Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/47F373E6ED2C11EFB8E850B4762E951A.roa
File: 47F373E6ED2C11EFB8E850B4762E951A.roa (raw, json)
Hash identifier: 8w/ID0Bqk36noooVk7+SepOo2XyPwz4WQE9g1v7GpX8=
Subject key identifier: BB:48:34:59:67:47:91:B0:DC:E2:4F:DB:7E:F7:73:A7:7C:69:91:AE
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0680
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/47F373E6ED2C11EFB8E850B4762E951A.roa
Signing time: Mon 17 Feb 2025 12:39:51 +0000
ROA not before: Mon 17 Feb 2025 12:39:48 +0000
ROA not after: Tue 17 Feb 2026 12:39:48 +0000
asID: 208485
IP address blocks: 102.135.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 04:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1664 (0x680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 17 12:39:48 2025 GMT
Not After : Feb 17 12:39:48 2026 GMT
Subject: CN=67b32e17-f00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:be:63:de:b4:18:fa:00:5c:20:fb:2f:eb:
f3:b7:f5:ff:69:82:06:a3:6b:ad:33:2e:1a:77:e5:
7e:34:ac:e7:9f:fd:b2:46:eb:da:a4:51:b8:73:b5:
b8:1f:bc:74:38:5d:ed:67:46:ee:e9:2d:6c:18:be:
47:3c:83:c3:fa:33:13:d5:fa:13:4f:98:f0:5b:28:
35:b9:79:ca:53:95:85:c0:01:0c:f5:b5:61:68:a6:
05:16:39:5e:40:34:43:61:56:8f:2f:92:6d:07:5f:
2e:66:a8:99:63:80:9c:6d:76:52:71:9a:d6:f7:8b:
f5:87:75:fa:0a:88:96:98:c1:51:dc:11:e7:a9:e0:
43:29:ad:63:44:75:62:66:6b:9e:30:8e:ab:c3:93:
30:e5:c1:cc:b9:00:b9:68:e0:41:10:f0:7a:31:c9:
e0:34:35:f4:86:8a:d4:2d:8f:49:1e:3b:42:6e:4c:
2e:43:f6:50:ce:04:bb:22:08:8a:6d:f7:c0:a0:f5:
11:2a:f1:be:1e:72:2d:2e:da:8f:93:4e:6d:44:26:
2b:0d:e1:1a:ee:f4:27:37:7b:38:22:e0:83:57:93:
91:f5:55:60:8e:65:8f:88:20:f2:e0:77:42:39:fb:
17:67:3a:ea:26:2a:96:a3:9b:c6:a1:6b:57:ba:38:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:48:34:59:67:47:91:B0:DC:E2:4F:DB:7E:F7:73:A7:7C:69:91:AE
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/47F373E6ED2C11EFB8E850B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.6.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8f:48:dc:ce:87:92:48:3d:97:d8:c1:dd:a6:ef:02:ac:4a:
3f:df:71:3a:0a:04:7b:ec:89:b7:49:cc:70:be:52:1d:29:cf:
0a:58:3b:c7:70:6f:83:41:03:c0:dc:8c:2f:f5:c0:71:7c:39:
53:39:5d:85:41:d4:7c:3b:cd:83:18:8d:97:70:ca:1b:ae:06:
b3:fb:39:a2:53:12:72:34:97:af:2f:34:43:05:ac:10:12:c2:
d4:91:41:fc:42:cc:f7:6b:f9:f9:87:2d:5a:29:1f:ee:59:d1:
f0:d5:37:08:cb:92:be:e2:d6:72:40:a6:41:ac:de:05:23:32:
06:77:46:2f:9b:64:09:57:8d:90:4c:60:46:6a:f4:5f:9f:4b:
a4:84:8c:56:74:d3:da:ad:d0:9f:5a:21:1b:fc:1c:9b:f3:7d:
f8:e2:ff:68:67:4a:a0:3e:8e:4e:80:84:55:17:d6:31:e5:1a:
f5:56:3f:c9:6f:42:dc:74:9c:ad:10:62:75:eb:b0:c9:a9:31:
1e:a8:ab:7c:5d:0e:c6:69:5d:a2:e4:ee:a2:1f:a9:f9:38:9f:
39:88:21:90:54:45:a8:c5:21:02:eb:d3:8c:dc:54:1e:37:7e:
41:cc:e2:c7:37:81:df:7d:3f:45:1f:83:32:c9:4c:0e:84:85:
16:f9:2a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:57 2025 by rpki-client