Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A2DC6D50FE3211EFB48DC558762E951A.roa
File: A2DC6D50FE3211EFB48DC558762E951A.roa (raw, json)
Hash identifier: tRJiQwkd1BHMxvryl5IslVo/dQL8t66mLanloyS/K4Q=
Subject key identifier: 72:6A:C1:6E:12:A4:72:36:8C:DB:6A:59:7F:FA:1B:37:98:52:7E:EF
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06E4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A2DC6D50FE3211EFB48DC558762E951A.roa
Signing time: Tue 11 Mar 2025 04:38:11 +0000
ROA not before: Tue 11 Mar 2025 04:38:07 +0000
ROA not after: Tue 13 Jan 2026 04:38:07 +0000
asID: 214692
IP address blocks: 102.135.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 07:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 11 04:38:07 2025 GMT
Not After : Jan 13 04:38:07 2026 GMT
Subject: CN=67cfbe32-24d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:47:4e:3b:2f:39:15:c0:35:80:50:a2:66:16:
31:51:07:3a:84:d3:49:04:94:bf:47:42:24:5d:d7:
f4:0e:e4:9c:b0:8a:d5:f3:87:32:75:02:3b:cb:1f:
67:2f:a3:ae:a1:44:61:23:de:ea:50:eb:b3:b6:f0:
40:b8:23:f7:30:a7:60:8c:5f:f5:46:9a:50:9d:d7:
d1:17:ce:10:86:d7:db:5e:b0:74:f0:3a:b7:34:d1:
a7:38:36:f8:40:1e:bd:bd:a4:39:de:89:9d:44:04:
04:f1:c5:a3:12:e2:56:c8:27:75:9e:57:10:72:6a:
9b:9b:05:b2:fe:a3:05:a0:0c:6f:a7:2e:a2:d7:1b:
83:3d:26:67:f2:38:ff:5a:10:d1:be:bc:57:6c:e9:
4a:1c:90:c5:af:93:8f:63:a7:f9:e1:49:97:00:34:
92:18:9d:57:e5:42:8d:08:61:47:f8:56:c5:58:16:
26:19:5c:47:2e:1d:99:cb:fe:32:b7:19:11:30:ce:
3e:ce:56:82:0c:4c:fc:ca:8f:79:b4:99:ab:9e:fc:
1b:a1:0d:c9:22:24:ef:24:0e:44:58:a7:4d:68:d1:
dd:cb:87:98:30:14:df:a7:03:ed:52:cb:16:7d:90:
a4:c4:16:0d:31:7b:80:38:f0:30:5b:fd:69:e9:28:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6A:C1:6E:12:A4:72:36:8C:DB:6A:59:7F:FA:1B:37:98:52:7E:EF
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A2DC6D50FE3211EFB48DC558762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4b:9a:0f:9b:35:09:6a:5e:69:2a:6c:73:4b:6d:fd:82:fb:
25:8b:3e:53:2e:1c:77:93:46:0a:11:76:9a:70:5d:3c:24:d5:
ad:54:1e:79:b7:a4:b1:fc:db:9c:69:25:8a:f8:af:53:e1:c0:
44:52:13:12:90:3e:15:92:9e:9e:88:18:10:21:d0:05:95:27:
4f:df:d9:52:7e:fe:72:99:33:38:46:ee:55:d2:28:7d:ae:eb:
34:37:f4:44:e9:2f:39:7f:16:0e:99:92:de:b8:e7:ee:ea:78:
bf:d9:fb:ff:32:70:68:2b:6e:ff:22:cd:86:80:27:b1:1f:13:
46:93:c6:7d:fd:22:c0:1b:37:53:a9:90:34:03:2a:50:1c:5b:
05:12:89:0f:fb:56:db:d4:d5:09:6e:1f:fc:1a:bd:1c:6e:9e:
8c:71:8c:4c:52:47:f1:7e:fa:18:01:f4:13:3a:0b:bd:4b:f4:
af:1d:07:d9:ea:8f:bf:61:06:16:1b:1a:0b:4a:20:ca:9a:a6:
90:ce:29:a0:7c:c6:40:e5:96:d9:61:02:05:ad:e7:36:ea:77:
74:1e:54:f3:c2:f6:6d:ab:9f:93:7f:fc:ba:13:9f:8c:ae:c3:
1c:10:3d:c8:c1:7c:ee:a8:b3:15:97:89:d3:44:89:c7:18:6d:
45:ec:a5:e2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMTEwNDM4MDdaFw0yNjAxMTMwNDM4MDdaMBgxFjAU
BgNVBAMTDTY3Y2ZiZTMyLTI0ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD0R047LzkVwDWAUKJmFjFRBzqE00kElL9HQiRd1/QO5JywitXzhzJ1AjvL
H2cvo66hRGEj3upQ67O28EC4I/cwp2CMX/VGmlCd19EXzhCG19tesHTwOrc00ac4
NvhAHr29pDneiZ1EBATxxaMS4lbIJ3WeVxByapubBbL+owWgDG+nLqLXG4M9Jmfy
OP9aENG+vFds6UockMWvk49jp/nhSZcANJIYnVflQo0IYUf4VsVYFiYZXEcuHZnL
/jK3GREwzj7OVoIMTPzKj3m0maue/BuhDckiJO8kDkRYp01o0d3Lh5gwFN+nA+1S
yxZ9kKTEFg0xe4A48DBb/WnpKM4xAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcmrB
bhKkcjaM22pZf/obN5hSfu8wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0EyREM2RDUwRkUzMjExRUZCNDhEQzU1ODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhw8wDQYJKoZIhvcNAQEL
BQADggEBAF5Lmg+bNQlqXmkqbHNLbf2C+yWLPlMuHHeTRgoRdppwXTwk1a1UHnm3
pLH825xpJYr4r1PhwERSExKQPhWSnp6IGBAh0AWVJ0/f2VJ+/nKZMzhG7lXSKH2u
6zQ39ETpLzl/Fg6Zkt645+7qeL/Z+/8ycGgrbv8izYaAJ7EfE0aTxn39IsAbN1Op
kDQDKlAcWwUSiQ/7VtvU1QluH/wavRxunoxxjExSR/F++hgB9BM6C71L9K8dB9nq
j79hBhYbGgtKIMqappDOKaB8xkDlltlhAgWt5zbqd3QeVPPC9m2rn5N//LoTn4yu
wxwQPcjBfO6osxWXidNEiccYbUXspeI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:43 2025 by rpki-client