Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/646147B2D33F11EF8E2EBA57762E951A.roa
File: 646147B2D33F11EF8E2EBA57762E951A.roa (raw, json)
Hash identifier: MWVslJTkRpbB08buUyWLqnPJVAgCeutIOiWmv44pQtc=
Subject key identifier: 4C:54:FA:93:AD:87:02:10:37:4D:FA:BE:1D:BD:DC:B2:47:B4:00:8F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 057C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/646147B2D33F11EF8E2EBA57762E951A.roa
Signing time: Wed 15 Jan 2025 12:51:09 +0000
ROA not before: Wed 15 Jan 2025 12:51:06 +0000
ROA not after: Thu 15 Jan 2026 12:51:06 +0000
asID: 329007
IP address blocks: 102.135.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 12:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1404 (0x57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 12:51:06 2025 GMT
Not After : Jan 15 12:51:06 2026 GMT
Subject: CN=6787af3d-e8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:cc:79:ad:ed:f0:73:26:d9:47:3c:eb:78:
e2:fb:cf:de:52:dd:bd:f7:8e:f5:ac:65:3a:81:15:
0f:87:76:22:52:40:77:91:1c:6a:69:06:42:7c:df:
6b:4b:6f:20:f6:ff:39:43:e6:16:ba:69:a8:38:fe:
19:52:ad:14:ff:a2:8d:30:b9:63:49:5a:6f:0c:c2:
f2:36:66:c5:49:62:79:7a:ba:56:03:03:10:d7:26:
52:7f:3c:da:8b:82:3a:b1:e1:d1:36:0c:d7:d8:b4:
7b:8d:44:6a:e5:20:46:42:7e:50:89:6c:d1:79:62:
7a:0e:5d:cb:52:e6:5e:2e:66:da:ad:20:d9:0a:a7:
bc:9e:40:0d:60:98:d2:a1:48:b4:25:40:46:84:24:
5b:0b:c8:60:e0:1a:1f:20:42:2e:df:92:a1:54:7e:
8a:c1:82:41:c3:58:73:cf:db:61:86:af:a4:82:fc:
5f:2b:5a:c9:c2:c3:2d:3a:ff:23:57:2d:95:e9:c9:
ef:78:f0:95:b7:42:fe:0f:cb:fb:12:99:d4:0b:05:
a5:e7:6b:ac:9e:21:7b:f6:19:cf:d5:bf:aa:fa:b9:
42:c9:54:de:b8:04:d4:0a:50:fd:04:8a:73:a2:4d:
4e:14:09:61:1c:cc:52:ab:20:f9:57:cf:43:9e:08:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:54:FA:93:AD:87:02:10:37:4D:FA:BE:1D:BD:DC:B2:47:B4:00:8F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/646147B2D33F11EF8E2EBA57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.7.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:72:65:b7:fd:5d:d6:13:ad:fc:c2:0f:08:e0:8b:0f:f0:46:
2d:6d:83:c8:c7:6d:a7:ff:a1:a9:53:3d:21:51:db:63:2b:34:
b2:ce:0f:97:6b:b7:21:de:9c:32:7c:c9:ce:82:8d:84:02:bf:
d2:5b:7c:f6:5d:ca:23:60:2c:b6:5e:67:28:cf:a3:53:f9:2f:
90:0e:f2:b7:8a:aa:89:11:7f:b5:ef:40:c2:4f:ed:94:67:72:
e4:7a:59:bb:f7:48:e4:53:bc:d9:08:c6:ca:f2:88:ea:e2:7b:
41:92:a7:ac:38:eb:6c:eb:61:43:32:5a:32:19:ee:c6:0e:38:
b1:25:f0:b8:32:e0:27:b9:1b:24:27:8a:db:86:c0:d0:9d:8a:
ba:07:2d:8e:56:b2:81:69:09:44:83:21:7e:47:49:4d:aa:75:
75:28:0e:74:f3:d8:b3:82:ba:e6:6e:fe:cf:27:38:f5:c5:aa:
a6:9b:90:ac:ba:40:5a:31:d2:ea:ba:d5:6a:4d:47:f7:94:13:
4f:e2:5e:7f:75:81:6c:85:b4:16:30:9c:ae:6e:64:02:b1:1d:
67:b3:80:fb:ca:36:42:65:a2:1b:64:fd:c6:d3:1e:10:73:43:
c1:fc:42:b1:11:5f:db:5a:1c:fc:44:45:1f:83:f1:6a:a4:31:
a8:4d:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:52 2025 by rpki-client