Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4CF874A0C7FB11EFB92448B0762E951A.roa
File: 4CF874A0C7FB11EFB92448B0762E951A.roa (raw, json)
Hash identifier: Rx0r4p8qfLcai2H9TuhNd57qGON5Ko6kxoGEg8xux24=
Subject key identifier: 52:0B:2C:65:99:68:9B:CF:E3:A3:2B:DA:0D:D8:76:7E:2C:FD:44:FA
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04CE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4CF874A0C7FB11EFB92448B0762E951A.roa
Signing time: Wed 01 Jan 2025 04:46:01 +0000
ROA not before: Wed 01 Jan 2025 04:45:58 +0000
ROA not after: Thu 01 Jan 2026 04:45:58 +0000
asID: 43260
IP address blocks: 102.135.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 04:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 1 04:45:58 2025 GMT
Not After : Jan 1 04:45:58 2026 GMT
Subject: CN=6774c889-5edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:69:1c:37:8e:4a:66:12:da:33:87:c2:13:
2a:8a:24:15:6b:3e:82:f6:b3:fc:8a:cd:02:90:cf:
f1:e0:7a:87:f0:14:e3:7e:77:b4:5c:39:1e:41:4b:
80:d1:01:8a:4c:29:a9:c0:a1:50:17:71:d2:60:1e:
35:9e:a2:c9:f3:3d:c0:2b:ae:46:8e:84:a9:c3:12:
6c:68:98:12:02:ba:96:d9:0f:e0:17:82:d1:99:9d:
73:41:a3:ad:70:20:88:87:57:13:94:b7:74:33:15:
67:ad:2d:66:0f:54:62:20:d3:5c:cb:7a:f4:16:da:
11:cb:6d:40:aa:e6:ee:4d:2b:57:f7:87:d2:ff:6e:
52:f4:ab:95:75:ae:34:61:b5:6d:4a:02:0d:ed:1b:
7e:81:62:6f:96:90:fc:d5:c1:1d:81:11:ec:7e:2f:
68:58:2a:51:f5:8c:57:61:d3:51:58:5e:0b:dd:5a:
bc:d7:91:9f:1d:99:d6:1f:98:04:7e:e8:4d:32:d7:
3e:79:8b:4a:a0:1d:18:a3:87:49:6a:56:1a:de:0b:
c3:9f:d7:ad:e7:ab:41:bf:a2:05:1c:75:9e:4f:9e:
2f:53:74:62:12:46:ff:b3:a6:23:11:75:92:eb:e9:
eb:a4:d7:e0:f8:f8:4b:42:d8:08:cc:34:f2:f2:52:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0B:2C:65:99:68:9B:CF:E3:A3:2B:DA:0D:D8:76:7E:2C:FD:44:FA
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4CF874A0C7FB11EFB92448B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.2.0/24
Signature Algorithm: sha256WithRSAEncryption
02:77:ed:00:bc:fe:9a:c9:ad:93:32:d2:42:2e:89:d3:54:2d:
aa:7e:cc:fb:f4:d5:16:d4:36:c0:c0:46:3b:3f:9c:d5:52:a5:
fd:09:a7:db:6e:3e:67:f9:54:32:e1:9a:82:b3:f4:a3:62:20:
e5:81:0f:e9:2c:fc:3f:9d:b8:80:c0:ab:a4:24:32:b0:4c:bc:
45:f1:5c:ad:ff:4f:41:10:87:ad:25:9e:1f:43:ff:79:8c:65:
f1:7e:09:e7:c7:0b:54:f8:af:9c:c9:db:c0:2a:83:05:2b:d0:
00:6c:16:8d:81:b8:0a:1e:d9:40:06:6a:4d:2a:6d:e8:76:c6:
67:c4:a8:82:8c:51:4f:44:84:9f:ec:ed:82:ef:82:89:86:52:
0a:a2:a8:3c:e8:ea:a4:fd:b5:3d:14:b7:f1:2d:e6:5b:d3:c3:
2d:b0:db:44:83:a2:c9:34:28:c3:76:d0:1c:c7:c8:2f:05:9b:
40:de:82:1a:d2:e8:18:2a:da:2a:70:9b:9d:76:b8:0a:3e:d6:
dd:6b:f5:d4:2e:f3:f5:22:47:03:69:09:06:4c:b9:81:1d:5b:
e5:cf:20:5f:f2:a6:ec:12:df:0b:6b:97:e1:07:9b:29:47:43:
88:a1:66:c4:db:d5:87:d3:12:b0:e7:6e:ff:7d:68:c3:41:c2:
07:6b:72:6f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAxMDEwNDQ1NThaFw0yNjAxMDEwNDQ1NThaMBgxFjAU
BgNVBAMTDTY3NzRjODg5LTVlZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr8GkcN45KZhLaM4fCEyqKJBVrPoL2s/yKzQKQz/HgeofwFON+d7RcOR5B
S4DRAYpMKanAoVAXcdJgHjWeosnzPcArrkaOhKnDEmxomBICupbZD+AXgtGZnXNB
o61wIIiHVxOUt3QzFWetLWYPVGIg01zLevQW2hHLbUCq5u5NK1f3h9L/blL0q5V1
rjRhtW1KAg3tG36BYm+WkPzVwR2BEex+L2hYKlH1jFdh01FYXgvdWrzXkZ8dmdYf
mAR+6E0y1z55i0qgHRijh0lqVhreC8Of163nq0G/ogUcdZ5Pni9TdGISRv+zpiMR
dZLr6euk1+D4+EtC2AjMNPLyUn0nAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUgss
ZZlom8/joyvaDdh2fiz9RPowHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzRDRjg3NEEwQzdGQjExRUZCOTI0NDhCMDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwIwDQYJKoZIhvcNAQEL
BQADggEBAAJ37QC8/prJrZMy0kIuidNULap+zPv01RbUNsDARjs/nNVSpf0Jp9tu
Pmf5VDLhmoKz9KNiIOWBD+ks/D+duIDAq6QkMrBMvEXxXK3/T0EQh60lnh9D/3mM
ZfF+CefHC1T4r5zJ28AqgwUr0ABsFo2BuAoe2UAGak0qbeh2xmfEqIKMUU9EhJ/s
7YLvgomGUgqiqDzo6qT9tT0Ut/Et5lvTwy2w20SDosk0KMN20BzHyC8Fm0DeghrS
6Bgq2ipwm512uAo+1t1r9dQu8/UiRwNpCQZMuYEdW+XPIF/ypuwS3wtrl+EHmylH
Q4ihZsTb1YfTErDnbv99aMNBwgdrcm8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:50 2025 by rpki-client