Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/72ED06E22F0E11F0A7F5CCCADAE4EC9C.roa
File: 72ED06E22F0E11F0A7F5CCCADAE4EC9C.roa (raw, json)
Hash identifier: 2e7HA6Kc+y4AcH67SMD2cwQ8ICz1pgukfsN5PfKMilg=
Subject key identifier: 11:7A:9C:57:1F:92:0C:17:1A:0D:28:17:4C:90:F1:63:0D:3C:9B:93
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0A0D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/72ED06E22F0E11F0A7F5CCCADAE4EC9C.roa
Signing time: Mon 12 May 2025 08:52:36 +0000
ROA not before: Mon 12 May 2025 08:52:31 +0000
ROA not after: Tue 12 May 2026 08:52:31 +0000
asID: 208485
IP address blocks: 102.135.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 11:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2573 (0xa0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 12 08:52:31 2025 GMT
Not After : May 12 08:52:31 2026 GMT
Subject: CN=6821b6d3-0bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:0e:06:35:26:ef:a8:bc:42:97:ab:82:a3:
8f:00:87:2b:54:f4:5b:66:8b:64:0f:70:ed:32:3a:
e0:ef:08:73:1f:1a:17:40:14:99:d9:17:31:7d:32:
03:2c:52:bb:35:e7:60:1d:b2:eb:c7:6f:d4:8f:e2:
b3:be:15:72:44:a2:5e:f4:f9:02:23:78:20:26:84:
31:3f:76:94:ca:93:30:09:22:1c:bb:24:9e:30:f5:
90:53:7d:26:cf:18:3a:ff:22:4f:d3:54:ca:eb:8d:
68:98:15:87:e3:20:b7:91:97:bd:31:0d:2d:7c:88:
ad:a1:00:06:3e:1e:4f:9e:9b:5a:ae:0a:84:76:82:
4c:01:8d:61:59:39:7a:69:6d:00:1c:94:07:c1:54:
fa:5a:df:b6:ed:bd:da:5b:d0:f6:f9:2d:68:39:59:
f2:92:46:e9:75:c2:4f:f3:78:8a:48:11:54:5c:5f:
fb:ef:e0:28:2a:4d:85:99:72:b1:0e:5d:c8:42:99:
8c:6d:6d:2d:01:c9:f5:a1:b8:84:00:89:38:c3:14:
59:ca:8f:a0:81:07:8b:04:aa:e4:36:60:85:a8:20:
26:e9:04:af:f7:ec:75:96:7a:df:14:37:03:64:8d:
83:8a:99:5b:d2:02:ca:ed:e1:00:36:f1:19:5b:d6:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:9C:57:1F:92:0C:17:1A:0D:28:17:4C:90:F1:63:0D:3C:9B:93
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/72ED06E22F0E11F0A7F5CCCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.114.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:02:aa:05:3c:89:08:35:67:e1:cc:6c:57:ac:c6:85:6d:c2:
37:19:85:c1:82:55:1e:b5:be:3e:76:d5:cf:99:69:be:72:95:
ac:71:25:b7:f5:7d:12:96:11:37:e9:1c:ae:65:7d:a9:11:82:
d6:3a:b5:ae:43:91:51:ed:25:f5:5c:1a:82:31:a6:84:b1:8f:
20:28:06:36:45:e0:0a:0d:d6:d4:0f:31:45:8d:4e:15:f1:d6:
66:c7:69:b8:af:ae:d8:40:c8:79:30:d7:32:d3:25:9a:e5:0d:
07:f2:a5:79:32:3d:d0:0c:56:6a:6a:8b:b3:f2:0c:16:1c:23:
2a:5f:f5:80:03:6f:8c:a2:11:fd:b9:48:3f:9f:61:d6:bf:ad:
10:bc:e1:5a:10:17:b1:bb:34:f7:79:d4:ff:f6:cd:ce:7d:7f:
6a:17:20:ab:6f:aa:ea:54:9c:86:9b:2b:07:fe:b6:df:ad:cc:
f4:59:d9:c4:0b:5b:7a:f2:da:ad:c5:23:1c:0e:a3:cc:46:94:
0f:b8:6a:65:7f:5c:b4:e3:64:ec:d2:89:90:13:35:6f:c8:68:
68:99:33:79:80:b8:25:7b:97:39:44:98:11:a0:2a:8b:3b:5d:
5e:08:02:ce:0b:33:b9:c4:16:19:08:07:d7:fc:8e:e0:4d:c6:
9d:05:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:00:16 2025 by rpki-client