Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6C95E0D6096E11F0A0BB9F58762E951A.roa
File: 6C95E0D6096E11F0A0BB9F58762E951A.roa (raw, json)
Hash identifier: lb38fYpqiNLdxnjjMoPpQctITDgKh7wryUi704oq10c=
Subject key identifier: B5:BF:C5:EE:15:37:DD:BD:C4:DD:32:C1:9A:5D:E9:E1:A8:60:CF:1D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0840
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6C95E0D6096E11F0A0BB9F58762E951A.roa
Signing time: Tue 25 Mar 2025 11:43:52 +0000
ROA not before: Tue 25 Mar 2025 11:43:48 +0000
ROA not after: Wed 25 Mar 2026 11:43:48 +0000
asID: 2914
IP address blocks: 102.135.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 07:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:43:48 2025 GMT
Not After : Mar 25 11:43:48 2026 GMT
Subject: CN=67e296f8-754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:31:03:e3:48:3c:2a:5b:09:a7:53:0b:78:
a5:97:67:c1:6f:41:b5:bd:e3:9c:c6:bb:2c:02:ee:
6b:f8:84:97:95:f4:91:ba:10:7a:b7:f7:6c:b5:9d:
47:77:25:27:1e:cf:59:a6:b2:ac:e8:fc:62:fb:bc:
55:89:bf:f9:6f:bc:09:42:8f:39:44:f8:38:ad:02:
08:23:eb:5d:ae:c4:e7:67:5f:ae:9f:60:aa:88:be:
b4:9b:c3:51:a8:5a:15:23:20:be:0f:01:59:6a:95:
6d:36:a7:25:29:86:b6:f6:c8:91:98:8a:bf:b7:4f:
1e:f6:f2:d6:76:d4:b0:a5:95:45:f5:cc:e7:cb:67:
4d:a4:18:80:b6:94:80:5f:3d:92:8e:02:90:87:d1:
95:70:43:24:c4:bf:2d:85:2f:a2:2f:78:5a:2a:d0:
05:83:25:61:38:b7:fa:9b:91:e4:35:83:02:27:99:
d3:19:52:35:95:4a:d4:0b:58:22:b3:89:a9:fe:60:
5c:f4:ac:2b:76:e7:a0:3f:b8:d3:27:d5:3d:27:a3:
92:db:65:9d:12:b6:ce:78:b0:f6:03:cd:65:14:b4:
57:41:51:b4:0d:88:36:85:3e:c3:99:14:e4:fa:e6:
0e:45:56:52:40:2f:a8:c1:9f:5c:8a:2f:54:ad:be:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:C5:EE:15:37:DD:BD:C4:DD:32:C1:9A:5D:E9:E1:A8:60:CF:1D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6C95E0D6096E11F0A0BB9F58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.91.0/24
Signature Algorithm: sha256WithRSAEncryption
07:26:6f:8e:a1:68:56:ea:a2:26:b4:7b:e4:07:61:a8:f9:5e:
47:e0:2f:46:78:dc:4f:a9:3b:91:1c:ac:ec:02:55:f0:22:bb:
10:b9:a4:e5:95:f0:c2:94:6f:9a:4a:22:76:3a:6d:69:7e:b3:
cf:ed:c9:37:b2:c8:83:d0:e7:98:da:0f:df:a2:ab:fc:ae:7b:
9c:8b:e0:cc:0b:37:c2:de:dd:c8:0d:89:dc:90:9b:f8:c3:33:
9c:10:18:df:dd:2b:53:10:1f:52:bb:14:f5:48:d3:b3:a3:34:
af:a3:e9:f0:85:0a:0c:2d:db:bc:b6:68:d1:9f:52:04:1b:dc:
32:67:f3:26:e8:ac:f8:59:2e:f7:5a:5e:82:db:6d:64:8c:72:
c8:9f:5b:9f:99:34:25:33:5c:93:9e:c3:05:f0:4c:40:76:d8:
81:61:f0:d1:c8:db:4d:51:45:c2:12:cc:fc:c9:d9:55:a5:09:
03:94:d2:b4:42:3a:6f:29:af:29:3a:07:87:a3:17:88:0b:2f:
46:58:1c:cd:4d:3f:88:a6:9c:f5:b8:6b:14:86:9c:da:7a:e1:
d1:6b:26:93:b5:ec:e3:78:55:c2:f5:7d:48:e5:23:fe:3c:64:
43:fc:46:3d:00:6f:91:17:bf:53:9c:b9:34:8a:fa:8f:36:1a:
0c:76:f0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:24:06 2025 by rpki-client