Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D4022FF6D8BB11EF9A9BE0AD762E951A.roa
File: D4022FF6D8BB11EF9A9BE0AD762E951A.roa (raw, json)
Hash identifier: H+LYa9tzpkZvN1Xfja+4URdoZzUWdecd1iSIA4koKgs=
Subject key identifier: 17:BC:D2:60:52:EF:A4:75:FE:A8:EA:63:17:FE:F5:4D:3E:E3:39:C0
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0592
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D4022FF6D8BB11EF9A9BE0AD762E951A.roa
Signing time: Wed 22 Jan 2025 12:24:30 +0000
ROA not before: Wed 22 Jan 2025 12:24:26 +0000
ROA not after: Thu 22 Jan 2026 12:24:26 +0000
asID: 212238
IP address blocks: 102.135.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 07:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1426 (0x592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 22 12:24:26 2025 GMT
Not After : Jan 22 12:24:26 2026 GMT
Subject: CN=6790e37e-e3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:73:aa:9e:94:4e:43:98:c6:5b:c9:e9:b8:
01:f3:ad:b5:c9:0c:aa:ea:12:78:38:8f:b7:0e:61:
50:d3:4c:82:4b:05:d5:8b:ab:17:12:81:77:c5:2c:
6f:a8:e1:4b:e8:ca:26:52:7f:2b:b0:e5:a0:5e:4b:
7a:b2:86:95:33:b1:91:5e:83:b4:a6:73:19:c0:b4:
81:53:d2:fe:cd:14:91:74:10:2f:3c:e3:d0:9e:63:
59:7d:71:05:23:c9:ba:6c:b6:e8:47:37:9d:8e:6c:
0e:f0:a0:5c:9f:f1:50:bd:e1:ee:0c:36:ac:25:05:
9d:6a:89:a8:41:fe:3b:3a:a9:a9:e5:cd:5b:62:1b:
51:dd:9d:78:76:87:39:5e:00:43:ad:b6:01:b2:48:
e2:e1:aa:0c:37:f7:42:d1:ab:97:12:14:34:27:7d:
02:fd:c4:07:b4:fe:7f:b5:95:2c:48:19:96:88:af:
d8:01:02:b6:5f:fa:19:89:c5:3b:10:22:35:44:a3:
86:0f:79:4f:77:78:3a:4c:1b:8a:39:93:03:a4:cc:
c6:c9:7a:03:30:a5:de:35:5e:49:52:8b:7d:a6:7c:
1e:45:47:b9:6c:e0:93:1d:23:8b:55:36:f6:72:51:
eb:97:a9:aa:2b:4d:15:ea:33:03:aa:7b:e6:80:c7:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:D2:60:52:EF:A4:75:FE:A8:EA:63:17:FE:F5:4D:3E:E3:39:C0
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D4022FF6D8BB11EF9A9BE0AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8c:4e:af:7f:c1:73:a9:df:03:69:d0:ea:2d:f0:10:a4:ef:
36:71:91:40:f0:0d:d2:ed:f2:f2:fe:27:37:92:eb:5b:95:3e:
ab:b2:19:d8:7a:84:33:42:59:e8:72:66:e7:0c:34:27:0d:f7:
01:a4:d1:2e:19:8a:cf:f0:e1:71:0e:fb:72:0a:35:86:44:5a:
ca:be:a1:af:d7:da:fb:b9:4e:57:55:1c:84:cc:08:83:5e:7b:
84:6c:5e:9a:26:e4:52:d6:93:03:df:ac:43:48:5e:0e:6f:84:
83:1b:b0:c7:06:5e:f6:3c:26:98:4c:97:81:a2:3b:6a:fc:ac:
43:49:4a:c7:84:00:77:61:2b:59:0e:0a:6f:29:3e:72:17:ea:
4e:88:ed:8a:8e:57:c0:f6:17:03:ac:1f:8f:ed:b1:b0:4c:89:
67:d7:f7:bf:b5:49:e5:ff:10:8b:94:01:d2:fd:0f:35:49:b0:
fd:6e:fe:e0:b8:c5:cc:fe:57:4e:d4:a7:c5:6d:c0:c3:6f:d0:
81:f2:c8:8d:0e:87:38:a3:07:ce:e9:dc:37:24:fb:86:92:da:
31:10:54:04:97:3d:93:0e:a5:e4:4c:12:b3:a3:1a:7a:5f:47:
54:3e:08:de:1b:90:59:10:86:d3:8b:f8:8a:6f:37:51:01:4e:
63:b3:6f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:37 2025 by rpki-client