Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ED1BAA402F0E11F0ACB56DCDDAE4EC9C.roa
File: ED1BAA402F0E11F0ACB56DCDDAE4EC9C.roa (raw, json)
Hash identifier: YtvsumghhtHQYyWXoqo0y7LU2sHvE2j1AvKnvgEKUBg=
Subject key identifier: 2E:E1:87:ED:BA:FC:08:96:6F:39:E2:4D:8E:F2:BC:BC:97:2E:92:54
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0A17
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ED1BAA402F0E11F0ACB56DCDDAE4EC9C.roa
Signing time: Mon 12 May 2025 08:56:01 +0000
ROA not before: Mon 12 May 2025 08:55:56 +0000
ROA not after: Tue 12 May 2026 08:55:56 +0000
asID: 208485
IP address blocks: 102.135.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 11:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2583 (0xa17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 12 08:55:56 2025 GMT
Not After : May 12 08:55:56 2026 GMT
Subject: CN=6821b7a0-0847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:f5:47:e2:8f:b2:ce:53:28:1d:0d:72:fc:
95:10:a9:ea:0c:ed:eb:81:4d:b9:e4:12:34:52:9c:
ba:cb:af:63:90:89:b7:f0:4f:64:05:85:8a:e0:f1:
bf:4e:ea:5f:a4:53:d7:19:80:56:b2:aa:bf:cf:cd:
f2:e9:d5:dd:27:7f:a7:a8:1b:12:36:6a:d3:92:b2:
d9:63:11:aa:ce:1f:47:28:82:e7:17:13:83:0d:e4:
01:1a:7b:c7:ee:2b:d8:1e:a2:69:e3:21:7a:01:9b:
e8:3f:f1:65:a8:36:29:70:0b:4a:ce:ac:e5:59:3a:
c7:18:64:18:82:8b:8f:ca:0a:78:d8:20:6d:ee:15:
71:e2:7c:90:8b:3d:5d:4e:1d:09:fe:61:cc:c1:3f:
d0:f6:d2:9f:2e:c7:3c:5a:eb:ec:e2:8f:36:9d:15:
5d:60:d5:9b:92:40:72:b0:ac:8d:cd:19:8c:e2:37:
c6:3b:b7:e0:b8:1a:9f:64:92:30:97:3a:fc:46:b3:
9f:bb:13:fc:9b:0f:06:e3:d7:6d:52:fb:8f:31:1a:
87:f6:c1:b8:26:cf:9b:d4:15:f5:be:b7:bf:db:82:
93:26:16:ca:a7:13:36:9b:ec:5a:e3:8a:49:ba:49:
70:84:93:1b:53:13:e2:9b:39:af:dd:9e:55:64:da:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E1:87:ED:BA:FC:08:96:6F:39:E2:4D:8E:F2:BC:BC:97:2E:92:54
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ED1BAA402F0E11F0ACB56DCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2d:52:5a:76:2c:5a:57:aa:59:aa:7f:55:3b:eb:e4:95:22:
5c:0c:64:8c:9b:1f:86:55:c6:93:80:5b:59:b2:93:67:37:4a:
71:df:a4:6e:52:af:6f:cc:f5:21:9e:39:36:23:a6:45:70:59:
32:59:f7:c4:32:14:1a:a4:99:7b:ea:5a:b9:95:42:c6:c7:f7:
55:85:29:8c:a6:97:0f:29:54:0f:ad:da:b2:00:43:17:f4:9f:
3e:84:d3:15:19:20:9e:31:d2:f7:6a:18:1f:15:76:0c:db:a2:
4f:3b:1b:ef:87:01:5a:d1:fd:b9:25:db:f6:45:c6:ce:a8:c1:
02:1b:e0:f4:f9:fe:ad:41:4d:3c:c2:f2:10:5c:da:a8:1b:94:
78:f0:73:25:66:5b:8d:ff:c9:18:7f:02:51:c8:c4:52:88:7a:
0d:6d:dc:f7:65:d8:47:f0:a3:d3:26:c7:fa:dc:ce:08:0d:58:
3c:0f:d8:c4:0e:82:77:4d:30:1a:89:b8:80:83:a5:8b:c5:07:
ac:a9:b4:04:84:b1:bd:59:c7:dd:89:ee:eb:eb:20:0d:cb:91:
ff:2b:ed:e8:23:a0:8d:c1:7b:5a:9e:21:f0:2a:8d:46:d6:ee:
b4:71:c7:12:79:cb:b4:09:08:24:2d:b5:0a:37:68:65:78:b5:
7a:b7:9d:81
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICChcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA1MTIwODU1NTZaFw0yNjA1MTIwODU1NTZaMBgxFjAU
BgNVBAMTDTY4MjFiN2EwLTA4NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKX/VH4o+yzlMoHQ1y/JUQqeoM7euBTbnkEjRSnLrLr2OQibfwT2QFhYrg
8b9O6l+kU9cZgFayqr/PzfLp1d0nf6eoGxI2atOSstljEarOH0cogucXE4MN5AEa
e8fuK9geomnjIXoBm+g/8WWoNilwC0rOrOVZOscYZBiCi4/KCnjYIG3uFXHifJCL
PV1OHQn+YczBP9D20p8uxzxa6+zijzadFV1g1ZuSQHKwrI3NGYziN8Y7t+C4Gp9k
kjCXOvxGs5+7E/ybDwbj121S+48xGof2wbgmz5vUFfW+t7/bgpMmFsqnEzab7Frj
ikm6SXCEkxtTE+KbOa/dnlVk2sCdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULuGH
7br8CJZvOeJNjvK8vJcuklQwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0VEMUJBQTQwMkYwRTExRjBBQ0I1NkRDRERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh2wwDQYJKoZIhvcNAQEL
BQADggEBAHotUlp2LFpXqlmqf1U76+SVIlwMZIybH4ZVxpOAW1myk2c3SnHfpG5S
r2/M9SGeOTYjpkVwWTJZ98QyFBqkmXvqWrmVQsbH91WFKYymlw8pVA+t2rIAQxf0
nz6E0xUZIJ4x0vdqGB8Vdgzbok87G++HAVrR/bkl2/ZFxs6owQIb4PT5/q1BTTzC
8hBc2qgblHjwcyVmW43/yRh/AlHIxFKIeg1t3Pdl2Efwo9Mmx/rczggNWDwP2MQO
gndNMBqJuICDpYvFB6yptASEsb1Zx92J7uvrIA3Lkf8r7egjoI3Be1qeIfAqjUbW
7rRxxxJ5y7QJCCQttQo3aGV4tXq3nYE=
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:52 2025 by rpki-client