Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D77D32B8DFA811EFA70B6A6D762E951A.roa
File: D77D32B8DFA811EFA70B6A6D762E951A.roa (raw, json)
Hash identifier: 5xjLtcuMS1SVc2HdvZFU2ajYLJK1u6tHHyGZurE/KQ0=
Subject key identifier: 93:AA:1E:65:62:27:9B:2A:72:1D:D1:CE:DC:90:E0:E0:71:A2:3A:6C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05A3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D77D32B8DFA811EFA70B6A6D762E951A.roa
Signing time: Fri 31 Jan 2025 07:56:13 +0000
ROA not before: Fri 31 Jan 2025 07:56:09 +0000
ROA not after: Sat 31 Jan 2026 07:56:09 +0000
asID: 9009
IP address blocks: 102.135.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1443 (0x5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 31 07:56:09 2025 GMT
Not After : Jan 31 07:56:09 2026 GMT
Subject: CN=679c821d-3118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:e6:82:5c:be:59:b6:71:e2:c8:f0:a9:c8:
04:98:05:bc:b5:c6:b4:b5:4e:17:de:96:f0:aa:41:
8a:55:ef:38:51:a2:15:33:4c:0d:68:09:af:b3:61:
f8:ba:11:3f:e5:ed:25:3e:3e:a3:3d:5d:c9:1f:24:
2e:49:d0:1c:e4:e8:f1:50:7c:52:56:36:82:42:39:
8d:c2:0b:57:db:df:18:eb:4f:82:5a:53:20:75:15:
36:21:df:52:fa:ba:65:4a:dc:17:27:d5:84:f5:f4:
8b:14:89:70:b9:2b:4d:7a:53:86:0f:14:16:d9:bd:
9c:b0:bd:28:1f:fb:1b:24:5e:ee:c9:b8:77:69:7f:
24:6c:bf:bc:d1:c4:12:4d:f6:e5:60:8a:9c:c8:c6:
6a:48:51:1f:ac:90:84:57:1d:c0:3f:13:8f:72:a1:
6b:45:1f:9e:33:9c:d7:09:11:67:48:4d:18:5d:8b:
ae:1e:23:7d:78:74:a6:46:99:03:90:c8:c1:16:ce:
4c:91:4f:20:33:d5:0d:99:e2:f9:ca:bf:6c:1a:65:
84:64:68:ab:8b:18:aa:cd:2e:0b:67:33:77:30:a5:
f1:ab:79:67:92:42:c9:ba:2f:8a:d5:7f:0f:17:5a:
57:4d:66:1b:4d:3c:8f:62:ca:c3:bc:85:e9:3c:a7:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AA:1E:65:62:27:9B:2A:72:1D:D1:CE:DC:90:E0:E0:71:A2:3A:6C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D77D32B8DFA811EFA70B6A6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8d:c2:de:33:77:b3:6e:e4:fc:b5:ef:83:0c:44:9e:5d:a8:
b3:1e:cb:85:9c:5f:28:d3:21:bb:5f:ed:9a:91:20:3b:61:7a:
a2:f4:e4:98:5a:8c:3c:4f:59:79:a7:b3:75:f1:e3:b1:76:fc:
ec:ba:61:51:ac:ee:a8:7b:28:31:02:9f:e3:bf:54:99:c5:82:
37:3c:f0:05:d1:18:dc:2c:bc:43:34:cf:e8:27:7f:a6:75:02:
06:8a:df:95:1a:93:9a:3d:2d:c2:0a:5c:22:3a:39:ef:78:d9:
ea:34:a8:97:fd:0b:5b:ed:dc:78:de:b4:ef:6f:5e:8d:22:5a:
49:ab:59:b0:bd:26:96:74:eb:9c:e9:67:77:b2:1a:be:d7:30:
79:b9:ea:ed:e6:af:bd:43:45:2f:a6:2d:8c:58:cf:e1:3a:07:
0b:3f:43:dc:c9:57:96:04:9e:e6:9b:fe:99:08:d5:2b:7c:92:
5a:66:f8:3f:26:a4:c6:bc:0d:12:ca:aa:92:c0:29:13:b9:5d:
ec:fb:1f:43:3b:bd:8d:54:5f:a7:f0:dd:ba:08:87:a7:9f:65:
cf:e1:0f:b0:bd:69:c2:78:09:27:b6:68:47:5d:99:7d:2d:f5:
76:02:1e:78:fa:0a:f1:a8:98:02:4a:86:e0:a7:ad:c7:11:5f:
60:bb:20:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:39:34 2025 by rpki-client