Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F59DA274258911F0BFB9D2A1DAE4EC9C.roa
File: F59DA274258911F0BFB9D2A1DAE4EC9C.roa (raw, json)
Hash identifier: iLocEQF2PIVuUMvs73B3Y6ghGSxNlaytEBvQejZI40E=
Subject key identifier: 03:64:4A:FA:D3:83:77:9A:2A:3E:B7:36:E4:F4:42:E0:1E:9F:DD:4B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0981
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F59DA274258911F0BFB9D2A1DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 06:11:31 +0000
ROA not before: Wed 30 Apr 2025 06:11:26 +0000
ROA not after: Tue 10 Feb 2026 06:11:26 +0000
asID: 208485
IP address blocks: 102.135.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 06:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2433 (0x981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 30 06:11:26 2025 GMT
Not After : Feb 10 06:11:26 2026 GMT
Subject: CN=6811bf13-ef79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:f9:60:b5:48:35:8c:92:d8:7e:65:e2:74:
b8:1e:43:96:96:dc:11:ea:0d:50:34:db:9f:07:f0:
76:2f:46:2f:84:19:d8:dc:61:53:e2:b6:33:e3:df:
6a:fb:17:4d:d0:71:4d:1d:d5:26:89:77:f5:5d:84:
e2:6b:a8:71:99:4f:1f:f0:7d:90:6d:db:87:59:34:
cd:cc:3a:0b:81:4d:be:51:9a:11:c9:bc:6e:7b:48:
69:4b:9c:56:76:a1:a4:d2:77:67:c2:52:90:db:12:
7f:ee:66:52:c7:49:de:10:60:fe:f5:e0:71:9f:d1:
09:d7:6a:c3:d0:5d:ad:ea:fb:76:8f:0d:5f:bf:ef:
6e:98:cd:e9:2d:be:89:c6:17:9f:42:a2:66:3f:2c:
aa:00:c6:5d:bf:d0:ee:0e:40:45:6e:39:c2:2e:e6:
4d:8f:ba:4d:38:bb:ad:81:06:68:02:9e:c4:b6:7d:
2f:46:08:fb:47:d2:7f:81:5c:60:23:ae:57:94:68:
f5:66:ac:68:67:75:07:3c:fc:79:af:23:ac:d2:e5:
5a:22:d5:fe:8f:6e:02:f1:04:65:55:23:9d:a3:0f:
1c:e2:c3:b3:82:87:3f:8d:d4:fd:6c:63:54:ce:cc:
24:60:5f:26:7f:99:5d:eb:51:bc:de:9d:05:c0:20:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:64:4A:FA:D3:83:77:9A:2A:3E:B7:36:E4:F4:42:E0:1E:9F:DD:4B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F59DA274258911F0BFB9D2A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:29:6a:04:f7:aa:d9:98:66:a5:17:cd:8f:b9:2a:c1:4b:ef:
2d:5e:23:ec:8a:f4:99:52:88:64:a3:d3:67:f4:ea:a4:c8:54:
d6:8f:7f:f7:81:0a:8d:e4:0a:73:17:9d:cb:75:78:9d:14:45:
3b:eb:a2:9d:e0:1d:cd:84:e6:cd:d7:b5:0d:54:2e:a0:82:af:
6c:46:49:6e:a8:31:ae:0e:cd:88:bc:14:d2:82:89:1e:09:2e:
18:c2:cc:2f:65:b8:b2:ed:91:a7:bb:f9:04:ff:7a:39:54:40:
de:5d:b8:91:fd:e2:00:4f:2d:8e:61:07:de:bd:b9:46:00:23:
29:0b:48:13:6e:6f:56:03:8e:1c:10:44:a6:a3:21:50:9d:26:
48:04:40:39:34:a1:26:9e:b4:ad:d2:65:ec:69:40:5a:7f:dc:
60:4d:77:10:ce:5f:1a:98:bd:6f:2b:dd:46:d8:7f:bd:e2:f0:
fb:dc:13:9a:98:80:88:70:69:f4:57:a2:e9:b7:5c:45:e2:e0:
e0:53:ce:22:61:d2:d6:d0:25:47:8e:81:0a:37:8a:75:7b:84:
78:81:34:52:11:1d:a8:ec:01:c9:b0:e8:64:a7:40:36:76:35:
93:5e:45:6d:97:18:20:7e:60:d3:10:0d:9c:1d:2e:77:99:74:
d2:3f:12:1d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA0MzAwNjExMjZaFw0yNjAyMTAwNjExMjZaMBgxFjAU
BgNVBAMTDTY4MTFiZjEzLWVmNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYzPlgtUg1jJLYfmXidLgeQ5aW3BHqDVA0258H8HYvRi+EGdjcYVPitjPj
32r7F03QcU0d1SaJd/VdhOJrqHGZTx/wfZBt24dZNM3MOguBTb5RmhHJvG57SGlL
nFZ2oaTSd2fCUpDbEn/uZlLHSd4QYP714HGf0QnXasPQXa3q+3aPDV+/726Yzekt
vonGF59ComY/LKoAxl2/0O4OQEVuOcIu5k2Puk04u62BBmgCnsS2fS9GCPtH0n+B
XGAjrleUaPVmrGhndQc8/HmvI6zS5Voi1f6PbgLxBGVVI52jDxziw7OChz+N1P1s
Y1TOzCRgXyZ/mV3rUbzenQXAILe5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUA2RK
+tODd5oqPrc25PRC4B6f3UswHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0Y1OURBMjc0MjU4OTExRjBCRkI5RDJBMURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhyEwDQYJKoZIhvcNAQEL
BQADggEBAKYpagT3qtmYZqUXzY+5KsFL7y1eI+yK9JlSiGSj02f06qTIVNaPf/eB
Co3kCnMXnct1eJ0URTvrop3gHc2E5s3XtQ1ULqCCr2xGSW6oMa4OzYi8FNKCiR4J
LhjCzC9luLLtkae7+QT/ejlUQN5duJH94gBPLY5hB969uUYAIykLSBNub1YDjhwQ
RKajIVCdJkgEQDk0oSaetK3SZexpQFp/3GBNdxDOXxqYvW8r3UbYf73i8PvcE5qY
gIhwafRXoum3XEXi4OBTziJh0tbQJUeOgQo3inV7hHiBNFIRHajsAcmw6GSnQDZ2
NZNeRW2XGCB+YNMQDZwdLneZdNI/Eh0=
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:06:31 2025 by rpki-client