Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7A245B94041C11F0923DF545762E951A.roa
File: 7A245B94041C11F0923DF545762E951A.roa (raw, json)
Hash identifier: zgCLa4qlPmCfwQL41WK9uA8EYmj3Yi3UkejcKCYDKvA=
Subject key identifier: 47:73:43:9F:EE:70:7C:6D:D2:7A:70:04:87:FD:38:9B:0F:B0:52:C2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0729
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7A245B94041C11F0923DF545762E951A.roa
Signing time: Tue 18 Mar 2025 17:14:40 +0000
ROA not before: Tue 18 Mar 2025 17:14:37 +0000
ROA not after: Tue 17 Mar 2026 17:14:37 +0000
asID: 329007
IP address blocks: 102.135.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 08:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:14:37 2025 GMT
Not After : Mar 17 17:14:37 2026 GMT
Subject: CN=67d9aa00-12d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:0f:99:1a:72:9d:16:4d:c7:a8:7f:34:38:
ff:5d:15:02:76:aa:3a:93:3a:30:54:46:ff:e1:af:
96:21:ce:52:d5:4f:ed:2e:b5:02:e1:3d:e1:9b:3a:
e1:ef:74:5b:06:61:7a:e9:03:b8:20:9e:90:16:4a:
60:fc:a3:17:2e:6e:c2:76:82:14:66:f1:88:3e:17:
10:ae:41:2e:0b:4f:dc:e9:84:3b:64:d1:86:95:b6:
4f:59:10:6f:02:da:fb:bf:7b:8b:06:4d:44:31:63:
e9:4a:34:9d:93:50:c8:34:61:c9:b3:24:e7:1f:83:
44:57:06:36:da:21:56:a0:4a:b1:51:f8:67:e8:d8:
64:dd:26:1a:de:63:30:b2:b1:0a:4c:75:4b:1d:19:
e4:c4:13:b5:23:29:96:b6:93:8f:a4:75:c4:59:63:
76:06:40:f5:3a:07:51:09:b1:45:8a:56:1e:4c:2f:
5e:00:0b:12:bf:4f:be:23:3a:b3:38:b3:5a:04:7b:
c0:71:e8:16:8b:3b:d4:7a:99:30:be:0a:f9:dd:41:
33:87:5a:74:fd:c2:c2:67:e7:fd:9f:9c:37:49:ee:
c7:70:a1:09:7f:d1:1c:f1:e9:6d:58:c3:c0:2b:8d:
71:0e:0c:28:3c:ec:d1:e4:b9:8e:c5:21:24:41:b6:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:73:43:9F:EE:70:7C:6D:D2:7A:70:04:87:FD:38:9B:0F:B0:52:C2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7A245B94041C11F0923DF545762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.64.0/24
Signature Algorithm: sha256WithRSAEncryption
90:bc:8a:42:38:a2:36:40:93:eb:7d:ca:86:31:4d:f8:6f:17:
4a:57:c2:a7:84:00:07:35:08:a8:6a:a2:9f:35:1a:ab:0d:5c:
e7:5f:17:86:6c:ff:39:0e:94:3d:80:bd:83:d1:81:5e:5f:ec:
8d:2e:86:10:b7:01:71:9f:90:87:c6:03:5f:d2:1c:e9:4b:9f:
c9:7a:ab:aa:82:45:fe:f8:79:83:d1:48:79:77:ea:05:8b:c8:
9e:fa:09:a7:ad:9a:26:8b:79:10:79:70:cb:d8:05:6f:db:d1:
13:5a:ce:c6:84:15:ba:07:41:ea:3d:3d:61:d3:d7:57:95:96:
49:96:b0:da:83:6f:9d:29:e8:4b:76:a4:3c:9b:83:28:1b:b7:
a5:9d:90:18:59:8b:35:77:a1:94:07:5d:f4:03:80:4f:0e:ee:
42:8f:09:72:fb:d3:c5:b1:b6:4f:ad:bc:25:da:bd:48:10:e5:
6c:72:ee:d2:30:c0:93:68:0c:b2:db:2a:92:11:52:32:50:4c:
4e:1e:a2:2f:f0:a3:ca:3d:1c:2d:b3:07:29:04:aa:68:ff:59:
82:c7:4c:b8:be:ff:ee:7e:0b:bf:ee:67:af:76:a2:97:d4:72:
b2:d4:db:df:c1:90:10:a1:70:2b:e6:6f:3b:59:3d:db:3d:28:
16:63:70:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:38:28 2025 by rpki-client