Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90AA2820096D11F0A6AE0854762E951A.roa
File: 90AA2820096D11F0A6AE0854762E951A.roa (raw, json)
Hash identifier: BrOS+GI5UUYIHmaJ6OSRlhZtFFsDDPfZYnFZsQ3sgSg=
Subject key identifier: 2B:73:45:3B:EF:CE:CD:FA:61:10:F6:2E:10:39:C8:28:E2:5C:8A:E8
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0834
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90AA2820096D11F0A6AE0854762E951A.roa
Signing time: Tue 25 Mar 2025 11:37:43 +0000
ROA not before: Tue 25 Mar 2025 11:37:39 +0000
ROA not after: Wed 25 Mar 2026 11:37:39 +0000
asID: 2914
IP address blocks: 102.135.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 07:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100 (0x834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:37:39 2025 GMT
Not After : Mar 25 11:37:39 2026 GMT
Subject: CN=67e29587-37f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:94:4e:fd:8b:0d:60:ed:67:18:7f:f9:b6:
c0:42:e1:66:4d:9c:71:03:f2:a9:e4:f6:3b:12:53:
6d:4b:21:41:3a:4c:aa:4d:e6:41:9a:94:38:25:74:
f0:a1:65:f8:5d:77:b8:23:8a:58:4b:f6:8d:71:7b:
af:ec:02:da:85:02:49:92:22:86:45:8b:68:38:9b:
26:c1:41:9b:90:23:59:2e:bc:1c:ed:31:c6:7c:d4:
a4:1e:16:64:b6:15:fa:17:5a:57:a2:ce:f9:a1:72:
5e:8c:30:3a:57:2f:5e:c8:eb:39:9a:7b:29:71:e5:
13:fd:e0:38:2c:c0:a2:8a:19:22:94:ec:24:65:5c:
cb:e4:ff:4d:da:ec:e7:24:c9:d6:9a:5b:b2:d1:c0:
9a:d8:03:4c:46:75:f8:17:37:d5:27:e6:7a:7a:67:
1e:8d:a5:6c:59:2b:f3:92:8d:83:ee:b0:69:fc:9b:
79:0d:55:c4:c0:8b:30:1b:22:f1:64:24:fc:06:a6:
a0:31:28:10:c4:b9:8f:0f:f9:7c:f5:af:8f:61:3b:
76:43:a8:74:16:a8:2f:9d:e1:5d:dc:5f:ee:47:da:
19:0e:b2:98:45:82:75:ac:97:1a:3a:75:94:3e:95:
3f:cd:99:60:de:02:ac:25:36:ad:57:7e:cf:61:32:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:73:45:3B:EF:CE:CD:FA:61:10:F6:2E:10:39:C8:28:E2:5C:8A:E8
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90AA2820096D11F0A6AE0854762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f3:43:6c:ee:46:c1:ed:de:cd:cf:24:79:bb:8a:5a:05:12:
3b:ea:73:69:98:50:41:8b:df:44:64:fa:23:2a:e1:6b:02:a0:
d7:ae:99:b6:3c:e1:7f:6c:6d:60:26:0a:a0:1b:9c:40:66:cb:
3c:2f:d4:fd:46:76:35:74:c3:a2:98:82:00:b1:e9:63:79:05:
61:44:ef:a4:f2:04:8f:c6:12:00:a1:e9:b6:63:38:e6:d0:a3:
90:c2:30:ad:78:d9:68:1b:87:6d:3e:d9:22:92:21:2f:29:d0:
70:01:ce:ec:e4:25:f0:e5:52:a7:f3:e6:0f:b0:af:4c:74:6f:
64:4e:85:84:73:fe:0d:34:86:64:25:f7:72:11:02:db:95:c3:
f6:17:08:55:f9:1f:ff:d9:b6:56:68:77:e8:ee:ad:4e:f1:fa:
87:6d:9c:ec:ee:dd:5c:f4:2c:37:8a:63:5e:87:f9:4c:96:7c:
a2:2f:ab:3b:5f:46:44:9f:fb:09:d5:3a:24:1d:20:31:e0:cf:
7d:2d:85:bb:d0:58:99:6a:07:dc:b1:a5:88:55:82:9d:c9:29:
80:2f:30:2e:b0:6b:ae:d6:4e:17:1c:ed:e4:81:c1:65:70:ef:
94:3e:ec:8b:c6:33:97:4e:03:ae:a5:2a:f5:c1:75:65:61:46:
f0:c4:73:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:25 2025 by rpki-client