Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/505A91ECD24011EF9F9D0A85762E951A.roa
File: 505A91ECD24011EF9F9D0A85762E951A.roa (raw, json)
Hash identifier: Ot/Xj5OKROFGfv/lQeV4ZelihRwLEg2x4kDhA5FupFM=
Subject key identifier: 8F:61:35:31:11:14:5B:9F:E1:59:4C:6B:E6:C5:BE:FA:71:5B:72:99
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 051D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/505A91ECD24011EF9F9D0A85762E951A.roa
Signing time: Tue 14 Jan 2025 06:25:14 +0000
ROA not before: Tue 14 Jan 2025 06:25:10 +0000
ROA not after: Wed 14 Jan 2026 06:25:10 +0000
asID: 43260
IP address blocks: 102.135.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 04:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 14 06:25:10 2025 GMT
Not After : Jan 14 06:25:10 2026 GMT
Subject: CN=6786034a-1032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:92:e5:a8:6d:3f:a7:40:d0:84:19:78:a5:
bc:4b:49:e6:4d:f5:66:ea:14:cf:cd:fb:3b:c3:e0:
3a:31:55:7c:cc:8a:ba:fe:83:e5:8a:1f:bd:53:cb:
e2:8b:e8:82:d4:60:bb:45:6e:8d:be:ad:bc:58:da:
3f:39:f3:3d:1a:e8:60:76:1b:64:b4:62:0f:3d:cd:
a9:6d:f6:a2:5d:36:71:4d:c3:d2:87:bb:86:44:4b:
12:a0:cf:46:b4:fc:c4:f2:f2:77:15:7d:35:6b:6f:
eb:e3:c1:a1:ce:3a:21:cb:4e:00:2b:ab:c9:c6:d9:
73:3c:5b:31:5b:63:d9:bf:5f:fa:41:12:5d:20:34:
2f:4c:ba:50:f7:f1:c2:c8:da:52:7b:00:38:aa:51:
42:4e:f9:7a:59:fd:18:5d:dd:34:0e:d2:90:02:dd:
b9:f5:59:c6:be:49:93:c6:6d:0b:76:bc:34:12:93:
02:fa:d5:0b:55:7f:04:bc:d0:0b:79:92:61:ea:42:
cd:97:19:ab:1a:3a:6a:55:0b:cb:68:99:e9:11:70:
96:52:83:b6:e9:9c:ef:19:d8:26:91:cc:52:e5:9b:
bb:83:e5:0a:95:33:ac:fa:01:af:68:e9:7f:10:e2:
d5:38:36:49:81:a5:d7:55:9d:29:09:2f:c2:d2:c1:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:61:35:31:11:14:5B:9F:E1:59:4C:6B:E6:C5:BE:FA:71:5B:72:99
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/505A91ECD24011EF9F9D0A85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:09:d5:e6:df:ad:fc:32:66:ce:a4:73:ae:b7:f3:9a:b6:ee:
af:39:1f:b0:1f:dc:c5:22:5e:4b:08:a5:59:cd:c6:17:8f:a6:
6b:6e:74:3f:10:3a:35:ed:88:6b:9a:39:71:63:6d:f5:1f:7e:
36:7f:3a:75:51:74:f9:3b:4c:4d:25:86:4d:ab:f5:7c:0a:b4:
af:0d:09:00:c2:1d:99:18:a4:0a:47:a8:f7:29:89:f8:75:cb:
f2:09:1a:8e:ca:86:02:08:80:69:13:38:28:1d:c3:53:ba:95:
1d:c5:fa:0a:92:0c:00:1f:51:26:b9:f4:07:cb:60:b2:58:cc:
35:2f:1f:96:93:b2:3b:50:b3:06:80:1d:6e:ab:38:bd:17:c7:
ad:d6:47:67:a8:4d:d6:0e:90:24:6a:2e:9d:22:8b:7f:ed:14:
c3:0f:ed:ab:d2:9f:cc:e3:3b:cc:bb:33:01:7a:77:98:ab:7f:
aa:de:1f:bb:fb:ef:8b:6c:db:b5:a5:c6:cc:61:29:85:23:a4:
7d:cc:75:f0:86:c5:2b:c9:04:6f:34:36:31:a8:42:b0:39:1c:
83:61:8f:88:34:ca:1a:59:f4:4c:3e:fc:0c:5a:cb:b5:f9:7b:
a1:b0:55:a3:58:31:fc:64:3c:37:24:39:4a:61:60:21:06:cf:
c3:15:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:01 2025 by rpki-client