Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9F0DB5EE3A3211F0A823E9BEDAE4EC9C.roa
File: 9F0DB5EE3A3211F0A823E9BEDAE4EC9C.roa (raw, json)
Hash identifier: z2FqafhO9HeEYW4axvTsQUtKCrWGwNNscw8FSh4EZjE=
Subject key identifier: 73:FF:87:90:87:B7:15:02:27:84:CD:AB:46:02:0D:E7:1B:03:B5:01
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0ABF
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9F0DB5EE3A3211F0A823E9BEDAE4EC9C.roa
Signing time: Mon 26 May 2025 13:09:14 +0000
ROA not before: Mon 26 May 2025 13:09:09 +0000
ROA not after: Sat 23 May 2026 13:09:09 +0000
asID: 329007
IP address blocks: 102.135.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 10:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2751 (0xabf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 26 13:09:09 2025 GMT
Not After : May 23 13:09:09 2026 GMT
Subject: CN=683467fa-05c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:b7:af:6c:4e:ff:a9:b1:df:84:da:68:f8:
8d:5a:11:5a:91:ae:3a:55:ce:76:2b:7c:ab:a2:d8:
a8:3d:49:7a:c1:d8:f1:aa:82:39:3b:46:68:11:9b:
9f:73:38:2e:3f:12:72:ab:69:f3:f3:80:1a:8c:e5:
c7:ae:de:75:e3:a2:2c:ba:6e:7e:a1:f2:20:44:8f:
3c:87:b2:28:34:4e:e3:8c:13:ae:fc:d2:f6:be:90:
70:e4:f5:40:85:d5:d8:f9:db:3f:08:07:a5:e1:56:
03:90:d3:e3:17:76:66:20:1b:eb:22:c6:50:c7:99:
97:0f:22:e0:da:97:81:33:7d:ca:a8:b0:42:b8:fe:
f1:7f:26:0e:78:54:e2:73:e4:78:c7:ff:0f:08:6c:
7e:f8:37:14:f4:41:b1:bf:47:17:bf:2b:04:52:2b:
b6:28:3f:ef:53:ea:b8:2f:fd:f3:31:6b:0c:80:99:
a6:d9:15:41:b9:f0:12:e8:17:e9:43:90:85:d9:27:
4e:d7:4f:eb:56:c2:0c:c4:e0:01:02:f0:a2:ef:a2:
db:fd:2b:93:b0:de:74:be:b5:20:d3:ab:4a:bb:69:
49:3c:43:28:a6:f8:09:65:5c:be:f9:ae:57:02:69:
d9:1a:02:c9:77:c1:4c:11:03:4d:13:85:b2:87:d5:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FF:87:90:87:B7:15:02:27:84:CD:AB:46:02:0D:E7:1B:03:B5:01
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9F0DB5EE3A3211F0A823E9BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.54.0/24
Signature Algorithm: sha256WithRSAEncryption
12:76:ad:f0:42:c2:68:bf:a5:99:95:f4:1a:30:c2:02:15:99:
42:1d:01:0f:78:6d:06:bd:20:68:cf:8c:0d:1e:fb:24:38:3a:
43:2a:9c:60:43:93:fb:2c:6e:52:0a:ff:4f:d3:7e:72:05:0b:
01:79:14:61:3b:4e:a1:43:86:1f:f3:0f:25:e1:95:35:bb:bf:
d6:54:6f:a4:30:7b:b4:95:f0:78:09:8e:db:f8:64:60:d7:d4:
3a:be:a0:47:ad:a4:80:12:c3:2f:0f:2a:6c:4e:e9:4f:a6:6e:
e2:2f:d3:02:a8:c3:33:55:08:e4:2b:8a:69:f2:e7:30:04:e5:
3a:8c:f3:17:46:c5:81:b9:77:22:3d:70:7d:3b:66:bd:18:ab:
da:6d:3d:3c:73:9b:3c:94:8b:9a:04:ab:2e:d8:0a:72:ba:a2:
32:5d:ca:98:ab:d8:d5:1b:0b:5a:59:21:95:4b:73:35:3f:b5:
70:6c:79:09:b9:da:2c:f2:b3:18:2a:6f:f2:ea:48:0c:a4:4c:
e3:c6:e0:b8:9e:ea:1f:a8:d2:6f:9f:bf:a0:82:19:85:ab:18:
28:cc:10:09:57:96:dc:49:59:d8:94:e3:f2:32:c4:b4:b7:c5:
e4:7d:8f:4e:6e:46:ae:4e:cb:37:a2:fb:58:be:a1:39:73:08:
d0:79:da:1e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCr8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA1MjYxMzA5MDlaFw0yNjA1MjMxMzA5MDlaMBgxFjAU
BgNVBAMTDTY4MzQ2N2ZhLTA1YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAf7evbE7/qbHfhNpo+I1aEVqRrjpVznYrfKui2Kg9SXrB2PGqgjk7RmgR
m59zOC4/EnKrafPzgBqM5ceu3nXjoiy6bn6h8iBEjzyHsig0TuOME6780va+kHDk
9UCF1dj52z8IB6XhVgOQ0+MXdmYgG+sixlDHmZcPIuDal4EzfcqosEK4/vF/Jg54
VOJz5HjH/w8IbH74NxT0QbG/Rxe/KwRSK7YoP+9T6rgv/fMxawyAmabZFUG58BLo
F+lDkIXZJ07XT+tWwgzE4AEC8KLvotv9K5Ow3nS+tSDTq0q7aUk8Qyim+AllXL75
rlcCadkaAsl3wUwRA00ThbKH1fzdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUc/+H
kIe3FQInhM2rRgIN5xsDtQEwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzlGMERCNUVFM0EzMjExRjBBODIzRTlCRURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhzYwDQYJKoZIhvcNAQEL
BQADggEBABJ2rfBCwmi/pZmV9BowwgIVmUIdAQ94bQa9IGjPjA0e+yQ4OkMqnGBD
k/ssblIK/0/TfnIFCwF5FGE7TqFDhh/zDyXhlTW7v9ZUb6Qwe7SV8HgJjtv4ZGDX
1Dq+oEetpIASwy8PKmxO6U+mbuIv0wKowzNVCOQrimny5zAE5TqM8xdGxYG5dyI9
cH07Zr0Yq9ptPTxzmzyUi5oEqy7YCnK6ojJdypir2NUbC1pZIZVLczU/tXBseQm5
2izysxgqb/LqSAykTOPG4Lie6h+o0m+fv6CCGYWrGCjMEAlXltxJWdiU4/IyxLS3
xeR9j05uRq5Oyzei+1i+oTlzCNB52h4=
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:17:07 2025 by rpki-client