d:04:91:
9a:58:54:cb:ed:49:bd:db:ba:d8:d7:9f:d8:a8:f3:
6d:86:10:d3:2c:1c:01:a2:0e:47:c6:b0:b8:31:e5:
55:0d:85:47:5b:ae:55:8d:c5:13:cd:33:3a:81:b2:
e4:be:76:7d:1d:79:2d:37:ef:6e:8b:47:64:10:ce:
64:47:a6:c1:28:e4:28:44:57:02:7c:09:7e:c1:c2:
9b:7f:8b:cf:1e:ce:e3:bf:cb:15:6a:15:5e:10:b9:
d4:bb:2b:21:30:bc:a4:75:9e:eb:95:4a:1d:59:1d:
59:6f:1d:3e:b0:dc:24:fe:60:84:57:a5:39:e7:5d:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2E:98:C2:5E:BF:9C:3E:3E:B4:21:E3:00:70:05:C5:96:73:69:D5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/41AFD6D82F2A11F081F3BD82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:76:da:1e:ba:7b:0d:51:a0:39:78:28:de:83:58:2d:78:ec:
2b:ac:7e:da:fe:cb:d6:4b:d7:2d:94:3f:4b:6d:36:32:03:9c:
6d:c1:e6:78:ae:04:fe:ba:25:aa:2a:5d:f8:35:bf:56:73:15:
77:8e:17:76:16:49:40:05:79:14:79:88:aa:56:76:6e:54:14:
47:3a:b3:aa:da:3f:8e:d2:05:c4:46:98:c7:97:9e:7c:2c:93:
99:46:f9:86:ec:5e:cd:f2:0a:ac:7b:ae:b2:73:5d:ee:95:3b:
f3:7a:c4:78:36:0e:7a:de:12:92:24:46:ed:28:65:35:45:a4:
5b:c1:d2:23:86:af:df:94:86:9a:95:eb:03:4c:8a:9c:41:12:
b8:35:b2:b7:8f:eb:b1:1d:0a:ac:96:2a:6b:51:32:c1:d5:db:
e9:78:b1:63:43:53:15:12:96:dc:54:47:87:47:33:51:ea:ce:
5d:59:71:8f:9f:05:04:4e:a8:b4:c1:f9:d5:d5:0a:bd:48:1f:
ad:38:df:f6:66:89:de:df:b5:85:15:9f:05:01:fd:04:50:5c:
95:e9:e3:6d:0f:96:99:90:8a:1c:9b:bd:94:10:bc:41:de:7c:
df:d1:96:8d:8b:3d:e3:5e:28:a6:d7:e9:fb:20:71:81:1f:71:
bd:4b:87:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:36:47 2025 by rpki-client