Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DEF15A62E78A11EF9EAB1592762E951A.roa
File: DEF15A62E78A11EF9EAB1592762E951A.roa (raw, json)
Hash identifier: hpHghb0ZnXjd2XGh4Zx+wkrIYe2tfxViV1bWnkKkzMo=
Subject key identifier: DD:17:25:9C:2D:02:62:F2:F0:E1:4F:34:FB:02:1F:F6:11:AF:44:73
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05CA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DEF15A62E78A11EF9EAB1592762E951A.roa
Signing time: Mon 10 Feb 2025 08:41:50 +0000
ROA not before: Mon 10 Feb 2025 08:41:46 +0000
ROA not after: Tue 10 Feb 2026 08:41:46 +0000
asID: 329007
IP address blocks: 102.135.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 17:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1482 (0x5ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 10 08:41:46 2025 GMT
Not After : Feb 10 08:41:46 2026 GMT
Subject: CN=67a9bbce-7b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:c1:54:56:13:93:57:77:2f:f2:a8:89:b2:
a7:08:c9:05:30:0c:17:77:8f:97:79:02:28:08:be:
8f:d2:11:b9:9d:f7:5a:d1:39:7b:f0:ef:ec:e2:e2:
d5:5a:2c:f8:97:21:2a:49:57:f5:a9:35:0e:e7:61:
dd:b5:b5:dd:c1:23:13:0f:5d:91:8d:b5:6f:e2:6b:
38:c2:6c:72:1e:3d:3b:07:a4:23:b4:ab:fb:75:cd:
49:26:ae:bc:8d:ee:bc:0f:ef:30:8a:5e:24:45:82:
59:d3:16:8b:24:32:98:63:90:f4:70:19:7a:6e:f1:
ef:68:e9:c5:a6:fa:9a:1d:7d:25:89:be:0f:3f:b4:
15:82:b8:1b:ab:98:23:97:bd:e9:b4:1a:03:b7:65:
45:f9:39:a8:22:62:3f:35:ba:ac:32:7f:5c:b5:98:
ac:03:db:74:be:82:38:29:11:46:c0:3c:0e:87:35:
41:77:0f:7e:3e:74:cd:db:f0:9c:71:bf:f6:79:a3:
4a:88:78:32:0f:ed:e5:82:bd:03:81:71:12:61:6a:
72:ff:cc:1f:d9:d6:31:5f:81:6b:0f:a9:cc:75:14:
bf:35:63:b1:92:7a:fa:25:60:5d:88:16:89:05:37:
db:c2:fa:bd:5b:f3:ed:5c:02:a3:7c:ae:eb:de:b6:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:17:25:9C:2D:02:62:F2:F0:E1:4F:34:FB:02:1F:F6:11:AF:44:73
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DEF15A62E78A11EF9EAB1592762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.64.0/24
Signature Algorithm: sha256WithRSAEncryption
af:74:f1:72:90:94:3d:5c:c3:48:e3:bb:dc:6f:5f:f8:ce:24:
88:c2:10:3c:2b:7a:70:6b:2e:9d:fa:95:98:71:07:f5:2b:c9:
01:48:13:c4:da:ee:11:36:76:1b:5e:ee:8d:c0:47:0a:63:09:
d7:71:29:ac:de:c4:1b:6e:ef:f4:54:74:6f:7c:a3:65:bf:17:
ef:fa:4f:71:15:f3:0a:04:7a:b1:d5:05:fd:18:fb:dc:08:e6:
b2:0e:0a:3a:de:06:a4:5d:3e:2c:7d:0e:82:09:8d:66:4f:9c:
66:e5:35:81:cb:59:8b:01:91:39:b0:e8:ad:0d:43:ab:2f:f9:
76:40:3a:4f:87:9e:57:e6:74:0f:0d:7b:4c:37:c3:93:a1:d5:
84:06:3c:c5:1d:a6:52:8f:0e:0f:73:95:91:e8:68:d9:99:99:
9e:fa:2c:10:55:51:6b:37:57:ae:1e:52:70:3b:a5:98:52:ed:
89:80:eb:96:ef:24:d0:8b:1c:57:f0:c5:bb:fd:d6:04:8f:ae:
51:d4:e6:85:95:e6:b8:d9:a6:4f:bc:c4:7c:96:77:01:13:d7:
0e:c1:15:7d:10:50:00:7e:be:bf:1c:3b:47:5c:9c:0a:37:3b:
30:49:ca:b0:4a:4d:49:9c:e3:1d:05:a5:49:ef:2d:71:97:54:
3d:3f:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:46 2025 by rpki-client