Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4F9F6D90041D11F094AC774C762E951A.roa
File: 4F9F6D90041D11F094AC774C762E951A.roa (raw, json)
Hash identifier: i3sUkk9/MGoooPgmZJiuafE1YssoEdUJiAHq9Q4AghQ=
Subject key identifier: D7:E8:65:80:49:9A:A5:BF:BD:EF:87:17:61:61:8E:BA:60:70:70:24
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0735
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4F9F6D90041D11F094AC774C762E951A.roa
Signing time: Tue 18 Mar 2025 17:20:38 +0000
ROA not before: Tue 18 Mar 2025 17:20:35 +0000
ROA not after: Tue 17 Mar 2026 17:20:35 +0000
asID: 329007
IP address blocks: 102.135.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 05:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845 (0x735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:20:35 2025 GMT
Not After : Mar 17 17:20:35 2026 GMT
Subject: CN=67d9ab66-74c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e6:95:d4:43:9c:c5:18:c5:36:35:b7:11:cf:
ce:40:85:cc:de:ed:c8:bd:2c:b4:96:47:41:4c:bd:
f2:59:0e:a6:0f:2b:42:e2:e0:ff:7e:2a:81:52:61:
29:e6:22:2a:a5:9b:06:e5:4e:52:98:c2:98:cd:26:
cf:56:7c:db:c3:12:fb:ec:79:e9:5a:88:84:16:68:
a4:c2:8a:3c:8d:c0:d0:d9:18:12:6f:e2:67:93:f8:
05:58:d6:f4:e7:a1:e8:5c:87:a1:50:e0:d8:89:3a:
74:19:a3:16:48:51:24:b2:0e:78:cf:81:84:ac:a0:
a4:45:c8:49:63:a3:87:de:fa:44:89:88:46:8d:a6:
c0:13:ea:49:32:3f:d7:25:43:18:79:7a:b8:9a:15:
44:f0:73:06:fe:9a:2e:c3:62:28:8b:aa:29:3d:22:
f2:ed:4e:51:b4:ad:d2:fb:23:51:2a:1e:d9:54:58:
1c:39:ef:ee:2a:9f:66:65:d9:df:90:94:02:2c:cc:
a3:6b:3f:39:46:87:e1:97:8b:78:a4:6b:d7:21:92:
c7:a4:7c:80:5e:3c:bd:a4:e2:36:0d:d5:bd:a4:51:
10:05:dd:1b:e6:0f:65:2b:77:1f:67:48:ab:6e:9b:
8d:6a:b2:2f:ed:0e:bd:0f:11:54:af:8b:58:30:25:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:65:80:49:9A:A5:BF:BD:EF:87:17:61:61:8E:BA:60:70:70:24
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4F9F6D90041D11F094AC774C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.69.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a2:28:27:ba:e1:b0:44:ea:2e:2e:a8:e7:1d:cd:7e:4d:8f:
d7:07:71:c7:49:89:33:1e:61:2d:73:de:3a:ad:dc:db:76:40:
e9:a9:d3:18:fc:0e:8d:0d:fa:d3:b2:02:e0:e8:8e:b5:c8:fc:
c1:31:02:60:55:58:66:80:bb:ff:b9:73:9f:bf:10:b5:a3:da:
4c:79:4e:51:3f:71:56:e3:86:da:4c:85:a4:ed:bb:88:44:24:
f5:85:f6:ed:f9:8e:ae:4f:5f:1f:44:f1:b1:4c:77:63:ae:3c:
72:70:4c:9b:90:10:66:ff:31:09:64:d2:16:51:b8:4f:63:07:
50:ab:67:6f:6b:b5:5b:2b:32:cb:6a:6f:ec:3d:70:67:d4:a3:
7f:d5:10:96:07:92:63:b2:61:9f:32:72:05:00:50:d4:39:46:
be:02:4c:ba:6a:00:9f:06:14:8a:2e:73:f3:2e:02:b8:73:a2:
0a:92:e7:2b:d0:83:bd:a4:36:23:07:65:56:19:af:f7:6a:67:
27:70:83:44:13:85:51:51:0f:ce:3e:55:8b:7e:06:46:db:df:
8a:01:94:38:35:bb:7c:05:63:cf:ae:97:06:6e:18:0a:41:a5:
5e:29:d8:25:45:4a:a7:14:cb:d3:28:c3:e1:19:b5:16:1a:6f:
46:5f:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:22 2025 by rpki-client