Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7B7EE7AAE78B11EFAAD9BE94762E951A.roa
File: 7B7EE7AAE78B11EFAAD9BE94762E951A.roa (raw, json)
Hash identifier: Wvk5FijvsEFS3rXORdhR90JGtP4UaJWySbJZcQX1ano=
Subject key identifier: 76:D9:7E:65:29:B8:54:83:0B:CD:FE:FC:30:8A:BA:2C:B6:68:D6:1F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05D2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7B7EE7AAE78B11EFAAD9BE94762E951A.roa
Signing time: Mon 10 Feb 2025 08:46:13 +0000
ROA not before: Mon 10 Feb 2025 08:46:09 +0000
ROA not after: Tue 10 Feb 2026 08:46:09 +0000
asID: 329007
IP address blocks: 102.135.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 06:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 10 08:46:09 2025 GMT
Not After : Feb 10 08:46:09 2026 GMT
Subject: CN=67a9bcd5-08eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:5a:a7:87:e1:3f:0d:ce:03:f8:e2:a8:cb:
35:b3:47:c5:30:26:93:06:b5:e1:54:ea:7c:83:28:
7f:9d:0f:e1:ac:7a:70:27:7e:a0:af:dc:4a:ef:55:
a3:e1:63:ae:5d:67:f9:14:b5:68:80:5f:b6:95:88:
95:95:2d:9a:fe:d1:64:4b:85:6e:97:c4:7a:b2:2f:
9b:44:f0:d0:f3:f8:8b:09:7b:ea:ce:c3:6f:06:b7:
f5:d9:49:17:25:ff:c8:2c:d6:9f:6a:46:6e:8e:17:
9b:e4:2d:26:36:6b:71:1b:c6:40:00:c8:fa:34:b2:
36:65:50:8a:79:a2:25:ec:95:7b:18:3d:37:ea:6f:
5f:c0:53:b8:49:bf:07:72:d2:ef:61:cc:43:63:ab:
9b:2e:77:57:66:06:57:fd:4c:9d:14:3b:2d:99:8d:
52:45:46:a3:a5:73:44:63:f2:3d:5f:7a:7d:15:47:
5f:86:ba:50:23:80:50:fe:77:5f:e3:c5:91:cd:00:
c7:5e:49:b8:32:b9:f7:40:24:a0:d8:97:45:1b:08:
0f:31:d0:b9:3f:33:b0:d5:47:4a:87:85:50:c3:fb:
f0:ab:be:63:27:90:39:18:ad:8e:50:13:cc:85:65:
e4:a4:6d:79:7f:25:07:b5:9f:36:75:6b:f1:c1:86:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D9:7E:65:29:B8:54:83:0B:CD:FE:FC:30:8A:BA:2C:B6:68:D6:1F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7B7EE7AAE78B11EFAAD9BE94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.67.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1e:b9:18:60:57:67:ab:d1:fc:b0:0b:1b:a4:d5:1c:08:10:
eb:48:7d:e4:be:5a:a6:fd:12:7d:07:a3:4f:81:a6:60:99:8c:
40:1a:5b:98:88:68:5a:26:29:1d:c6:78:80:d2:f2:21:26:8e:
4c:ac:77:be:89:ee:34:e4:24:dd:b6:3b:12:d4:4e:5a:bb:76:
30:6c:ac:5e:92:8d:4a:ba:85:53:38:a6:fa:69:c6:fc:db:95:
91:c1:8a:94:1c:09:12:95:44:75:1e:f6:b5:45:ba:ca:82:4d:
f8:c8:e7:1f:ae:83:8b:0c:37:9c:ca:7e:4b:2b:89:21:73:4e:
04:c4:eb:9f:f7:ef:82:1e:a9:ec:23:6c:8e:bb:51:d1:d4:63:
9d:8c:8f:5d:b2:67:1e:cf:6e:77:a4:d6:4a:e9:3e:ff:cc:55:
82:c7:e0:59:a3:49:f6:8c:0e:47:cd:38:8b:cf:88:69:db:16:
47:e7:b7:6a:1f:22:8e:be:ea:05:cf:d0:2f:8c:ef:e5:c2:81:
15:5c:56:dc:23:56:0d:c7:fa:a4:51:0a:95:0d:d3:b2:65:cb:
c3:1b:62:8e:d6:8d:c7:b1:37:f7:64:1d:54:7f:3b:98:5b:53:
dd:ff:d7:dc:92:de:09:45:44:e3:11:05:0b:2c:3c:c5:0e:db:
74:3b:9a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:30 2025 by rpki-client