Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90056480F34B11EF97C7FFBA762E951A.roa
File: 90056480F34B11EF97C7FFBA762E951A.roa (raw, json)
Hash identifier: yADpImNeSLWnanEXUqLwxM8KRfbc81HkvmUtiRyLUmk=
Subject key identifier: 3D:6C:D1:4F:9F:A1:20:73:90:98:3C:A4:C7:73:D8:1E:D5:F2:26:F7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06A1
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90056480F34B11EF97C7FFBA762E951A.roa
Signing time: Tue 25 Feb 2025 07:38:54 +0000
ROA not before: Tue 25 Feb 2025 07:38:50 +0000
ROA not after: Thu 26 Feb 2026 07:38:50 +0000
asID: 43260
IP address blocks: 102.135.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 07:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1697 (0x6a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 25 07:38:50 2025 GMT
Not After : Feb 26 07:38:50 2026 GMT
Subject: CN=67bd738d-230c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:3c:03:f3:6c:92:79:3c:1a:46:a6:f8:7f:
55:7f:82:6c:3e:09:a8:39:b9:c8:15:97:72:de:d7:
fe:d8:fe:1d:e2:fa:5b:03:cd:a9:70:74:49:60:a6:
40:3c:19:2a:4d:3c:f0:05:af:74:a9:d0:83:fd:f8:
cb:6f:04:19:42:4d:b9:d6:e3:66:70:6d:3c:04:d6:
a4:0c:36:32:0b:aa:51:bb:ee:26:96:56:14:09:f9:
81:35:29:9c:5e:ee:99:9c:09:aa:6e:25:a5:29:95:
1c:c6:19:54:f4:ab:ce:45:c4:cf:bf:1c:36:1a:50:
89:25:eb:9b:6f:64:0c:a3:9b:ef:ab:38:55:40:42:
62:eb:45:cc:0e:14:51:bd:41:99:81:6e:b7:2d:f6:
7f:c3:5b:99:6a:79:4d:96:b3:9f:2d:93:6b:a1:85:
c0:3a:e0:d2:a7:5f:0f:c0:84:b0:a2:be:9e:4a:ae:
c6:d5:90:b3:53:ff:1f:6a:e9:1a:1c:70:ec:1c:32:
24:65:ca:d6:79:09:28:d0:aa:e7:52:d9:2c:26:7a:
52:b5:1c:5b:8d:46:c0:35:b1:d7:ac:40:25:f4:ae:
ef:bf:6b:cc:eb:32:ca:dc:69:4d:f7:66:cb:49:52:
72:d0:8e:1b:14:d1:8a:71:88:04:39:7f:b8:f8:64:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6C:D1:4F:9F:A1:20:73:90:98:3C:A4:C7:73:D8:1E:D5:F2:26:F7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90056480F34B11EF97C7FFBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f8:77:e5:ea:40:9a:ff:e5:b0:df:16:7b:f5:1d:bd:98:16:
83:b6:b6:7d:0d:7d:f4:ff:29:59:e2:a2:0f:ac:c5:e7:0a:22:
c9:49:8f:c9:f8:de:73:4f:09:ff:be:9e:c1:24:fe:63:1a:17:
f6:60:9c:1b:71:87:95:16:f1:27:98:5d:1a:be:35:19:03:27:
78:fb:9e:eb:b5:ac:72:49:e8:9d:1c:5e:19:63:da:d9:1a:85:
ff:70:bb:fd:fc:9b:00:6c:a5:bf:52:83:1e:9f:74:bb:70:47:
88:83:87:d8:c2:2b:1b:da:82:b8:da:ea:ed:08:1d:9a:4a:f3:
75:85:ab:f9:a1:90:c3:34:a5:15:40:c5:d3:02:52:7a:fc:a4:
7d:08:62:19:ce:25:53:89:e5:ff:89:f6:e6:07:c0:f4:d1:4c:
46:5e:f5:ee:ff:09:c2:7c:d4:87:10:cc:b5:9e:98:d0:79:c1:
f8:6f:50:22:51:63:6f:f9:fc:c9:e3:ab:20:32:86:70:68:a1:
dc:b3:f9:bd:c7:20:f1:8d:f4:6a:81:6b:9c:5e:85:30:79:3f:
33:e0:e1:93:5d:78:5e:74:ec:00:5e:76:33:9a:49:02:ed:b1:
58:b7:c9:11:97:c9:c6:8a:57:f7:c0:e4:0c:93:81:1d:b0:3f:
fe:fd:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:53 2025 by rpki-client