Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A1067E16096E11F08A1E515C762E951A.roa
File: A1067E16096E11F08A1E515C762E951A.roa (raw, json)
Hash identifier: Zy38bb7QpJGe1brleV0pIJBoEVO1aSpvwkjxHRMLWS0=
Subject key identifier: 77:B0:DB:63:6C:24:19:C0:42:40:0A:0D:09:B0:5E:6D:B9:89:3B:72
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0848
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A1067E16096E11F08A1E515C762E951A.roa
Signing time: Tue 25 Mar 2025 11:45:20 +0000
ROA not before: Tue 25 Mar 2025 11:45:16 +0000
ROA not after: Wed 25 Mar 2026 11:45:16 +0000
asID: 2914
IP address blocks: 102.135.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 07:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:45:16 2025 GMT
Not After : Mar 25 11:45:16 2026 GMT
Subject: CN=67e29750-2481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:70:6f:3f:c7:93:8f:9b:6d:bc:c2:12:85:
0c:3b:92:1f:63:ab:b2:af:1a:b9:96:06:45:83:c5:
57:16:cd:ac:97:54:bc:88:93:3a:94:df:34:f4:9a:
83:7d:68:95:8d:ac:52:53:36:d7:37:dc:b2:d7:33:
db:2b:13:d9:de:ca:3a:5e:51:01:00:e5:7b:4f:52:
62:9c:98:1e:22:8b:66:63:d2:e5:2f:28:c7:65:a7:
b9:3b:05:52:80:95:c9:e2:5e:61:82:05:b0:9b:9b:
d1:76:e3:ba:46:99:79:10:65:7e:ae:ed:5a:4b:19:
11:28:ac:ff:f5:f9:4c:0f:79:c5:2c:1d:32:a5:6e:
1e:48:60:af:5d:d3:77:05:0a:e8:7a:98:c3:c8:73:
4e:89:46:42:98:d9:1d:97:7b:3e:53:a1:74:71:ea:
f3:9f:22:c3:eb:1d:e3:d1:cc:67:8f:1f:50:6f:34:
7d:02:cc:0e:12:03:cd:b6:ec:3c:83:19:11:44:f9:
92:2c:86:08:f8:1b:31:ca:ec:cf:5c:26:12:48:06:
f2:29:20:03:a2:19:06:1d:fe:2e:9a:52:ee:da:e9:
c1:09:c4:c1:e8:18:f9:d1:90:f2:d2:c2:71:1e:43:
33:a2:99:33:6f:73:91:0e:73:98:00:49:87:b4:e5:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B0:DB:63:6C:24:19:C0:42:40:0A:0D:09:B0:5E:6D:B9:89:3B:72
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A1067E16096E11F08A1E515C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.95.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d6:a9:98:40:43:31:aa:52:84:a1:3e:4e:d2:58:31:7a:7a:
89:dc:e2:43:d6:a2:c2:c8:89:fa:47:f3:26:e6:59:97:fe:5d:
48:6e:4d:3c:ba:20:cb:de:63:0f:b4:43:30:63:87:3b:9d:df:
27:8d:22:c1:69:f8:49:f5:56:bc:28:b1:2a:e0:6a:90:23:99:
3b:4c:7a:bf:65:f0:1d:ae:df:87:0b:e8:0a:ee:e0:ab:21:ad:
4f:86:c1:08:87:96:b1:35:b7:cc:ee:82:c0:fd:4f:f7:eb:c7:
54:9e:64:ba:2b:67:5d:52:09:12:fa:7d:a0:71:00:0d:31:ce:
e4:2b:d2:8a:46:09:8f:ac:35:c7:b7:a8:ad:44:d6:c6:d6:2f:
4c:d8:b1:51:b8:c8:fe:7c:95:99:7f:67:ca:a3:ce:93:78:31:
dd:12:8d:72:ae:2e:e4:cd:e5:d6:8a:d3:87:8d:bb:69:ea:47:
ac:c4:49:ca:cd:86:12:b3:5a:77:8f:0e:15:31:ec:6f:2e:0c:
cf:19:2d:00:c6:46:b2:53:63:b8:9f:af:6c:31:ab:fd:4b:9d:
f4:d2:93:f7:f0:ea:f2:1a:06:bb:2c:52:f7:6f:a7:07:e8:c5:
95:59:61:06:70:2f:c1:b6:82:75:46:72:49:26:4d:31:d1:fe:
8c:70:69:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:00:38 2025 by rpki-client