Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/453F10F4042111F097F22562762E951A.roa
File: 453F10F4042111F097F22562762E951A.roa (raw, json)
Hash identifier: BqZ+OV4o97YbjPFZWCHO0+Gc6+9OPph75fzPvEwYXK8=
Subject key identifier: B0:B8:3E:30:D9:0A:E5:91:39:23:6B:BB:F1:D3:24:3B:3D:63:8B:5E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0753
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/453F10F4042111F097F22562762E951A.roa
Signing time: Tue 18 Mar 2025 17:48:59 +0000
ROA not before: Tue 18 Mar 2025 17:48:55 +0000
ROA not after: Tue 17 Mar 2026 17:48:55 +0000
asID: 329007
IP address blocks: 102.135.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 05:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875 (0x753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:48:55 2025 GMT
Not After : Mar 17 17:48:55 2026 GMT
Subject: CN=67d9b20b-249d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:44:7c:4e:f0:33:83:59:64:6c:fb:a6:e6:
49:e0:33:59:81:84:2a:8d:a0:13:10:2e:0e:7e:6c:
54:ef:92:2b:9e:8a:6e:65:06:52:0c:39:8c:66:81:
be:53:01:5c:0c:d0:49:65:de:df:04:04:5f:cf:70:
d8:cf:b3:35:c0:cc:36:db:dc:67:62:df:80:a9:16:
9a:62:88:14:c1:5f:48:c8:bc:c0:f0:11:c6:8a:c1:
b2:63:f1:85:30:aa:ab:bc:66:62:aa:ae:3c:6a:6e:
01:d0:91:f5:94:44:64:c8:33:63:60:b5:da:d3:7c:
ce:6b:4a:11:64:3f:19:8a:b8:1b:bd:46:ff:7f:71:
83:97:05:05:26:92:3b:98:5b:cb:26:ed:ef:ce:a9:
ad:e9:d7:33:37:09:44:23:ac:e0:ae:bc:f4:7b:21:
d3:85:d8:84:a6:e7:f1:58:dd:74:8a:66:4e:c8:26:
45:bd:c7:11:87:af:32:06:57:ec:98:1d:cb:34:bf:
80:c8:7a:43:72:3d:1a:15:45:c3:c3:99:5a:3e:a8:
a1:93:8c:21:8b:d5:e3:90:11:a1:26:fd:58:11:51:
e4:c1:f0:4c:f2:95:50:83:ed:1e:7f:f1:fe:00:67:
97:a2:d5:98:c2:9a:b0:d8:45:9a:5d:3c:de:d3:de:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B8:3E:30:D9:0A:E5:91:39:23:6B:BB:F1:D3:24:3B:3D:63:8B:5E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/453F10F4042111F097F22562762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.85.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:bd:22:b3:fa:63:30:e4:7f:9e:a0:29:b0:e7:2c:29:93:d4:
94:9c:34:e4:43:83:03:29:6a:54:23:90:cd:f3:ef:a3:78:88:
a9:e1:3b:f4:53:91:07:f5:50:f9:88:31:4b:c3:66:2d:b9:4f:
b7:8a:23:27:fc:b7:2d:1e:06:53:48:1f:ec:c4:46:9e:71:36:
ec:dd:80:a3:c0:f3:dd:64:94:88:89:0b:4f:8b:06:5f:92:c9:
11:55:d6:09:ed:01:73:00:7b:19:bc:15:59:52:f6:be:c4:29:
82:0c:83:ce:b4:2d:a4:4e:60:ce:c9:f2:dd:e1:6c:e2:c2:43:
d8:22:0a:c0:87:83:77:1f:df:5e:d2:57:4a:4e:90:7c:a3:b2:
59:04:81:0d:89:5a:27:f3:1d:f8:9c:90:80:92:8b:d0:ef:92:
97:b8:ae:2d:54:29:f3:e7:d6:c5:b4:d9:96:43:1a:1b:2f:1c:
79:fa:cf:86:e2:56:fe:96:a7:4d:ea:9d:1c:e7:58:d0:e4:65:
51:b4:86:2e:41:01:39:3d:43:9e:fe:7a:95:cd:39:be:d7:46:
43:e6:74:30:00:ad:aa:d7:b0:1a:56:f8:10:e7:e4:55:6c:3d:
e1:70:c4:0e:30:61:85:95:3d:dd:25:d0:0e:e8:3e:5f:fd:40:
e0:80:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:31:58 2025 by rpki-client