Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AD11607A2F0E11F097D6DBCADAE4EC9C.roa
File: AD11607A2F0E11F097D6DBCADAE4EC9C.roa (raw, json)
Hash identifier: AvgpXvxq8d9DHK+sgDpI8kXdEj4cznBpbWj4KgRL9pc=
Subject key identifier: 0F:9F:BB:12:AE:94:8F:01:C3:33:C4:F4:B7:D0:19:39:2E:82:18:87
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0A11
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AD11607A2F0E11F097D6DBCADAE4EC9C.roa
Signing time: Mon 12 May 2025 08:54:13 +0000
ROA not before: Mon 12 May 2025 08:54:08 +0000
ROA not after: Tue 12 May 2026 08:54:08 +0000
asID: 208485
IP address blocks: 102.135.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 11:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2577 (0xa11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 12 08:54:08 2025 GMT
Not After : May 12 08:54:08 2026 GMT
Subject: CN=6821b735-c2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:60:71:58:9e:47:ef:20:08:7c:b8:05:cf:
2d:45:b3:6e:66:45:3b:c7:21:3a:6e:ea:d6:66:da:
0b:70:27:40:ed:9c:73:30:a9:96:a7:43:e1:da:c6:
f3:ea:5d:d0:42:e9:c4:6f:d3:4d:d5:7a:fd:c8:c3:
4b:95:d0:a9:56:31:ec:f2:c0:f1:0d:a2:11:63:2d:
7c:a9:cb:87:ed:40:08:7f:13:e8:0d:32:9d:74:97:
d6:6e:91:2d:09:55:bd:b4:56:6b:05:53:7e:3c:1f:
df:c2:0e:08:fc:88:32:4a:b6:a0:a5:c8:34:09:35:
7f:b4:5d:d4:38:1c:cd:33:d8:9e:aa:7e:69:33:fc:
59:57:4a:7a:10:20:1d:6e:c2:39:e1:72:4d:af:1f:
d5:ff:cc:21:26:6b:29:e9:aa:4e:5c:bf:20:1e:27:
33:1b:fc:33:86:30:b8:86:55:d0:c4:8e:20:e2:49:
ab:f4:f2:2c:fd:34:67:af:a7:3d:7a:6e:27:37:7e:
38:a8:f7:cb:02:a2:71:1a:67:1e:29:52:52:15:34:
ea:45:46:c9:93:ba:91:06:fb:1c:50:55:d5:9d:b1:
06:d5:49:da:b3:bd:7e:88:a8:38:ce:0a:7f:5c:31:
0a:e6:09:9c:e1:fa:2d:eb:a6:db:11:9c:6a:15:96:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9F:BB:12:AE:94:8F:01:C3:33:C4:F4:B7:D0:19:39:2E:82:18:87
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AD11607A2F0E11F097D6DBCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.12.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:47:09:2c:e9:f0:c9:21:53:88:a9:0c:a2:f6:5c:4b:1c:1a:
d0:ca:f5:25:97:01:4e:fd:2c:dd:14:ef:e4:0e:de:e2:dd:1b:
9c:9b:dd:15:7d:b0:2a:39:51:0e:b2:5e:11:fa:a3:5c:a6:21:
87:a1:b8:00:62:95:87:a4:ac:a0:d1:88:e3:d9:b0:10:32:98:
4a:0a:35:a3:dc:5c:1d:8e:fe:83:1a:3a:c9:8b:b3:b0:f1:a6:
76:92:4f:37:de:48:c5:24:cf:7b:a5:4b:4f:ae:72:dc:91:03:
58:78:83:f7:70:f3:2d:33:c5:51:e7:3f:9d:64:0c:47:8e:91:
1b:73:47:75:aa:01:4c:46:59:29:6f:96:95:47:88:ad:4a:ee:
6a:bb:30:5e:a4:44:c3:59:de:b2:da:7e:eb:a8:a3:54:62:04:
24:77:cb:f5:6f:6c:14:e4:00:61:fa:6c:14:58:13:30:57:91:
7e:af:19:a9:98:f7:62:aa:b4:02:1e:a6:4e:dd:39:7c:8b:bd:
85:fc:1b:85:ca:1f:5f:c3:05:ec:51:d0:95:5e:e6:88:73:87:
68:a2:1e:5f:70:11:a5:7a:2a:e4:53:4f:cc:5a:c5:8b:a9:fc:
5e:b2:55:3d:4d:ac:7c:a8:49:b8:58:ef:5b:68:cd:95:d4:1b:
3d:bb:0d:cb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICChEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA1MTIwODU0MDhaFw0yNjA1MTIwODU0MDhaMBgxFjAU
BgNVBAMTDTY4MjFiNzM1LWMyZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvOWBxWJ5H7yAIfLgFzy1Fs25mRTvHITpu6tZm2gtwJ0DtnHMwqZanQ+Ha
xvPqXdBC6cRv003Vev3Iw0uV0KlWMezywPENohFjLXypy4ftQAh/E+gNMp10l9Zu
kS0JVb20VmsFU348H9/CDgj8iDJKtqClyDQJNX+0XdQ4HM0z2J6qfmkz/FlXSnoQ
IB1uwjnhck2vH9X/zCEmaynpqk5cvyAeJzMb/DOGMLiGVdDEjiDiSav08iz9NGev
pz16bic3fjio98sConEaZx4pUlIVNOpFRsmTupEG+xxQVdWdsQbVSdqzvX6IqDjO
Cn9cMQrmCZzh+i3rptsRnGoVlsfjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUD5+7
Eq6UjwHDM8T0t9AZOS6CGIcwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0FEMTE2MDdBMkYwRTExRjA5N0Q2REJDQURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwwwDQYJKoZIhvcNAQEL
BQADggEBANVHCSzp8MkhU4ipDKL2XEscGtDK9SWXAU79LN0U7+QO3uLdG5yb3RV9
sCo5UQ6yXhH6o1ymIYehuABilYekrKDRiOPZsBAymEoKNaPcXB2O/oMaOsmLs7Dx
pnaSTzfeSMUkz3ulS0+uctyRA1h4g/dw8y0zxVHnP51kDEeOkRtzR3WqAUxGWSlv
lpVHiK1K7mq7MF6kRMNZ3rLafuuoo1RiBCR3y/VvbBTkAGH6bBRYEzBXkX6vGamY
92KqtAIepk7dOXyLvYX8G4XKH1/DBexR0JVe5ohzh2iiHl9wEaV6KuRTT8xaxYup
/F6yVT1NrHyoSbhY71tozZXUGz27Dcs=
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:06 2025 by rpki-client