Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/44D299FA041D11F0A522594C762E951A.roa
File: 44D299FA041D11F0A522594C762E951A.roa (raw, json)
Hash identifier: A11f7itUPrYC2PIhPCAR32INH54lOPaGdupiKSo/8RU=
Subject key identifier: 06:FF:F9:DA:54:D6:F8:B8:AF:C7:9E:E1:94:D4:CF:EE:63:7B:2E:7C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0733
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/44D299FA041D11F0A522594C762E951A.roa
Signing time: Tue 18 Mar 2025 17:20:20 +0000
ROA not before: Tue 18 Mar 2025 17:20:17 +0000
ROA not after: Tue 17 Mar 2026 17:20:17 +0000
asID: 329007
IP address blocks: 102.135.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 11:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843 (0x733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:20:17 2025 GMT
Not After : Mar 17 17:20:17 2026 GMT
Subject: CN=67d9ab54-55ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d1:d2:b8:69:05:b7:1b:34:a3:09:8f:fc:f8:
b8:b1:9b:50:3b:32:e4:40:06:e3:5b:69:95:37:85:
6f:da:11:49:92:8b:f6:6d:e4:aa:5f:e6:e9:35:30:
76:40:20:96:16:12:43:26:f1:75:01:5b:17:8d:90:
66:24:d8:82:d6:0d:6f:79:28:ba:a3:3a:da:a7:cf:
cf:04:d2:b3:10:9b:32:04:2d:78:d3:17:a9:ea:6f:
88:f7:14:3e:2b:cf:97:61:a6:e2:c7:7a:4f:84:f9:
3e:18:61:90:70:d6:1c:0d:0c:1d:55:81:a9:50:60:
25:06:bd:41:f6:77:96:66:85:d3:49:0c:8a:70:f5:
31:a0:f0:41:ec:42:3c:7d:8a:10:ea:4f:f7:87:3f:
17:14:3e:99:8d:62:17:d4:86:0b:c1:99:45:44:7c:
df:9f:4b:7d:bb:6a:0b:b1:12:56:9e:34:eb:80:d9:
d2:75:a1:ef:c0:d0:e1:89:f5:17:ef:e9:87:48:79:
85:18:f2:39:63:48:b3:57:c3:24:38:d2:2e:ba:14:
64:41:e2:a9:ad:40:31:67:61:59:e0:37:1f:57:d6:
4e:cf:49:be:f5:40:d7:79:b4:66:aa:df:4f:3d:29:
d8:87:83:98:2a:4c:c8:84:08:a5:fb:62:60:dc:70:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:F9:DA:54:D6:F8:B8:AF:C7:9E:E1:94:D4:CF:EE:63:7B:2E:7C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/44D299FA041D11F0A522594C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.70.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:d4:b6:78:b7:15:be:56:b2:af:75:e0:e8:d9:2f:f3:cf:7c:
9b:4d:5c:00:a9:3c:0b:b6:9d:8f:fb:10:15:15:36:a4:f4:fa:
a1:4e:c4:a0:f3:bf:7f:3b:2d:5d:88:6c:51:f6:98:e9:29:85:
c7:33:5b:f2:a2:6d:f3:23:75:f6:3a:bd:f8:c9:ea:21:47:fa:
ba:82:8f:8b:80:a4:bc:d8:83:92:85:12:6c:26:b5:e9:14:01:
ca:4b:e3:68:4e:95:15:5a:ef:34:b7:39:8f:1e:6f:9f:8a:2f:
d5:46:02:d4:ca:18:ea:e8:11:44:16:98:28:80:ee:ed:b4:fb:
27:28:46:9a:07:3a:21:45:ee:2c:bf:74:0c:75:30:6a:64:c7:
8e:84:e1:4c:b9:01:da:32:eb:e8:bf:22:4a:5c:8c:fc:c3:aa:
1c:b5:1c:e6:07:bb:53:85:20:69:45:be:82:b1:b9:a6:df:60:
36:a7:cf:ad:31:df:2a:bf:50:e7:da:4a:14:36:93:f9:77:70:
6a:59:73:5f:f9:6b:40:9e:d5:12:30:ab:1b:e8:be:e6:84:2d:
2a:37:5b:0b:c3:7b:4a:4c:8d:12:93:a7:cd:93:d7:ea:ea:f8:
ce:5f:2b:5c:da:63:6c:40:b5:15:10:1c:a3:f8:9d:51:cc:03:
fd:e2:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:09 2025 by rpki-client