Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EE6CB7DEF80611EFBC3AB5A1762E951A.roa
File: EE6CB7DEF80611EFBC3AB5A1762E951A.roa (raw, json)
Hash identifier: h2qQ88m8W6/Zf/FNf96TWGchzXIXf4xfKHMS64rbzNg=
Subject key identifier: 7C:F2:C6:0D:20:8D:8A:41:7E:29:9D:A9:0D:F6:DA:96:66:BA:23:3F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06D3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EE6CB7DEF80611EFBC3AB5A1762E951A.roa
Signing time: Mon 03 Mar 2025 08:10:13 +0000
ROA not before: Mon 03 Mar 2025 08:10:09 +0000
ROA not after: Tue 03 Mar 2026 08:10:09 +0000
asID: 329007
IP address blocks: 102.135.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 12:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747 (0x6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 3 08:10:09 2025 GMT
Not After : Mar 3 08:10:09 2026 GMT
Subject: CN=67c563e4-dc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:9a:67:fb:a1:93:9f:f0:56:dd:f3:3f:2f:
0a:e5:3e:2f:28:f7:68:92:28:0d:3a:3b:da:ef:0f:
66:b0:89:32:f8:18:c7:87:3e:ac:73:67:53:ee:a3:
89:04:85:d1:b3:05:4e:8f:23:20:c1:2d:0c:40:bb:
a4:c0:97:c9:18:b7:d3:bd:3e:a5:3c:93:63:20:62:
af:17:81:6d:19:a0:54:a9:dd:a6:66:50:73:96:7d:
a9:b3:de:e7:d3:a9:01:12:d6:fe:5f:e5:dd:52:f7:
94:85:61:fc:93:8f:a4:17:ad:56:60:48:5d:4d:61:
21:8a:ab:c1:d3:dd:59:48:fc:13:69:54:ac:04:6f:
44:ca:bf:55:8c:e6:21:a7:5a:99:6d:60:aa:2d:0e:
2f:a6:c9:66:1e:18:f8:77:e1:7a:4d:d6:2a:f5:9b:
f5:05:42:de:b2:c7:41:fe:44:b1:bf:c3:eb:7a:73:
ba:35:e8:09:60:fe:9a:dc:d6:99:d0:37:d1:77:0e:
52:2b:8e:e2:9a:b4:57:bd:6b:71:0e:e7:64:2a:86:
74:0c:71:86:ec:68:5e:dd:bc:85:46:20:95:f1:5b:
f2:96:74:12:95:a1:ea:3d:bc:0c:e5:86:e3:72:99:
24:f6:58:4b:3a:ec:a7:03:43:99:67:73:e2:58:fe:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F2:C6:0D:20:8D:8A:41:7E:29:9D:A9:0D:F6:DA:96:66:BA:23:3F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EE6CB7DEF80611EFBC3AB5A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.94.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0c:4f:2f:4b:d5:53:15:69:8f:73:e0:c3:88:1c:af:f8:29:
d2:b4:04:26:6c:98:1e:3e:a4:97:fa:f2:fc:df:b7:f4:07:4a:
78:03:ff:fa:a9:b4:6a:58:cd:df:c6:bd:f7:26:81:dd:1b:e4:
fa:fe:27:d1:a2:2f:91:fb:34:7d:b9:d6:58:2e:1b:38:f1:70:
54:bd:67:08:3c:b6:04:cb:56:2f:6e:ee:5d:d5:2e:90:93:48:
44:0f:15:4a:49:a6:54:77:2c:3e:52:0b:12:22:f8:88:f3:b6:
b1:f5:52:b2:3e:b2:28:f3:f7:40:ec:cc:4e:10:e7:e1:fb:58:
6b:e5:6a:06:ca:d6:04:60:37:ff:10:82:fc:ab:b9:36:d4:db:
30:85:36:c0:09:43:79:75:83:90:d2:1c:c7:90:de:8e:15:e2:
22:15:1b:dc:9e:79:22:33:68:0e:94:0d:08:eb:f8:db:ea:a6:
3f:3d:08:c3:cf:bd:9c:a6:8f:c0:7a:c3:e1:28:f3:14:3f:a7:
0f:45:f9:4b:a6:c4:17:7e:6d:53:c5:92:35:09:d1:1a:96:7b:
6f:12:ea:42:f1:0b:be:3a:9e:d0:08:8c:a9:ef:f6:70:89:0d:
cf:31:7e:11:2b:73:d2:43:6d:b3:fe:48:da:1b:a2:01:0c:2d:
23:b1:b2:05
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMDMwODEwMDlaFw0yNjAzMDMwODEwMDlaMBgxFjAU
BgNVBAMTDTY3YzU2M2U0LWRjNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbIZpn+6GTn/BW3fM/LwrlPi8o92iSKA06O9rvD2awiTL4GMeHPqxzZ1Pu
o4kEhdGzBU6PIyDBLQxAu6TAl8kYt9O9PqU8k2MgYq8XgW0ZoFSp3aZmUHOWfamz
3ufTqQES1v5f5d1S95SFYfyTj6QXrVZgSF1NYSGKq8HT3VlI/BNpVKwEb0TKv1WM
5iGnWpltYKotDi+myWYeGPh34XpN1ir1m/UFQt6yx0H+RLG/w+t6c7o16Alg/prc
1pnQN9F3DlIrjuKatFe9a3EO52QqhnQMcYbsaF7dvIVGIJXxW/KWdBKVoeo9vAzl
huNymST2WEs67KcDQ5lnc+JY/quDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfPLG
DSCNikF+KZ2pDfbalma6Iz8wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0VFNkNCN0RFRjgwNjExRUZCQzNBQjVBMTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh14wDQYJKoZIhvcNAQEL
BQADggEBAJAMTy9L1VMVaY9z4MOIHK/4KdK0BCZsmB4+pJf68vzft/QHSngD//qp
tGpYzd/Gvfcmgd0b5Pr+J9GiL5H7NH251lguGzjxcFS9Zwg8tgTLVi9u7l3VLpCT
SEQPFUpJplR3LD5SCxIi+IjztrH1UrI+sijz90DszE4Q5+H7WGvlagbK1gRgN/8Q
gvyruTbU2zCFNsAJQ3l1g5DSHMeQ3o4V4iIVG9yeeSIzaA6UDQjr+Nvqpj89CMPP
vZymj8B6w+Eo8xQ/pw9F+UumxBd+bVPFkjUJ0RqWe28S6kLxC746ntAIjKnv9nCJ
Dc8xfhErc9JDbbP+SNobogEMLSOxsgU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:27:30 2025 by rpki-client