Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/59BB5D60E78B11EFA7A2B794762E951A.roa
File: 59BB5D60E78B11EFA7A2B794762E951A.roa (raw, json)
Hash identifier: d+dm6QPT2Iv4cXb5Dc0kQJAYHApiptG/5FWoTgIJy0Q=
Subject key identifier: E5:7D:6F:D8:8F:04:80:85:0B:4D:20:22:CA:EF:61:0A:2B:0C:4E:8C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05D0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/59BB5D60E78B11EFA7A2B794762E951A.roa
Signing time: Mon 10 Feb 2025 08:45:16 +0000
ROA not before: Mon 10 Feb 2025 08:45:12 +0000
ROA not after: Tue 10 Feb 2026 08:45:12 +0000
asID: 329007
IP address blocks: 102.135.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 10 08:45:12 2025 GMT
Not After : Feb 10 08:45:12 2026 GMT
Subject: CN=67a9bc9c-ea49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:65:6f:e3:64:4a:d9:3c:ed:23:cb:54:ee:
b5:d7:ac:53:19:98:8b:59:3f:67:7b:8b:0e:6f:ec:
6a:d7:2c:5e:60:84:f1:8b:20:24:fd:6e:b9:d1:fc:
74:93:0d:50:f3:a6:d6:80:6b:af:f7:0d:15:bd:49:
b2:12:8b:0c:80:a3:62:87:59:55:f6:83:d4:b9:de:
1c:5d:af:f0:00:19:46:43:48:dd:39:0a:1f:e5:42:
da:98:30:18:28:49:74:29:c1:4b:c2:66:27:cb:73:
0f:26:18:8f:2f:96:0c:2d:1e:40:1f:d7:e5:f7:56:
74:be:a2:33:91:4b:8c:c6:24:a0:a8:5c:d6:8a:20:
59:38:c0:25:23:49:0c:fb:33:af:1e:71:74:8c:f0:
32:13:cf:4d:9e:0b:d8:97:39:97:f7:55:9c:e5:bf:
e8:ef:82:42:13:19:68:2f:16:60:19:cd:7a:c8:8e:
20:cb:d2:13:77:0e:93:bc:0d:88:8e:47:a0:ce:a7:
f2:36:ec:6e:bb:f6:8f:74:36:03:fe:ea:bc:62:9b:
30:8f:32:8e:73:30:c4:24:de:f5:8e:ec:a6:0a:c2:
7c:36:ee:70:26:b9:92:48:6b:37:68:e5:e1:34:03:
90:9c:0b:07:7d:5b:b1:86:9d:48:e5:90:72:33:39:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:6F:D8:8F:04:80:85:0B:4D:20:22:CA:EF:61:0A:2B:0C:4E:8C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/59BB5D60E78B11EFA7A2B794762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5a:4c:26:08:29:74:70:20:c5:06:fa:6d:bf:14:80:c1:87:
75:d9:9d:0f:3f:63:83:d1:43:09:10:7d:ab:74:9b:e8:a8:78:
34:a8:c2:67:fa:8e:f3:56:ed:e6:0a:a3:d5:76:05:9a:b6:1c:
7f:ec:b0:ed:81:3d:d0:7d:ed:07:80:98:e5:34:11:e1:ef:40:
06:b8:ce:46:48:05:2e:2b:87:cf:7f:b4:ba:1b:a5:c4:70:7e:
e4:d2:d5:d7:cf:db:42:17:f8:1f:da:3a:34:ee:f6:b5:ff:e4:
24:00:2c:ff:0c:69:8d:fc:4e:e6:63:63:3e:b1:32:a3:68:da:
51:55:2f:22:71:77:67:b1:1e:2b:76:21:1b:99:ae:12:c1:a6:
e0:25:a4:56:69:3a:24:dd:50:f5:a9:30:b0:ec:c3:62:3b:50:
d8:3d:05:67:f5:27:d1:db:7c:1e:99:00:b8:b6:99:a4:45:b3:
6f:98:e4:d2:2d:37:1b:42:87:52:5d:46:a8:90:70:68:8c:42:
4c:8a:0b:19:6a:b3:b4:82:c3:93:b9:c8:f0:9f:7c:aa:19:8a:
1f:4b:43:08:63:16:62:f4:14:8a:3e:b1:9a:4a:16:07:08:4b:
8f:62:7b:21:fa:99:14:f5:a9:39:38:82:11:cd:3b:ff:e4:f8:
fd:f7:bf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:07 2025 by rpki-client