Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C3F3AD0C2F0E11F0968DD1CCDAE4EC9C.roa
File: C3F3AD0C2F0E11F0968DD1CCDAE4EC9C.roa (raw, json)
Hash identifier: Sm95mSMbBSkQ/j1J6HCL0eR9vkockQQmjE0sH4hV678=
Subject key identifier: 52:BB:FC:F9:92:D6:F1:F9:EA:1D:EE:54:28:AA:15:CD:4C:8E:95:A0
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0A13
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C3F3AD0C2F0E11F0968DD1CCDAE4EC9C.roa
Signing time: Mon 12 May 2025 08:54:51 +0000
ROA not before: Mon 12 May 2025 08:54:47 +0000
ROA not after: Tue 12 May 2026 08:54:47 +0000
asID: 208485
IP address blocks: 102.135.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 11:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 12 08:54:47 2025 GMT
Not After : May 12 08:54:47 2026 GMT
Subject: CN=6821b75b-8d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:0d:e7:a0:c6:3f:6c:3c:70:39:05:89:bf:
21:84:8c:17:12:a7:47:ea:79:a6:de:0f:82:52:bd:
c4:97:ff:e6:72:6a:a3:69:d6:c4:56:ad:09:c2:98:
78:bf:32:48:bc:b0:f8:1f:5f:a2:3c:26:ab:79:67:
b9:ce:b8:12:59:93:e9:b4:dc:77:1c:61:13:a9:e8:
30:c4:df:d0:f3:08:dd:2a:57:1b:73:7c:46:f3:ff:
6d:af:8f:35:99:58:bd:ed:e5:f1:6b:47:8a:c9:8e:
ca:4e:87:63:c2:84:c2:b3:91:46:df:cd:16:bc:95:
90:1a:11:80:5b:96:05:ef:10:ab:dc:b9:5c:ae:e1:
45:4f:f7:81:fd:8c:70:6f:cc:f1:34:89:e5:fa:b6:
e2:f6:17:2c:af:e5:75:0f:70:ac:0d:37:86:97:8d:
10:c0:72:d9:dc:2e:50:70:6d:b4:5c:63:81:9d:d2:
5f:0a:27:a2:b6:52:ae:d9:9e:26:39:cc:bd:d0:69:
9a:bc:1d:d3:a6:46:82:d9:04:04:a2:b5:59:74:12:
93:0c:04:67:57:c0:04:a0:27:9d:b8:8b:ad:bf:ec:
75:a3:6d:56:6b:52:c5:ea:a0:10:04:ce:86:cb:1a:
6d:cf:92:ba:0c:7e:15:7e:8c:5f:31:5f:b6:2b:49:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:FC:F9:92:D6:F1:F9:EA:1D:EE:54:28:AA:15:CD:4C:8E:95:A0
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C3F3AD0C2F0E11F0968DD1CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:54:65:66:12:37:22:40:fd:1d:d4:8f:cf:c9:b2:42:98:6b:
7e:7b:fb:4e:22:69:2b:98:35:f6:b8:26:5f:93:92:79:a1:ba:
12:d9:18:40:df:9b:11:bb:f5:2f:47:6b:dc:9f:0a:0d:80:d5:
75:26:41:1e:d5:2d:9c:08:a1:8a:56:a9:5b:d2:c7:61:28:1a:
49:6b:81:40:02:65:4d:13:12:e7:a0:d7:a6:79:90:45:c5:b1:
14:84:17:a4:a4:59:f8:2f:9f:7a:50:60:fb:68:0e:18:db:ff:
42:25:9d:14:d3:00:3b:f5:87:a1:22:5c:48:af:63:ca:ec:c9:
18:b8:01:6e:96:2f:fe:87:67:dc:9e:cb:43:ea:f6:33:e0:b2:
bf:37:4f:9b:f5:bc:96:27:da:b6:5d:60:98:4f:25:98:10:b7:
b1:9d:6a:5f:5b:4d:ec:34:56:6d:03:fa:ef:a7:12:50:37:a0:
20:9b:8d:76:94:2a:2d:67:71:4c:5a:00:83:6b:01:91:d4:21:
2c:97:89:bf:bd:08:43:f9:4d:78:8e:4a:bf:c6:55:e8:30:92:
fb:dc:03:53:c4:1b:1c:1a:4f:35:a2:22:76:09:de:d7:fd:47:
c3:1d:8c:1e:02:e2:f8:94:8d:65:1b:1a:03:ba:8e:1e:40:eb:
d5:93:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:27:52 2025 by rpki-client