Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9D4BCA6096C11F09BA8B54F762E951A.roa
File: C9D4BCA6096C11F09BA8B54F762E951A.roa (raw, json)
Hash identifier: 73WcC4QR+hUSR+ReWHS809SJ1Vx6Aa0jbD+IEgCgONg=
Subject key identifier: BF:07:FB:5D:46:A3:39:FD:FA:57:A5:E1:3F:85:E4:0D:DF:F3:00:90
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0820
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9D4BCA6096C11F09BA8B54F762E951A.roa
Signing time: Tue 25 Mar 2025 11:32:10 +0000
ROA not before: Tue 25 Mar 2025 11:32:06 +0000
ROA not after: Wed 25 Mar 2026 11:32:06 +0000
asID: 2914
IP address blocks: 102.135.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 07:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080 (0x820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:32:06 2025 GMT
Not After : Mar 25 11:32:06 2026 GMT
Subject: CN=67e29439-0643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:c3:16:74:41:fc:83:b0:8e:54:1d:d8:77:
5e:11:05:30:58:6e:f5:9b:80:e7:38:19:9b:91:a7:
ed:91:3b:97:c8:b9:42:af:45:82:17:eb:fd:86:66:
5a:21:ad:1f:b7:34:08:89:aa:a7:52:ba:d2:27:b2:
c0:11:bd:20:c8:41:53:82:e1:45:b9:d7:a6:e4:98:
5b:4d:af:23:70:a8:05:c6:74:b0:08:80:2e:93:4e:
25:24:cb:ff:9e:0a:3a:01:a8:58:4a:bb:f3:70:3f:
cf:37:38:bb:7b:4b:a6:91:32:b0:09:e1:12:90:c6:
2b:39:fb:88:5f:cd:51:d0:9e:5b:37:ca:b1:ca:37:
3e:44:65:ca:46:f4:a9:dd:fc:06:78:5b:75:88:62:
6e:5d:c7:76:75:26:19:0d:b7:08:57:46:a2:70:59:
bb:a7:c1:f1:22:ab:67:b0:28:1b:9c:2d:43:22:2b:
9f:b4:d0:be:5b:3b:67:34:2a:6e:5b:b0:15:36:49:
db:1b:d2:6a:80:5d:0a:ba:66:89:e7:af:3b:48:0e:
59:ad:07:fd:70:f4:44:75:d6:76:65:1f:85:f4:65:
a5:42:af:aa:36:aa:91:90:99:7a:6f:20:95:fb:d0:
6d:eb:40:d0:ba:61:4a:1e:5b:dd:b0:ad:61:f9:2b:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:FB:5D:46:A3:39:FD:FA:57:A5:E1:3F:85:E4:0D:DF:F3:00:90
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9D4BCA6096C11F09BA8B54F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:53:41:10:80:24:bb:78:f8:9e:3a:20:1b:89:a0:42:4e:88:
00:ae:37:bf:46:20:0f:56:d7:eb:2c:bc:f4:07:95:7b:a1:16:
b1:5a:0a:13:df:ca:c4:fb:86:f5:54:81:6e:13:21:76:cd:d6:
46:c1:6a:3a:3e:2d:a9:ca:74:4a:e0:3a:21:ea:dc:6f:3c:87:
16:bd:cc:89:07:39:ae:9f:b0:8c:df:77:ab:db:1d:4b:c8:13:
f3:42:4c:ee:15:d9:a9:69:f8:ec:20:e3:05:6b:38:bd:84:c5:
34:99:72:15:12:8b:42:dd:dc:b1:19:8e:3c:14:c4:c5:6d:7b:
d3:37:30:4e:aa:28:bd:74:18:bb:12:b0:5b:b1:94:d6:f4:73:
09:27:06:4a:aa:0a:db:ce:25:a1:e8:5c:bd:2b:6d:ba:26:d2:
8a:1d:03:dc:ee:5b:73:7b:e5:3c:54:b9:6b:e5:ee:19:bc:01:
45:79:01:c6:33:cd:15:69:ad:b9:7e:6a:5a:b3:d2:07:48:e7:
c9:71:2e:03:3a:1c:23:0e:2a:d1:0f:c5:ac:57:d1:10:fd:9a:
b9:19:4a:c3:b8:f0:b7:65:97:22:eb:4c:0c:18:c1:d5:67:bb:
44:1b:11:59:1b:6d:b6:77:fb:50:6f:78:14:21:d9:bf:36:3f:
48:73:7f:52
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjUxMTMyMDZaFw0yNjAzMjUxMTMyMDZaMBgxFjAU
BgNVBAMTDTY3ZTI5NDM5LTA2NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDL68MWdEH8g7COVB3Yd14RBTBYbvWbgOc4GZuRp+2RO5fIuUKvRYIX6/2G
ZlohrR+3NAiJqqdSutInssARvSDIQVOC4UW516bkmFtNryNwqAXGdLAIgC6TTiUk
y/+eCjoBqFhKu/NwP883OLt7S6aRMrAJ4RKQxis5+4hfzVHQnls3yrHKNz5EZcpG
9Knd/AZ4W3WIYm5dx3Z1JhkNtwhXRqJwWbunwfEiq2ewKBucLUMiK5+00L5bO2c0
Km5bsBU2Sdsb0mqAXQq6ZonnrztIDlmtB/1w9ER11nZlH4X0ZaVCr6o2qpGQmXpv
IJX70G3rQNC6YUoeW92wrWH5K9hZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvwf7
XUajOf36V6XhP4XkDd/zAJAwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0M5RDRCQ0E2MDk2QzExRjA5QkE4QjU0Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh0swDQYJKoZIhvcNAQEL
BQADggEBAA9TQRCAJLt4+J46IBuJoEJOiACuN79GIA9W1+ssvPQHlXuhFrFaChPf
ysT7hvVUgW4TIXbN1kbBajo+LanKdErgOiHq3G88hxa9zIkHOa6fsIzfd6vbHUvI
E/NCTO4V2alp+Owg4wVrOL2ExTSZchUSi0Ld3LEZjjwUxMVte9M3ME6qKL10GLsS
sFuxlNb0cwknBkqqCtvOJaHoXL0rbbom0oodA9zuW3N75TxUuWvl7hm8AUV5AcYz
zRVprbl+alqz0gdI58lxLgM6HCMOKtEPxaxX0RD9mrkZSsO48LdllyLrTAwYwdVn
u0QbEVkbbbZ3+1BveBQh2b82P0hzf1I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:06 2025 by rpki-client