Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5E5375DEFDE211EFB73E9AAC762E951A.roa
File: 5E5375DEFDE211EFB73E9AAC762E951A.roa (raw, json)
Hash identifier: UMj/JRcUSehcC+N0OQuU3EveCD57Oeh+qU4kxBz33eQ=
Subject key identifier: 5B:FF:D3:F4:84:B3:2D:97:1F:B5:FF:96:31:94:AC:24:83:6F:FE:F9
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06E1
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5E5375DEFDE211EFB73E9AAC762E951A.roa
Signing time: Mon 10 Mar 2025 19:03:36 +0000
ROA not before: Tue 11 Mar 2025 19:03:31 +0000
ROA not after: Wed 11 Mar 2026 19:03:31 +0000
asID: 209642
IP address blocks: 102.135.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 11 19:03:31 2025 GMT
Not After : Mar 11 19:03:31 2026 GMT
Subject: CN=67cf3788-a095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:ed:51:0e:99:2e:71:d7:f9:da:3a:52:4b:
08:0b:d2:04:20:39:ad:26:c4:cc:64:22:4f:ce:e2:
37:5e:5d:7e:70:7f:fa:a7:31:31:65:31:96:96:c3:
97:9c:b0:57:e2:e3:4f:35:c5:8c:69:c9:aa:0c:0d:
e7:fe:68:27:3a:ca:75:ba:0a:85:e8:d6:b5:6f:c3:
23:2e:73:26:77:8a:7c:b4:34:d7:b3:5d:8b:ed:94:
c7:9a:11:50:95:64:aa:50:37:e7:85:57:1b:da:fc:
46:62:f7:4a:98:6c:d6:91:43:13:77:fa:a3:84:7b:
5f:3b:85:17:a3:b9:83:61:33:c9:19:42:03:6b:34:
74:87:04:9a:70:cb:03:5b:e4:b3:3d:e3:09:76:1f:
03:c5:f0:6e:34:32:3b:70:0c:82:02:45:08:fc:8d:
16:34:00:ff:be:ff:b9:cb:c7:a8:05:18:f8:19:1d:
e1:45:e6:bb:7e:de:2f:de:ff:6b:3f:49:ff:28:9c:
67:86:06:97:2a:4d:7d:e9:0a:b8:e2:40:ba:84:6c:
86:86:f9:39:61:86:31:f2:05:e8:d1:28:70:97:2b:
4f:b1:f3:6a:d2:81:f1:c4:1e:85:a2:b4:41:18:d1:
6a:05:bd:e6:19:d9:01:4d:d8:a2:75:ab:a9:73:4c:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FF:D3:F4:84:B3:2D:97:1F:B5:FF:96:31:94:AC:24:83:6F:FE:F9
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5E5375DEFDE211EFB73E9AAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.14.0/24
Signature Algorithm: sha256WithRSAEncryption
39:57:a6:b9:46:58:69:a1:18:f1:a0:a4:42:8c:bd:60:c1:5e:
24:72:97:a2:6d:4a:57:cd:0e:30:47:52:5b:2e:dc:bd:dc:a1:
09:97:c3:8f:01:ee:6f:b4:62:68:7b:3d:78:24:40:3d:93:df:
93:aa:64:3b:66:1b:2a:2d:ad:3f:94:80:bd:7a:cd:a9:ac:ce:
75:31:55:a1:37:e6:88:d5:5d:f2:a6:a2:21:64:a1:21:20:ee:
42:13:98:97:79:68:f2:9e:34:88:94:b5:c4:26:d3:34:dd:bc:
ac:9a:88:1e:12:9d:bb:cf:5b:bf:73:d2:45:6c:fd:7b:17:8b:
79:69:f7:54:83:05:b3:8e:93:68:0f:03:5e:b6:16:96:36:44:
e4:e8:fd:6e:38:b7:26:63:4e:0a:d2:96:48:de:58:0e:60:89:
23:74:6f:42:15:d2:51:70:53:97:7e:b8:14:c3:b3:b1:71:02:
59:27:ba:57:7f:11:08:d0:b4:d0:55:bc:d3:f7:b3:92:1c:3f:
a1:48:ee:44:50:05:16:ba:70:8e:0a:5e:ac:ec:b1:18:55:7d:
e8:0d:20:51:26:fa:7b:25:7d:0a:d9:e0:f6:43:e8:16:8a:36:
17:0d:ec:7d:a6:18:5e:3d:b9:ab:be:9b:4a:8b:92:32:c2:20:
63:0a:66:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:32:49 2025 by rpki-client