Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/537881B22A3911F0A860CE7DDAE4EC9C.roa
File: 537881B22A3911F0A860CE7DDAE4EC9C.roa (raw, json)
Hash identifier: smdcyekp+PNlQBoQkWFsmcNphk6E4gYxm3a7n3Fp4VY=
Subject key identifier: 3E:F2:25:77:78:8C:87:B4:6F:BC:10:ED:1C:08:A7:93:11:EA:E7:5C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09D7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/537881B22A3911F0A860CE7DDAE4EC9C.roa
Signing time: Tue 06 May 2025 05:16:55 +0000
ROA not before: Tue 06 May 2025 05:16:50 +0000
ROA not after: Tue 10 Feb 2026 05:16:50 +0000
asID: 36352
IP address blocks: 102.135.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 12:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2519 (0x9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 6 05:16:50 2025 GMT
Not After : Feb 10 05:16:50 2026 GMT
Subject: CN=68199b47-61dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:5a:92:32:77:68:81:6f:3d:f2:d9:8b:04:
c0:b4:47:94:5d:8c:24:6b:3e:1e:88:12:a0:cb:7c:
9d:d9:58:5c:f7:26:db:20:b1:12:8d:ca:f7:af:53:
03:87:28:db:e6:ff:f5:74:60:92:87:6b:cc:57:d3:
de:dd:06:4a:e6:ae:89:1a:0e:38:83:5b:50:37:34:
f5:e7:58:cf:c2:68:36:21:57:fc:f4:11:1b:90:24:
5a:b7:a0:d4:be:1d:1a:7d:81:fd:ac:f4:e3:37:89:
c7:9b:c1:c8:0f:3e:53:21:f7:92:4e:af:f9:84:88:
2d:99:65:a3:86:2a:83:3c:ad:2c:a7:a1:84:64:f5:
75:cb:94:4e:6c:0d:86:94:1e:ae:49:4b:e9:6e:9d:
8e:42:b0:b7:8a:bb:44:43:ca:98:7d:95:28:b6:c1:
cd:e5:1a:b1:48:9a:92:c3:64:73:a6:dd:bb:f3:78:
22:2a:40:86:f9:5e:ae:78:06:18:94:0f:64:38:7d:
7f:0f:90:d2:ef:54:4b:cd:69:6a:e5:d2:75:c1:a3:
22:55:d5:65:2b:1e:a9:e5:a6:fb:70:b6:6c:dc:d5:
e9:b7:2c:61:5f:ac:01:45:94:c0:94:67:20:0b:8a:
62:5d:ac:42:05:ed:b0:c2:7c:97:ab:d3:4b:8f:e9:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F2:25:77:78:8C:87:B4:6F:BC:10:ED:1C:08:A7:93:11:EA:E7:5C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/537881B22A3911F0A860CE7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.1.0/24
Signature Algorithm: sha256WithRSAEncryption
91:55:27:6d:15:46:94:dc:25:e9:44:12:ec:2f:59:11:e6:d6:
8c:f2:87:b7:01:23:29:eb:f9:95:25:30:39:6b:f4:4e:b6:20:
61:4a:8d:bf:85:56:b3:7a:8e:79:4d:88:b6:38:c9:bf:6d:cb:
12:98:62:b7:03:44:66:75:af:db:76:ff:ed:d4:1d:da:74:81:
22:ed:88:7a:a8:ef:e2:56:ee:d7:19:8f:b3:23:d3:78:94:9b:
9d:12:45:8b:3a:0d:d4:98:e9:65:c1:1a:f2:69:d8:6d:2c:43:
48:19:fc:38:b7:84:ca:e7:a3:79:1b:c6:98:35:b3:ef:be:a3:
e0:4a:1b:8c:84:6a:e1:3c:d9:94:bf:ac:a8:10:99:f0:f7:5a:
bc:d0:7c:fe:db:a8:c9:44:3d:78:be:9e:3e:f3:b7:02:f2:0a:
5b:f3:f3:69:59:e3:a8:e1:55:7f:52:74:67:88:ce:c3:0c:26:
c0:a6:7c:15:5f:d7:2d:62:d6:f7:e1:98:ec:0e:e1:19:65:f6:
6a:07:b4:bd:d0:74:fb:ac:bd:72:87:20:b2:b4:ef:25:6b:87:
d6:a9:9f:ac:c6:4b:a0:4d:eb:e3:43:d4:73:1d:80:10:1e:df:
f4:cb:65:47:93:ef:19:9d:d9:1b:45:92:b9:a7:35:50:6a:77:
59:a6:37:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:10:01 2025 by rpki-client