Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EEDC244ED23F11EFB57E0981762E951A.roa
File: EEDC244ED23F11EFB57E0981762E951A.roa (raw, json)
Hash identifier: gegxzgY3WZ/J5rV51uQ6DorN5nwh+npt5TclwylgrAg=
Subject key identifier: 13:78:E3:BE:DB:06:8B:76:1E:D3:70:AF:AF:A9:5C:F5:73:A8:E5:DB
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0519
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EEDC244ED23F11EFB57E0981762E951A.roa
Signing time: Tue 14 Jan 2025 06:22:30 +0000
ROA not before: Tue 14 Jan 2025 06:22:27 +0000
ROA not after: Wed 14 Jan 2026 06:22:27 +0000
asID: 43260
IP address blocks: 102.135.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 09:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1305 (0x519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 14 06:22:27 2025 GMT
Not After : Jan 14 06:22:27 2026 GMT
Subject: CN=678602a6-762b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:1f:14:c7:fb:81:fe:3d:3e:4e:9a:be:00:
40:e8:c0:2e:04:02:38:c4:2c:6c:2f:1a:ef:db:aa:
e5:d5:12:aa:5f:bf:26:26:ea:1b:1a:73:42:67:b9:
50:cd:cf:71:c9:1b:9d:47:25:50:68:11:6b:11:1f:
16:d4:4d:37:74:7c:b1:03:ff:75:ca:9a:54:56:26:
8c:da:e3:33:e8:de:7c:24:de:62:85:57:a4:1b:66:
9a:b6:04:d6:f2:96:b1:5a:f0:04:13:09:13:c2:3b:
71:38:24:ff:df:ad:d9:e6:2d:23:0d:b4:f7:fa:7d:
5d:9a:7f:32:1a:06:6a:be:84:17:05:e3:b3:b6:48:
36:ff:a8:23:1c:52:43:4a:3a:c8:4d:13:c0:52:5d:
dd:2c:ff:0d:4a:e3:07:73:e2:95:37:23:5a:f7:52:
39:c7:6a:4c:d0:9a:3e:16:a8:02:09:f4:bc:50:09:
49:8b:67:c6:08:19:b0:a8:85:03:c3:68:84:eb:6d:
b0:21:0e:42:36:6d:b3:a5:85:27:6a:be:ad:5a:97:
8f:b5:7b:a2:54:8f:dd:da:ef:2f:63:10:ff:85:af:
93:e1:dd:d6:ed:9d:be:64:b5:d6:5c:0c:ec:21:31:
07:c4:08:e0:56:c2:70:31:27:40:2b:a5:42:80:73:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:78:E3:BE:DB:06:8B:76:1E:D3:70:AF:AF:A9:5C:F5:73:A8:E5:DB
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EEDC244ED23F11EFB57E0981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:76:bf:24:47:b9:76:20:4d:12:e9:b8:c5:5f:e3:4e:56:90:
f5:78:19:4e:6b:94:79:7c:73:87:b1:51:6b:f2:b0:99:c2:60:
ff:7a:d1:73:e1:05:12:5f:e5:39:4d:99:65:f8:90:75:55:e4:
54:0a:b3:7b:12:54:ac:78:7e:36:a1:d3:d3:e0:4a:de:12:db:
5f:60:1d:2a:95:2a:9a:e0:ed:99:0a:a6:d7:47:15:50:bb:6f:
0a:06:4c:3f:b2:e6:f1:f0:a3:ad:a9:57:e3:86:fb:28:76:80:
98:ee:ec:dd:cc:d2:7f:af:52:df:62:65:98:d9:3c:4b:a5:1a:
16:6a:9c:60:db:d6:bc:fe:1d:9d:c3:46:37:88:b2:9a:98:14:
e8:4e:d9:06:7b:93:3b:19:56:c1:89:b6:7a:5f:cc:f0:0a:74:
02:e1:1b:84:e0:f1:36:d2:46:1c:25:0c:4c:87:67:50:1e:6c:
18:85:66:24:8e:c7:b1:d4:88:00:5b:5c:18:db:20:33:58:5d:
b2:4f:98:da:cb:11:a7:28:37:69:ea:ef:74:4c:bb:7b:2f:3e:
82:d7:87:43:79:ba:b9:13:db:39:76:07:29:4c:18:2b:22:5e:
0a:92:9d:f6:72:f5:70:aa:aa:e3:d6:68:1d:b5:b1:70:a0:84:
6e:71:d0:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAxMTQwNjIyMjdaFw0yNjAxMTQwNjIyMjdaMBgxFjAU
BgNVBAMTDTY3ODYwMmE2LTc2MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyCx8Ux/uB/j0+Tpq+AEDowC4EAjjELGwvGu/bquXVEqpfvyYm6hsac0Jn
uVDNz3HJG51HJVBoEWsRHxbUTTd0fLED/3XKmlRWJoza4zPo3nwk3mKFV6QbZpq2
BNbylrFa8AQTCRPCO3E4JP/frdnmLSMNtPf6fV2afzIaBmq+hBcF47O2SDb/qCMc
UkNKOshNE8BSXd0s/w1K4wdz4pU3I1r3UjnHakzQmj4WqAIJ9LxQCUmLZ8YIGbCo
hQPDaITrbbAhDkI2bbOlhSdqvq1al4+1e6JUj93a7y9jEP+Fr5Ph3dbtnb5ktdZc
DOwhMQfECOBWwnAxJ0ArpUKAc311AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUE3jj
vtsGi3Ye03Cvr6lc9XOo5dswHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0VFREMyNDRFRDIzRjExRUZCNTdFMDk4MTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwkwDQYJKoZIhvcNAQEL
BQADggEBABx2vyRHuXYgTRLpuMVf405WkPV4GU5rlHl8c4exUWvysJnCYP960XPh
BRJf5TlNmWX4kHVV5FQKs3sSVKx4fjah09PgSt4S219gHSqVKprg7ZkKptdHFVC7
bwoGTD+y5vHwo62pV+OG+yh2gJju7N3M0n+vUt9iZZjZPEulGhZqnGDb1rz+HZ3D
RjeIspqYFOhO2QZ7kzsZVsGJtnpfzPAKdALhG4Tg8TbSRhwlDEyHZ1AebBiFZiSO
x7HUiABbXBjbIDNYXbJPmNrLEacoN2nq73RMu3svPoLXh0N5urkT2zl2BylMGCsi
XgqSnfZy9XCqquPWaB21sXCghG5x0NM=
-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:52 2025 by rpki-client