Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E21020EAEDBE11EF9FA01174762E951A.roa
File: E21020EAEDBE11EF9FA01174762E951A.roa (raw, json)
Hash identifier: g96HVumrlYbe6UUGQz2ViI0RdK4ojaxdc2/SwGZ7O1E=
Subject key identifier: 2B:F8:62:B2:75:2B:18:40:48:F8:9D:9A:BE:C0:63:BF:77:78:E9:B8
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 068B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E21020EAEDBE11EF9FA01174762E951A.roa
Signing time: Tue 18 Feb 2025 06:09:16 +0000
ROA not before: Tue 18 Feb 2025 06:09:12 +0000
ROA not after: Wed 18 Feb 2026 06:09:12 +0000
asID: 43260
IP address blocks: 102.135.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 18 06:09:12 2025 GMT
Not After : Feb 18 06:09:12 2026 GMT
Subject: CN=67b4240c-bfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:e4:ed:cd:f7:7e:e2:51:04:f2:41:87:dc:
56:53:51:ff:39:6c:4a:9b:b6:47:06:e3:c2:b6:69:
2e:02:d7:05:54:c7:e5:47:9e:e1:21:b0:cf:c8:eb:
a9:c8:5a:3b:db:af:c1:d5:5b:22:54:4b:e8:fb:04:
34:82:a8:0d:8e:9b:b8:67:6a:9e:a4:24:87:64:a7:
3d:de:b2:c3:b9:ef:e5:a4:92:20:33:bc:04:ce:51:
4c:7c:5c:ff:42:f5:ab:cf:b7:99:f0:a4:b8:8a:a3:
c6:31:d5:ea:b9:35:72:63:36:52:8d:6a:83:de:25:
a4:63:dc:a2:d7:d1:0f:a5:be:60:aa:e1:6e:7b:eb:
7e:16:91:74:09:ae:87:5b:8a:6a:df:69:c6:0a:2f:
9b:42:1a:3c:68:51:c5:67:f1:0b:25:fc:38:88:4e:
75:52:97:0e:f2:63:f1:70:5d:b8:af:5e:ce:f4:47:
c3:ee:cf:d7:03:22:5b:bf:83:2c:61:d7:d5:cb:a1:
70:49:9d:e0:be:9a:c3:8d:2d:0c:91:ad:a8:83:00:
a6:80:55:56:ef:dd:24:be:d4:77:0c:72:39:48:dc:
21:c0:f7:dc:98:9e:59:3b:62:33:18:bd:49:74:de:
fb:6b:bf:4f:6f:68:ba:44:00:57:6f:71:90:0e:36:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:62:B2:75:2B:18:40:48:F8:9D:9A:BE:C0:63:BF:77:78:E9:B8
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E21020EAEDBE11EF9FA01174762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.65.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:78:3d:a8:64:24:76:7c:ae:03:93:6a:02:ea:e0:3d:7e:18:
07:d8:92:71:c1:99:44:85:85:4d:40:f0:24:d0:f6:ca:91:e8:
2a:5b:ad:6e:34:6d:3c:44:ac:4a:8c:8f:50:ee:4b:f4:fb:55:
4d:37:ae:ad:2e:0e:52:33:a5:ff:fc:f9:ba:e4:70:58:55:1b:
68:b5:99:d3:48:cd:f4:4b:69:7d:f0:9f:43:7f:ad:f8:1f:e7:
3b:1c:d8:8d:c9:0d:5e:f7:ee:d6:18:7b:a1:c1:85:a8:ab:2d:
6f:ea:a4:d8:5d:74:9e:14:60:aa:58:cf:17:b2:36:1e:2d:49:
3e:62:63:9d:c6:0e:5f:97:66:b5:a0:6d:b4:3f:b3:f6:3d:7f:
27:28:1e:6e:71:80:73:47:e4:bd:b1:14:f3:1f:b8:80:e3:c1:
a7:ec:80:72:46:7d:22:53:fc:f4:25:ef:e5:07:9e:d9:dc:ec:
e9:ac:21:c5:66:f7:79:b9:5f:3b:67:11:82:ac:91:0a:ce:71:
a3:53:f5:b9:1c:68:7c:ea:7f:07:30:63:34:0d:b6:50:d3:72:
27:f7:16:1e:27:17:eb:bb:3b:13:4a:68:db:8b:2a:54:3b:28:
7e:03:0d:cb:f2:b0:aa:d1:b1:5e:b5:66:45:d9:a9:91:06:47:
24:e3:a7:01
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBoswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAyMTgwNjA5MTJaFw0yNjAyMTgwNjA5MTJaMBgxFjAU
BgNVBAMTDTY3YjQyNDBjLWJmZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeruTtzfd+4lEE8kGH3FZTUf85bEqbtkcG48K2aS4C1wVUx+VHnuEhsM/I
66nIWjvbr8HVWyJUS+j7BDSCqA2Om7hnap6kJIdkpz3essO57+WkkiAzvATOUUx8
XP9C9avPt5nwpLiKo8Yx1eq5NXJjNlKNaoPeJaRj3KLX0Q+lvmCq4W57634WkXQJ
rodbimrfacYKL5tCGjxoUcVn8Qsl/DiITnVSlw7yY/FwXbivXs70R8Puz9cDIlu/
gyxh19XLoXBJneC+msONLQyRraiDAKaAVVbv3SS+1HcMcjlI3CHA99yYnlk7YjMY
vUl03vtrv09vaLpEAFdvcZAONtWdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUK/hi
snUrGEBI+J2avsBjv3d46bgwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0UyMTAyMEVBRURCRTExRUY5RkEwMTE3NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh0EwDQYJKoZIhvcNAQEL
BQADggEBALx4PahkJHZ8rgOTagLq4D1+GAfYknHBmUSFhU1A8CTQ9sqR6CpbrW40
bTxErEqMj1DuS/T7VU03rq0uDlIzpf/8+brkcFhVG2i1mdNIzfRLaX3wn0N/rfgf
5zsc2I3JDV737tYYe6HBhairLW/qpNhddJ4UYKpYzxeyNh4tST5iY53GDl+XZrWg
bbQ/s/Y9fycoHm5xgHNH5L2xFPMfuIDjwafsgHJGfSJT/PQl7+UHntnc7OmsIcVm
93m5XztnEYKskQrOcaNT9bkcaHzqfwcwYzQNtlDTcif3Fh4nF+u7OxNKaNuLKlQ7
KH4DDcvysKrRsV61ZkXZqZEGRyTjpwE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:32 2025 by rpki-client