Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F370B664E47811EFAB4B3664762E951A.roa
File: F370B664E47811EFAB4B3664762E951A.roa (raw, json)
Hash identifier: 5a0aFc6ukhmaGnCyyjuZim0qzvjEKlV6yhuKpqZkWwg=
Subject key identifier: 65:A5:1A:A9:AA:67:41:7D:77:85:46:75:87:10:E6:47:C6:FE:B9:1E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05AF
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F370B664E47811EFAB4B3664762E951A.roa
Signing time: Thu 06 Feb 2025 10:56:00 +0000
ROA not before: Thu 06 Feb 2025 10:55:57 +0000
ROA not after: Fri 06 Feb 2026 10:55:57 +0000
asID: 149208
IP address blocks: 102.135.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 09:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1455 (0x5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 6 10:55:57 2025 GMT
Not After : Feb 6 10:55:57 2026 GMT
Subject: CN=67a49540-e54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:51:84:aa:1c:93:16:70:0b:a1:dc:46:be:
ec:d5:8e:56:c6:30:ca:b1:31:bc:6b:c6:d8:46:3e:
10:6e:e7:5a:1a:39:15:86:f9:ee:eb:84:8b:e1:2e:
b9:31:ec:3a:f0:89:ab:d4:b8:ab:84:d6:6c:1f:6d:
5c:85:18:68:a9:0f:ce:fe:b0:9c:a1:40:7f:df:3e:
7c:78:5b:58:a3:14:25:52:9b:f8:b3:ec:02:aa:c6:
66:02:d2:0b:d4:81:e3:d3:4f:f2:32:42:1a:ed:27:
60:ab:7e:62:b6:dc:25:eb:50:54:a9:07:ef:39:e8:
b3:59:46:21:ae:c3:57:72:fe:fe:ef:e6:b5:cd:5d:
6c:b4:73:18:5e:3b:28:2f:2c:52:b1:4e:ca:79:45:
94:2c:d6:62:5c:b4:79:40:44:a3:fd:93:ac:eb:5b:
ac:c8:05:5f:67:b5:1b:43:e8:2c:a0:8b:7a:cd:e6:
34:7e:ce:72:b8:cd:fd:4f:86:7b:9c:8f:f1:45:3f:
31:e6:fa:75:6f:d8:95:b9:fc:d6:82:5f:6b:07:8f:
9a:db:71:6f:76:d3:d8:b9:8d:5d:7c:57:20:7f:5e:
9f:62:26:56:d2:39:2b:db:15:c0:c4:56:fa:80:4a:
41:e5:78:d2:50:31:40:39:f7:b9:ea:46:bc:5b:de:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:1A:A9:AA:67:41:7D:77:85:46:75:87:10:E6:47:C6:FE:B9:1E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F370B664E47811EFAB4B3664762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.115.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8b:2f:56:de:d4:dd:a7:00:ea:ec:29:af:86:28:32:10:d4:
a5:1d:7a:86:67:cd:6a:3e:15:36:23:af:a1:8f:17:aa:7e:e7:
0d:ba:2f:13:cc:2b:b7:e4:6b:e1:63:87:1e:7b:7f:7c:6d:8f:
58:f5:6d:1a:94:f1:ec:06:58:28:04:4b:6a:c4:02:6d:03:06:
d3:49:db:97:3b:d6:f1:b0:b6:6f:56:be:ef:df:82:c5:dd:25:
4e:10:f4:75:3e:04:10:02:ad:90:54:42:4b:95:a8:7c:4f:7d:
e2:6e:fa:1b:11:12:43:41:8c:19:9c:6d:d3:3d:2f:8a:40:43:
a8:97:2a:6a:0e:9b:12:b4:b7:63:7f:9a:1c:96:7f:46:6e:6d:
57:1e:2d:08:43:a4:64:1d:b8:65:d8:0c:cb:4b:a6:e4:12:2b:
5f:ae:eb:99:2c:ce:94:e1:3c:29:9e:7c:39:0c:94:64:de:35:
01:09:12:d2:31:57:80:18:68:a0:56:9a:e0:43:a1:21:16:64:
79:9a:e0:67:cf:1f:e9:bc:43:e7:84:5e:e1:a7:14:bb:e0:8d:
ba:7e:7f:db:6c:7a:ba:98:42:9c:98:b7:0d:40:bb:6b:a9:29:
7b:b5:fd:3d:fe:55:3f:57:d0:52:c5:d7:b1:11:07:1f:0e:f3:
88:6e:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:08 2025 by rpki-client