Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A801C000F80611EFAADB01A1762E951A.roa
File: A801C000F80611EFAADB01A1762E951A.roa (raw, json)
Hash identifier: fB2YTfwXu3xNAfOnpyqBaVxF+evB9hOS7CQfOID0+Q0=
Subject key identifier: 03:0D:54:9C:ED:50:2C:91:A5:59:33:0D:34:FC:69:19:41:70:17:40
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06CD
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A801C000F80611EFAADB01A1762E951A.roa
Signing time: Mon 03 Mar 2025 08:08:14 +0000
ROA not before: Mon 03 Mar 2025 08:08:10 +0000
ROA not after: Tue 03 Mar 2026 08:08:10 +0000
asID: 329007
IP address blocks: 102.135.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 11:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1741 (0x6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 3 08:08:10 2025 GMT
Not After : Mar 3 08:08:10 2026 GMT
Subject: CN=67c5636e-7d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:24:57:5f:92:65:05:0b:18:cb:d1:42:f3:
57:42:fc:c7:ba:5b:e8:60:6c:3c:a8:54:2d:2b:cd:
76:0f:ac:aa:19:c7:33:ce:7c:33:c3:7f:b0:fc:24:
76:37:bc:68:1a:7f:b8:45:33:26:dd:22:f2:bc:70:
71:33:e7:73:bf:9c:c6:03:9d:ca:87:b3:2b:b7:95:
89:b3:4e:7c:ec:c5:b3:74:d7:4c:da:f5:87:1c:5f:
16:a4:3b:a5:ea:1d:94:51:eb:0b:79:85:24:3e:ed:
20:4f:39:89:fb:7f:b8:b0:7d:22:33:35:2c:42:d1:
66:81:bc:03:7e:69:21:d9:0a:d7:f6:ff:4b:84:bd:
2c:0b:05:3f:73:6d:4b:7e:28:36:11:94:f2:09:2e:
13:21:12:b8:36:73:6b:d0:4c:2d:d1:95:31:f5:5c:
5a:35:5a:0f:c7:48:e3:6c:03:6c:76:f5:e1:58:eb:
38:c6:15:0c:da:e4:ab:58:36:30:a6:9b:54:7a:c4:
e3:5a:63:1d:9b:8a:a3:6f:87:7c:2d:68:e5:1f:70:
b2:94:6b:0c:a8:96:33:21:93:aa:55:c8:ac:8e:fd:
51:82:07:5c:a3:9b:6e:73:c7:e5:9a:2c:38:aa:eb:
5c:4d:8c:30:d0:6f:37:33:84:66:82:29:dc:31:36:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:54:9C:ED:50:2C:91:A5:59:33:0D:34:FC:69:19:41:70:17:40
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A801C000F80611EFAADB01A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.91.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6f:2d:f0:02:ca:0a:84:b3:71:02:8f:56:d4:63:13:5c:6f:
c5:d3:15:0a:15:da:8a:4e:f5:25:a8:78:07:2e:61:08:a0:6f:
ac:65:5d:93:36:5d:65:8f:98:9b:8b:4f:4e:70:3d:99:b2:05:
5b:57:b7:03:0b:39:4e:8a:e0:7e:0a:07:95:9d:fb:a0:f0:37:
13:1a:f4:b6:1c:f0:a1:3a:f0:0b:fb:81:93:56:71:99:b9:93:
82:b4:19:96:cf:ae:d2:6e:2c:ea:0c:f6:2b:f3:64:9b:4c:47:
6c:82:73:a1:e6:4f:2d:cd:b4:14:c2:c0:f3:a0:2d:eb:20:4d:
54:ee:25:66:fd:de:e1:39:92:2f:f8:83:d9:8a:9c:58:49:3b:
29:0d:86:e8:f8:fa:56:b5:8f:f1:43:a7:13:e1:59:21:ae:4c:
71:91:5b:cf:09:47:7b:ca:55:4c:f5:6a:15:3e:14:e4:68:72:
7e:64:56:50:84:27:de:ed:a0:65:27:9e:3e:63:1d:2e:0a:61:
83:26:85:c2:6f:62:e5:a3:45:4e:a4:1f:71:c8:3b:30:e9:d3:
ae:a9:0b:95:4b:ec:58:0c:24:14:4d:1b:97:08:71:12:16:a5:
33:d4:1b:0b:e2:55:11:e2:cc:ef:2c:ff:9e:99:cc:c3:a4:a0:
ee:1b:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:20:35 2025 by rpki-client