Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F5473CDC41DA11F0A4A62492DAE4EC9C.roa
File: F5473CDC41DA11F0A4A62492DAE4EC9C.roa (raw, json)
Hash identifier: VbiVLwnkLJ6LeCSekVRjJTr9kQosFMV9Lpf4XbQe0kg=
Subject key identifier: 96:7D:D5:18:23:58:CE:BE:C8:FB:7A:F3:2D:EA:60:20:46:89:A9:F5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B11
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F5473CDC41DA11F0A4A62492DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 07:01:53 +0000
ROA not before: Thu 05 Jun 2025 07:01:48 +0000
ROA not after: Fri 05 Jun 2026 07:01:48 +0000
asID: 9009
IP address blocks: 102.135.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 10:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2833 (0xb11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 5 07:01:48 2025 GMT
Not After : Jun 5 07:01:48 2026 GMT
Subject: CN=684140e0-066a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:8f:d3:27:a8:6c:be:60:bd:b0:9d:6a:6d:
2a:db:3d:b6:4c:16:57:c3:e6:41:6f:bf:ac:9a:5f:
7f:ec:3a:25:e6:ab:3d:12:ea:59:82:70:e4:6e:12:
59:82:40:df:b1:e7:ed:45:fe:1f:07:87:67:56:b0:
23:e5:e6:81:94:0e:8e:45:90:53:30:4f:d2:b6:f4:
e8:76:e9:19:b4:88:59:b0:62:9b:88:54:bc:b5:35:
60:69:11:1c:e9:f3:30:4a:00:0e:3f:d8:78:27:c2:
df:4f:82:35:28:a5:5f:08:ef:56:81:68:19:27:ab:
0a:60:ec:c0:7f:b9:1a:4d:09:5b:3b:df:18:ba:d7:
00:75:d8:7a:a0:be:a8:df:0e:10:35:e5:47:c1:3e:
53:63:f9:81:20:b2:83:4c:d8:71:9c:95:a0:8e:88:
f1:3f:c2:0a:a2:65:37:94:aa:02:78:66:8e:0c:0c:
78:5f:88:30:69:6f:8e:fc:28:88:11:60:9e:c8:64:
43:49:1f:5e:77:8d:23:e2:cd:e3:41:5e:b2:bb:2e:
0a:83:44:e0:a0:ee:64:51:99:66:8c:9d:ae:95:67:
31:b4:67:b9:43:b4:15:25:09:4b:f9:59:8d:75:55:
e6:95:32:29:d5:3b:9b:71:e5:01:72:b7:a0:e6:31:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:D5:18:23:58:CE:BE:C8:FB:7A:F3:2D:EA:60:20:46:89:A9:F5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F5473CDC41DA11F0A4A62492DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.32.0/24
Signature Algorithm: sha256WithRSAEncryption
33:05:71:3e:b9:a8:f5:a1:bd:b0:4e:05:4a:a2:c6:a7:8e:5a:
83:bb:1d:5e:10:49:fb:9a:91:44:e7:a6:4e:6b:51:60:18:2c:
0b:9b:a4:02:be:74:48:ee:eb:0e:47:da:6d:6c:9c:26:e9:cd:
4f:eb:74:72:ad:f1:bf:76:7d:98:cd:3a:84:e8:d6:72:38:d9:
92:f2:83:e2:ad:41:fe:50:8a:7f:38:01:93:ce:bb:3a:62:ae:
dd:f5:d3:fd:2e:63:36:c5:ca:3c:0c:e9:a9:27:35:36:6b:5c:
f5:c5:60:13:ef:55:b8:4f:85:db:fc:dc:48:2e:44:5f:56:72:
6f:81:56:b2:36:f6:37:09:12:1f:9a:fb:05:9d:1d:b5:30:b6:
e6:5f:a9:a7:2e:2f:2f:e5:be:f3:df:4a:cb:ad:42:1d:a4:a0:
50:d1:ff:d6:aa:27:f4:02:59:b2:fb:72:9e:c6:8e:e9:b9:78:
71:02:fc:48:d6:ac:09:25:ff:d0:e9:f2:89:4e:8f:e7:1c:27:
92:2f:67:30:60:26:c0:7d:ce:ed:eb:b9:c2:0c:92:b9:1b:c3:
03:7c:3d:14:b5:5a:cf:6d:e4:36:6e:ab:d5:ac:ab:0a:d2:88:
5d:87:23:cb:0b:d9:65:58:3a:30:f6:79:e4:55:1f:76:e4:ae:
1b:3f:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:58:51 2025 by rpki-client