Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/76DCF074041F11F0B7040459762E951A.roa
File: 76DCF074041F11F0B7040459762E951A.roa (raw, json)
Hash identifier: umMUdStzoKAlRjtaenAIOSeVPm7kvU+GWY9Jdg1RiH8=
Subject key identifier: 59:B3:DD:99:F1:AB:B3:ED:4C:BE:73:49:F2:F4:CB:84:48:E7:E5:D0
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0737
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/76DCF074041F11F0B7040459762E951A.roa
Signing time: Tue 18 Mar 2025 17:36:03 +0000
ROA not before: Tue 18 Mar 2025 17:36:00 +0000
ROA not after: Tue 17 Mar 2026 17:36:00 +0000
asID: 329007
IP address blocks: 102.135.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 11:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847 (0x737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:36:00 2025 GMT
Not After : Mar 17 17:36:00 2026 GMT
Subject: CN=67d9af03-183f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:87:f4:b1:3f:cf:4e:49:ce:4d:ed:f0:43:
b5:2a:f0:39:97:f6:73:44:d4:8b:af:f1:0d:f4:61:
05:ca:8d:d9:27:6e:0f:31:d1:f6:7b:a7:cd:63:6d:
db:03:15:28:a7:4b:49:c9:ca:ae:d2:1e:91:b3:98:
f4:ea:3f:c6:c3:68:fa:b0:d3:9b:2a:01:37:de:a8:
90:59:95:93:da:95:4c:a6:a7:7f:64:6b:15:f4:5b:
be:7b:1c:e8:96:b1:35:4e:c3:2c:82:7f:03:42:5e:
3a:20:fe:43:d4:ef:0a:b3:c7:1d:7f:60:84:48:2c:
e2:7b:34:47:e8:4e:a8:8a:16:94:f1:2e:93:07:cb:
1d:ac:42:67:92:0c:24:78:0e:55:49:ec:0c:41:a3:
5e:8d:51:46:6c:25:92:84:87:c4:bb:f9:d9:3f:16:
f7:47:d9:76:c0:c6:60:68:71:e9:be:c6:25:57:07:
ff:85:1c:87:03:87:00:c0:7f:c2:b8:d6:a0:4b:9c:
2d:b3:ee:1c:c2:53:47:df:f5:23:db:0d:39:5e:6e:
2a:6f:b6:81:e2:5f:f4:d9:38:2c:1b:a8:dd:49:ca:
17:e3:f3:2e:e9:8d:22:5d:f6:05:46:64:75:ad:23:
08:db:db:06:4a:6b:9f:66:e8:ec:42:61:db:37:fc:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B3:DD:99:F1:AB:B3:ED:4C:BE:73:49:F2:F4:CB:84:48:E7:E5:D0
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/76DCF074041F11F0B7040459762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.71.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b5:bb:e3:2c:a7:e4:54:9c:76:aa:63:37:cf:75:ec:6c:cd:
27:09:1e:05:a3:62:a8:bb:e7:16:33:99:88:ce:6f:cc:f6:d6:
23:b4:96:c4:33:f0:24:07:ee:cd:0b:4f:ee:9c:3e:ae:e4:ea:
ae:05:8d:3d:46:f2:14:8c:1a:26:46:be:c4:33:42:b2:b3:ac:
d4:f3:f1:83:18:d7:52:eb:dd:3e:f6:3d:cf:8b:8e:db:90:7c:
11:99:c4:6d:a7:14:10:51:85:47:99:a0:08:23:23:1b:64:e5:
07:2d:d1:d5:6d:00:42:87:25:3f:17:50:cb:57:84:fc:50:8e:
55:90:1d:d8:25:4d:56:f8:0c:a1:f7:07:c7:ba:f7:8b:e2:f7:
44:16:46:48:c8:bf:af:dd:5f:ca:00:ff:25:30:ef:b8:43:3a:
b1:95:a5:0b:2a:62:f0:8d:ca:12:80:ab:da:da:be:4b:54:aa:
ff:18:36:c8:ff:24:47:67:0d:c2:ef:9e:41:47:f2:00:82:55:
a5:f5:0b:a2:a0:fe:b2:02:8c:dc:ef:f5:7e:d1:89:21:25:dd:
12:2b:aa:1f:23:6f:0a:cb:f0:51:00:1c:6f:76:ba:fb:67:79:
6b:6e:51:07:58:f0:bd:47:27:9b:8b:c7:35:c3:b8:22:ae:dc:
38:b9:e8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:09 2025 by rpki-client