Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/978E6FDC041F11F082350F59762E951A.roa
File: 978E6FDC041F11F082350F59762E951A.roa (raw, json)
Hash identifier: /U8pE7E4at52dTsvf5nwidsiyIrUSNfCVp67wIhOXgE=
Subject key identifier: 48:96:52:F0:8B:7A:6E:4E:D0:4E:9B:A2:F5:5D:06:DD:E7:B5:33:BE
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 073B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/978E6FDC041F11F082350F59762E951A.roa
Signing time: Tue 18 Mar 2025 17:36:58 +0000
ROA not before: Tue 18 Mar 2025 17:36:54 +0000
ROA not after: Tue 17 Mar 2026 17:36:54 +0000
asID: 329007
IP address blocks: 102.135.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 11:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851 (0x73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:36:54 2025 GMT
Not After : Mar 17 17:36:54 2026 GMT
Subject: CN=67d9af3a-7951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:90:1f:4c:59:9e:b7:95:04:c9:7f:33:8f:
c1:b0:f5:ca:48:a6:fd:a7:60:fa:48:f9:ac:38:48:
a9:2b:4b:52:7f:69:6e:6e:37:75:e0:83:56:d0:cf:
19:63:e3:b3:6c:d3:35:96:d9:db:e3:20:56:34:2d:
fa:d1:67:83:43:53:91:90:ae:21:39:59:e7:9f:1d:
2c:d1:63:1a:ee:82:de:59:37:d4:8a:e7:f5:78:9f:
9d:57:ce:a1:d1:18:50:f3:e5:38:a5:73:28:28:0f:
a3:f2:03:32:2a:83:54:96:6d:4f:2e:72:d6:a3:dd:
84:2e:5f:b3:f6:03:d7:ab:e9:8d:9b:a9:db:c5:35:
7a:ca:01:46:87:56:5e:18:d6:4b:85:09:4c:42:9e:
40:5d:03:98:ff:f3:c8:35:47:cb:68:da:64:db:0f:
18:30:8d:47:4b:60:d8:0c:f4:72:c3:98:5a:16:3d:
f1:49:0a:20:f4:3e:80:49:60:9d:b0:22:ad:8c:7a:
34:98:ba:0a:27:c2:61:3d:bd:7d:2b:c1:1d:12:9b:
f4:ca:16:e0:a2:24:3b:df:c2:7e:cd:ea:fe:fc:d2:
34:11:1c:33:53:25:46:1b:07:9f:5f:11:ec:17:40:
ed:80:a2:51:55:75:37:38:8f:81:6c:a8:6b:28:81:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:96:52:F0:8B:7A:6E:4E:D0:4E:9B:A2:F5:5D:06:DD:E7:B5:33:BE
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/978E6FDC041F11F082350F59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.73.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c3:0f:2b:bf:a7:e4:9c:88:16:f3:b8:db:de:73:ec:9d:0d:
52:f5:88:de:4f:cc:07:13:9f:37:0c:80:56:2f:ab:8a:25:03:
1e:b4:ef:7f:b9:57:ee:2d:0f:b3:1e:40:6b:58:77:be:2f:cc:
4b:96:89:b4:4c:bb:31:db:fe:7d:30:78:d6:2f:60:1c:01:08:
d7:36:c7:e6:36:40:d4:cd:f4:54:19:c5:79:2b:d7:ea:56:93:
38:ac:b0:7a:fd:21:b4:8c:a4:c7:af:a3:5a:9e:30:72:83:ee:
bc:4e:94:48:01:20:10:ad:06:f1:09:36:40:5e:ab:4a:9a:b2:
4a:2d:55:cd:30:d7:8b:ac:d9:45:99:04:ad:da:51:7d:ab:43:
32:9b:b5:6a:8a:50:d4:e7:b3:26:e4:77:e5:11:ac:86:13:c7:
f7:8a:8a:ec:49:fa:6e:3b:ca:78:36:cf:b9:60:d9:03:b7:c7:
2c:b9:63:8c:50:0b:73:31:4e:7e:e0:67:46:1c:ac:67:3e:90:
4b:93:85:84:a9:7d:7b:04:9b:53:8e:9d:a6:3e:6b:01:45:ad:
30:7f:4d:81:93:f7:11:94:f3:e4:2d:03:75:27:27:f1:fc:c0:
ed:23:6c:52:43:8c:05:d7:82:bf:2f:98:8a:6a:f8:97:70:20:
0f:40:4e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:23 2025 by rpki-client