Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C2CF59F2061511F0964E376F762E951A.roa
File: C2CF59F2061511F0964E376F762E951A.roa (raw, json)
Hash identifier: 2fTjPklQee03CLjKUNsDX8uP/Xmw+y3c46kEnbhUJxo=
Subject key identifier: FF:D2:41:F6:8B:32:F8:12:87:D7:44:E5:10:2C:C1:35:48:68:31:D4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0782
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C2CF59F2061511F0964E376F762E951A.roa
Signing time: Fri 21 Mar 2025 05:31:38 +0000
ROA not before: Fri 21 Mar 2025 05:31:34 +0000
ROA not after: Sat 21 Mar 2026 05:31:34 +0000
asID: 329007
IP address blocks: 102.135.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 11:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 21 05:31:34 2025 GMT
Not After : Mar 21 05:31:34 2026 GMT
Subject: CN=67dcf9ba-16a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:c2:5c:e8:b2:9c:f9:6d:f8:0b:c0:e6:35:
64:de:30:3a:17:22:3d:b5:14:e7:06:b1:39:42:8d:
d6:e4:92:9c:c9:bf:6e:f2:7d:2b:02:d9:d1:c8:4e:
b2:db:f8:24:5d:f9:69:a5:c7:0a:4f:7d:00:22:46:
c4:67:94:c4:78:91:99:3a:25:6a:35:f6:a1:bc:64:
72:92:4b:a2:5c:d8:d9:7c:a1:24:86:ec:fe:43:bf:
5c:f2:d6:16:72:3b:cb:e3:89:17:2b:5f:75:16:43:
94:0f:49:63:5a:15:95:76:ea:9c:c8:23:f4:fc:08:
e4:a9:38:97:d2:44:18:42:9f:db:21:5d:71:97:9e:
e1:b9:a0:87:20:7e:f5:03:78:73:a0:45:0a:37:84:
c3:0a:82:55:8e:52:df:94:30:dd:a8:e4:13:da:e7:
df:57:e8:a5:ee:ad:d6:a5:3f:0e:e3:a7:b3:24:67:
51:5d:75:43:42:fa:14:21:d0:80:46:b1:d8:db:7e:
1e:c0:1b:84:46:f6:b9:3d:59:2a:34:05:be:29:ff:
da:7b:07:81:a6:ff:e8:04:4b:61:68:0c:b7:5c:eb:
2a:8d:0c:1a:af:e3:22:42:59:1c:7a:4c:12:61:c7:
d6:4c:68:49:91:8c:18:b6:8a:ff:da:c6:f9:5c:94:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D2:41:F6:8B:32:F8:12:87:D7:44:E5:10:2C:C1:35:48:68:31:D4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C2CF59F2061511F0964E376F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.69.0/24
Signature Algorithm: sha256WithRSAEncryption
da:cd:04:85:91:85:ec:c7:76:4e:b6:9a:58:11:91:54:28:ba:
63:84:3f:47:e5:c4:90:5a:03:be:17:83:39:55:8d:c3:9d:59:
fb:17:6b:80:e1:b3:68:7c:8d:cd:c5:89:1d:76:cf:56:ff:be:
91:14:aa:dd:f7:9e:1a:b4:cf:e3:2d:3e:93:2b:5c:d4:c1:34:
e0:5b:f0:fd:80:30:23:14:05:8b:c9:1c:2b:4f:3a:23:c6:b4:
fd:80:f1:4c:21:ed:d7:5f:d6:83:b4:07:0d:8f:43:fb:2f:71:
51:bf:ac:de:aa:ef:57:05:eb:ed:bb:de:16:9d:27:72:97:73:
6f:fc:73:52:ae:fc:ed:45:16:db:e4:f3:19:85:4d:bf:4e:e2:
6e:27:d9:6a:cc:0a:a8:9d:d1:8a:9d:41:ca:49:9e:2a:7a:f2:
b7:42:b2:9a:0b:cf:14:c0:bb:ef:63:ea:40:c3:0c:2e:47:75:
69:86:6e:7c:81:ba:8e:2b:ec:7a:f3:c7:6f:5f:1c:8a:45:79:
22:51:aa:7f:69:35:f3:ef:43:4c:38:99:ed:75:0e:14:a6:ed:
c2:a2:03:3f:59:b5:8c:99:9c:02:0b:e3:b2:5e:25:ab:ed:cc:
e8:0f:5c:54:ea:52:0d:7a:3e:33:2f:53:bb:7c:cb:25:22:84:
86:ef:7e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:59:44 2025 by rpki-client