Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E800D5BEF29911EF8627A390762E951A.roa
File: E800D5BEF29911EF8627A390762E951A.roa (raw, json)
Hash identifier: Px+7uZRW5nGwwdWCsVIHyHouBSTSlNh+FEaGGeiVYY8=
Subject key identifier: 84:43:D6:DD:D2:9B:4F:D6:FD:A9:05:FC:7F:1C:AD:89:DA:CD:BF:A1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0697
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E800D5BEF29911EF8627A390762E951A.roa
Signing time: Mon 24 Feb 2025 10:27:11 +0000
ROA not before: Mon 24 Feb 2025 10:27:07 +0000
ROA not after: Tue 24 Feb 2026 10:27:07 +0000
asID: 329007
IP address blocks: 102.135.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 05:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1687 (0x697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 24 10:27:07 2025 GMT
Not After : Feb 24 10:27:07 2026 GMT
Subject: CN=67bc497f-cb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:b4:a8:47:0b:1b:b5:03:c1:95:2b:46:8d:
3a:a7:18:01:0c:b9:da:5a:a5:30:e4:9a:f3:a6:65:
d6:a8:b8:7e:42:00:5e:a8:28:91:0a:21:ab:03:b7:
28:1b:95:f0:88:44:e2:a7:9f:52:bf:fd:5e:4a:fd:
29:7c:3b:b6:1f:ba:7a:73:a4:7c:91:f0:67:e2:84:
f4:4e:4f:76:0b:c7:30:ba:dd:56:75:61:95:58:fc:
b8:ee:84:cc:1a:1f:08:fe:95:0f:7a:47:79:23:c2:
26:c5:0e:b3:c6:d3:18:10:83:e3:0f:16:45:e5:e4:
6e:9c:88:5b:74:5e:69:6c:f4:df:01:63:86:e5:5e:
21:b2:91:08:87:80:2b:dd:f4:50:40:e4:fa:6f:75:
6d:c7:ea:cd:81:d2:17:c1:46:e6:94:d9:96:73:e6:
7d:16:2f:8d:65:d7:7d:a7:96:44:d4:0a:a5:48:54:
64:7f:70:33:f6:6d:5c:db:17:79:2e:40:cf:e9:bc:
fd:84:11:83:4f:d6:80:da:25:10:a4:01:a0:14:4a:
dd:d5:04:5b:f9:79:4d:13:f9:07:97:dd:d6:7f:27:
3c:f2:fa:b1:a2:f8:e8:f9:bb:ea:46:16:cd:b2:9c:
a7:44:de:df:34:d5:53:58:26:13:f2:12:1f:41:05:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:43:D6:DD:D2:9B:4F:D6:FD:A9:05:FC:7F:1C:AD:89:DA:CD:BF:A1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E800D5BEF29911EF8627A390762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:13:dd:37:53:af:6f:4f:ac:d1:4a:cf:b8:c5:5a:2f:0f:28:
d9:8d:f5:88:f8:7e:6f:3f:0a:1c:11:d0:a9:2a:67:52:22:67:
df:55:5c:a8:a9:4e:43:00:bf:ff:24:75:67:4e:48:e1:69:33:
5a:02:df:c4:f9:61:36:78:73:3a:cf:79:7a:41:c8:bd:c5:a0:
b8:37:71:cc:1f:bd:ee:58:87:4d:20:4d:54:06:fd:e7:e7:7a:
da:99:9a:e4:a7:de:66:92:b9:8d:76:d8:8b:cf:25:a7:33:eb:
1b:2e:68:9c:f5:86:26:f2:05:d7:4a:0c:d0:d2:a1:ec:8c:f9:
09:a1:0b:c4:6f:fd:58:53:67:31:ce:3e:ab:32:b7:b9:15:52:
e1:0a:af:97:e0:93:79:54:b8:70:75:e1:81:88:92:05:e3:6a:
e7:9b:15:e4:00:3b:bb:25:dc:57:64:56:57:be:65:e5:ef:04:
b9:56:a1:86:6d:71:4a:ea:be:30:90:9b:aa:fe:ca:48:80:e3:
16:e7:85:51:33:d6:4d:80:8b:ce:eb:1b:c4:f1:18:db:7e:7b:
34:5c:d1:6e:d8:5b:60:03:f3:7d:c0:b6:a5:4f:8c:87:eb:30:
b8:21:f2:95:2c:83:4d:d5:50:44:1c:a0:23:17:69:0a:45:9f:
d5:53:42:07
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAyMjQxMDI3MDdaFw0yNjAyMjQxMDI3MDdaMBgxFjAU
BgNVBAMTDTY3YmM0OTdmLWNiMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCn7LSoRwsbtQPBlStGjTqnGAEMudpapTDkmvOmZdaouH5CAF6oKJEKIasD
tygblfCIROKnn1K//V5K/Sl8O7YfunpzpHyR8GfihPROT3YLxzC63VZ1YZVY/Lju
hMwaHwj+lQ96R3kjwibFDrPG0xgQg+MPFkXl5G6ciFt0Xmls9N8BY4blXiGykQiH
gCvd9FBA5PpvdW3H6s2B0hfBRuaU2ZZz5n0WL41l132nlkTUCqVIVGR/cDP2bVzb
F3kuQM/pvP2EEYNP1oDaJRCkAaAUSt3VBFv5eU0T+QeX3dZ/Jzzy+rGi+Oj5u+pG
Fs2ynKdE3t801VNYJhPyEh9BBU9fAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhEPW
3dKbT9b9qQX8fxytidrNv6EwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0U4MDBENUJFRjI5OTExRUY4NjI3QTM5MDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwowDQYJKoZIhvcNAQEL
BQADggEBANcT3TdTr29PrNFKz7jFWi8PKNmN9Yj4fm8/ChwR0KkqZ1IiZ99VXKip
TkMAv/8kdWdOSOFpM1oC38T5YTZ4czrPeXpByL3FoLg3ccwfve5Yh00gTVQG/efn
etqZmuSn3maSuY122IvPJacz6xsuaJz1hibyBddKDNDSoeyM+QmhC8Rv/VhTZzHO
Pqsyt7kVUuEKr5fgk3lUuHB14YGIkgXjauebFeQAO7sl3FdkVle+ZeXvBLlWoYZt
cUrqvjCQm6r+ykiA4xbnhVEz1k2Ai87rG8TxGNt+ezRc0W7YW2AD833AtqVPjIfr
MLgh8pUsg03VUEQcoCMXaQpFn9VTQgc=
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:22:30 2025 by rpki-client