Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AE79A448274011F099B01D98DAE4EC9C.roa
File: AE79A448274011F099B01D98DAE4EC9C.roa (raw, json)
Hash identifier: nzLD5f6VQIITT2QkJT7YO2kr2aWYXuCfYbfOI8jN1hQ=
Subject key identifier: 8C:77:0C:63:AF:50:7B:5A:78:6B:A8:FE:CE:63:76:D2:48:FD:22:51
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09A6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AE79A448274011F099B01D98DAE4EC9C.roa
Signing time: Fri 02 May 2025 10:32:01 +0000
ROA not before: Fri 02 May 2025 10:31:56 +0000
ROA not after: Sat 02 May 2026 10:31:56 +0000
asID: 208485
IP address blocks: 102.135.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 10:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 2 10:31:56 2025 GMT
Not After : May 2 10:31:56 2026 GMT
Subject: CN=68149f21-9a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:81:5a:29:6a:04:9a:6d:8b:8d:47:04:c1:
f0:5e:ce:7c:11:fb:6c:94:5a:2b:ca:6f:7d:8a:2f:
7c:89:db:d7:43:e9:fe:fc:45:6e:e4:bd:4b:61:37:
ac:f9:38:f9:2f:f0:77:12:15:01:42:63:01:ba:a6:
89:e6:29:6c:b4:68:4e:15:74:45:88:12:dc:48:50:
75:03:88:4e:0f:1d:1c:10:08:22:2b:5d:2d:93:35:
a3:be:d4:5d:16:3b:e8:0d:90:cf:ae:c8:1f:01:35:
8a:eb:47:e8:fe:80:43:b2:0d:e3:10:46:e2:25:9c:
4e:a5:e6:88:50:8d:26:d3:a2:77:2c:f5:17:83:5b:
ae:9a:cb:dc:a1:8c:90:11:36:39:46:cd:12:3a:e5:
73:8b:96:22:93:26:c7:fa:dc:a0:80:e6:fa:07:84:
a2:e6:a7:54:b7:d9:9d:cd:a0:c0:8d:b7:28:4b:a3:
58:9d:cd:6b:da:1b:c8:aa:6e:10:45:9b:e9:59:ef:
57:a4:0f:5b:fc:33:4a:5c:6e:0c:22:43:18:90:5f:
bd:17:72:27:09:06:1e:c9:bf:92:23:38:9b:f2:89:
c3:41:49:b0:aa:07:8b:a8:b0:5c:c7:2a:08:98:28:
1b:4d:e5:c1:54:f7:03:2f:8f:c7:58:34:dc:50:c5:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:77:0C:63:AF:50:7B:5A:78:6B:A8:FE:CE:63:76:D2:48:FD:22:51
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AE79A448274011F099B01D98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:20:d0:38:97:de:97:c5:d1:01:39:14:4f:f8:e4:af:3a:07:
f6:31:bf:f3:18:22:20:5a:1d:63:2f:53:49:63:35:45:78:04:
b7:b0:ba:c8:12:2c:6c:f1:e4:ec:7b:46:3b:8c:19:e7:45:0a:
6b:3b:ea:65:20:b3:92:80:c7:52:37:f0:d7:9d:c2:16:eb:42:
0f:68:cb:02:e2:c0:66:3f:56:46:a3:a3:81:31:b8:54:59:52:
19:86:ac:05:09:6e:96:36:34:97:4c:54:21:6c:1d:d6:a9:3d:
f8:fb:fe:62:80:d4:94:e4:3c:f0:24:4f:6c:f2:f5:b1:36:63:
d2:13:5d:c2:00:ab:6e:ec:11:8d:fa:04:48:dd:51:d5:4b:d5:
a7:d6:f0:01:f4:09:7f:dc:ee:16:75:c2:48:3e:18:3c:da:7b:
1c:25:d6:ff:27:b3:55:96:b6:43:9a:79:e1:9c:10:3c:70:f4:
f8:1f:ac:8b:57:2d:bf:6f:45:85:5a:d1:d9:e0:f2:df:3b:f4:
7e:bf:5c:3b:74:fd:4f:cd:ee:ec:56:2a:e5:ff:0c:f2:36:ff:
35:e0:ce:b5:36:c6:33:58:71:6f:83:2c:5f:af:a7:f9:41:a6:
1a:45:3b:5c:f3:3d:3a:c8:94:74:c3:f5:16:ab:44:ca:b4:a7:
75:53:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:50:44 2025 by rpki-client