Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7C4660E83D6011F0B3125EEBDAE4EC9C.roa
File: 7C4660E83D6011F0B3125EEBDAE4EC9C.roa (raw, json)
Hash identifier: sm+RBYZW9X5+xUzpff64PjFEYaVyakknTMCoQzRqyhw=
Subject key identifier: CA:61:E9:94:FE:78:F8:FA:F3:2C:0A:2F:8F:0A:95:F7:50:D4:47:68
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0AE0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7C4660E83D6011F0B3125EEBDAE4EC9C.roa
Signing time: Fri 30 May 2025 14:15:06 +0000
ROA not before: Fri 30 May 2025 14:15:02 +0000
ROA not after: Fri 29 May 2026 14:15:02 +0000
asID: 208485
IP address blocks: 102.135.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2784 (0xae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 30 14:15:02 2025 GMT
Not After : May 29 14:15:02 2026 GMT
Subject: CN=6839bd6a-c8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:3f:c7:4b:17:5e:a6:95:c2:8b:bf:23:9e:
27:88:ce:60:45:77:2a:8c:af:72:46:fd:39:cf:93:
49:37:51:55:0b:ab:60:3e:25:8c:eb:00:cb:28:bd:
62:05:57:7e:74:0a:70:19:d2:f5:9a:87:00:4f:a7:
50:90:67:9e:9b:d5:ad:17:27:1a:15:21:49:8c:16:
51:3c:c2:af:91:8d:77:44:dd:51:7c:6f:fe:3f:97:
44:e1:eb:ff:b2:2c:18:b4:6f:97:d4:dd:f3:01:ab:
92:9b:f3:fc:12:41:a7:39:6a:60:30:85:27:44:f7:
82:57:d7:01:cb:c0:94:3f:d6:87:c9:a1:36:07:32:
c3:6e:51:81:f1:b2:08:bb:27:ce:85:6d:00:0c:f5:
dc:ec:a9:4b:0a:3b:72:cf:ad:b1:85:be:36:f6:96:
00:fb:1f:94:3e:60:ef:59:85:48:23:c2:30:94:10:
15:76:25:ff:1a:f2:a1:03:34:ba:63:ae:c1:fa:19:
c4:53:6c:27:a2:ef:5c:ba:2b:18:fd:55:17:58:ff:
e8:5f:e5:12:8a:5d:e4:5f:7b:fc:d0:9b:9b:b6:58:
15:c8:a0:ac:7a:1d:92:2b:9a:f5:72:fa:b4:20:11:
34:8b:9e:17:0f:a3:2d:c5:0c:32:e3:40:4b:18:6b:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:E9:94:FE:78:F8:FA:F3:2C:0A:2F:8F:0A:95:F7:50:D4:47:68
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7C4660E83D6011F0B3125EEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:cd:49:c1:d5:af:a5:98:44:2f:77:a9:da:d4:eb:b3:1e:f4:
55:a2:fd:b7:4b:64:69:09:fe:a8:6d:e7:35:57:74:68:f9:92:
2f:38:3b:a8:02:d0:ae:d5:b3:d1:c3:71:cf:94:45:de:4e:a5:
f5:c6:96:a6:cf:ae:e3:01:63:3a:6e:d0:3c:8e:20:b5:af:f2:
a3:50:87:d4:49:d5:8e:4d:34:0f:11:45:ec:d2:d0:75:c8:b3:
a1:a3:ff:b2:fa:c8:35:3f:05:3b:16:f0:07:a7:6b:4e:9f:90:
fe:27:b4:c5:82:52:a5:7a:bc:ca:4e:ef:fd:27:fd:5a:45:be:
9e:7b:7f:8e:ee:f8:93:84:1d:90:eb:41:64:92:12:ea:9f:95:
9a:1c:ff:92:fc:95:3b:0a:75:7b:ff:02:82:ce:64:3f:0f:63:
32:99:bd:52:2a:11:15:77:3a:b4:f5:d7:23:cb:8b:89:39:c6:
3f:ff:02:6f:63:a0:b5:ca:18:d8:f7:25:07:b1:14:a5:3d:37:
10:d5:49:10:7e:17:53:3f:ab:36:09:f6:16:8b:45:01:a3:67:
49:90:f2:e9:63:7c:f0:1c:dc:b6:46:1d:7c:68:f1:87:cd:34:
98:f0:1a:94:6f:f9:6c:9b:14:f4:fd:84:6d:06:42:f3:0a:de:
51:63:fc:fd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCuAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA1MzAxNDE1MDJaFw0yNjA1MjkxNDE1MDJaMBgxFjAU
BgNVBAMTDTY4MzliZDZhLWM4ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJaD/HSxdeppXCi78jnieIzmBFdyqMr3JG/TnPk0k3UVULq2A+JYzrAMso
vWIFV350CnAZ0vWahwBPp1CQZ56b1a0XJxoVIUmMFlE8wq+RjXdE3VF8b/4/l0Th
6/+yLBi0b5fU3fMBq5Kb8/wSQac5amAwhSdE94JX1wHLwJQ/1ofJoTYHMsNuUYHx
sgi7J86FbQAM9dzsqUsKO3LPrbGFvjb2lgD7H5Q+YO9ZhUgjwjCUEBV2Jf8a8qED
NLpjrsH6GcRTbCei71y6Kxj9VRdY/+hf5RKKXeRfe/zQm5u2WBXIoKx6HZIrmvVy
+rQgETSLnhcPoy3FDDLjQEsYawwtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUymHp
lP54+PrzLAovjwqV91DUR2gwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzdDNDY2MEU4M0Q2MDExRjBCMzEyNUVFQkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhyAwDQYJKoZIhvcNAQEL
BQADggEBABvNScHVr6WYRC93qdrU67Me9FWi/bdLZGkJ/qht5zVXdGj5ki84O6gC
0K7Vs9HDcc+URd5OpfXGlqbPruMBYzpu0DyOILWv8qNQh9RJ1Y5NNA8RRezS0HXI
s6Gj/7L6yDU/BTsW8Aena06fkP4ntMWCUqV6vMpO7/0n/VpFvp57f47u+JOEHZDr
QWSSEuqflZoc/5L8lTsKdXv/AoLOZD8PYzKZvVIqERV3OrT11yPLi4k5xj//Am9j
oLXKGNj3JQexFKU9NxDVSRB+F1M/qzYJ9haLRQGjZ0mQ8uljfPAc3LZGHXxo8YfN
NJjwGpRv+WybFPT9hG0GQvMK3lFj/P0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:49:51 2025 by rpki-client