Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/9EE40D8E4E1911F0B1D34FC6DAE4EC9C.roa
File: 9EE40D8E4E1911F0B1D34FC6DAE4EC9C.roa (raw, json)
Hash identifier: jDjHbWMxnhRXeLaowfD23kDG/55sDAVTRM0IsfsP1Kg=
Subject key identifier: CC:E3:DC:3F:3D:B5:A5:D4:CA:55:75:EF:16:9C:FB:BD:08:84:11:02
Certificate issuer: /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial: 039C
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/9EE40D8E4E1911F0B1D34FC6DAE4EC9C.roa
Signing time: Fri 20 Jun 2025 21:00:39 +0000
ROA not before: Fri 20 Jun 2025 21:00:35 +0000
ROA not after: Wed 25 Mar 2026 21:00:35 +0000
asID: 329027
IP address blocks: 102.213.44.0/22 maxlen: 24
102.223.156.0/22 maxlen: 24
2c0f:9c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Jun 2025 22:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924 (0x39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644FF0AF, serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Validity
Not Before: Jun 20 21:00:35 2025 GMT
Not After : Mar 25 21:00:35 2026 GMT
Subject: CN=6855cbf7-0b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:35:2c:6a:4c:c6:65:43:4c:18:ad:6a:4c:
88:93:fd:1d:1a:74:0c:19:97:30:a2:13:6a:2a:7b:
ee:5d:12:88:fb:c0:c0:18:7d:4b:f0:d6:a8:1b:9b:
7b:84:e5:99:41:af:75:86:8b:b6:22:a6:ab:d7:44:
b9:76:71:a1:a6:71:ae:e0:19:b8:22:e2:0e:89:c5:
14:f0:51:e2:4c:7e:db:33:8a:c2:ee:27:4d:7b:38:
6e:12:93:86:67:03:b5:a7:13:44:2d:01:7e:f0:16:
53:20:78:d8:f8:b7:f4:21:fb:4c:0c:d3:8d:d9:ee:
37:df:26:f9:fe:a7:2f:46:c7:2d:71:42:ea:0c:5e:
74:13:df:3d:a0:ef:86:b5:b0:85:42:2a:60:1e:e0:
40:84:d4:b4:07:bf:df:be:f8:e4:1e:f8:84:bb:dd:
9f:9b:ca:d8:b1:9b:82:76:7a:5b:d2:b5:80:82:5f:
db:f8:4e:85:22:fd:98:8d:ab:3f:21:f5:a9:4b:0b:
d9:f4:03:f0:57:9e:50:c9:9e:df:5c:22:3b:1f:32:
49:04:aa:20:a8:42:b7:70:21:75:29:49:61:01:d3:
08:66:35:31:8c:52:87:cf:50:10:89:02:71:b3:7e:
ff:8f:04:aa:0f:33:f2:7a:9a:8d:46:43:86:a5:bf:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E3:DC:3F:3D:B5:A5:D4:CA:55:75:EF:16:9C:FB:BD:08:84:11:02
X509v3 Authority Key Identifier:
keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/9EE40D8E4E1911F0B1D34FC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.44.0/22
102.223.156.0/22
IPv6:
2c0f:9c0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:0b:dc:70:73:66:6e:2f:c4:10:63:79:c6:1d:15:42:b2:e1:
f0:2b:71:f9:b9:6d:37:7a:9d:44:51:7a:b9:b4:15:e3:78:8d:
6b:30:8e:bc:5b:c3:0a:c2:3f:8a:27:ab:ff:1c:2b:e5:da:11:
3d:f0:23:ad:3b:34:5f:b8:19:ea:73:e5:ce:43:07:8a:bb:18:
b1:66:61:78:b0:50:1d:1c:4f:72:40:92:8e:a5:0e:09:c0:02:
9f:e6:ce:d9:ca:48:b5:d2:3a:c6:6d:2b:ad:dc:f1:c2:85:d6:
cb:36:19:f5:c6:1e:0f:92:e6:10:f4:b9:55:ea:25:85:be:ae:
72:5b:7f:1c:cd:28:bb:18:59:a0:e7:86:46:1e:ad:a6:cb:89:
45:92:01:d7:8d:64:93:8b:d4:36:40:8f:12:4d:da:72:28:34:
0d:e5:91:ec:f6:2d:d9:b4:71:75:ea:72:0b:d7:01:ba:f3:c8:
64:2d:79:3e:78:7d:61:a5:08:62:be:8d:04:9b:d6:3e:6f:bb:
20:72:7e:88:97:6e:cc:49:eb:28:41:d0:e9:c7:44:65:a7:71:
3c:cf:41:2a:9d:95:60:64:b5:e4:86:c5:74:90:b0:d7:bd:52:
0c:c9:ff:5e:e9:15:0e:1a:0b:f6:a4:3e:2d:d1:b8:90:48:6e:
c1:ee:ab:e2
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDRGRjBBRjExMC8GA1UEBRMoRTg5RUZFMzUxRTYwMjUyQTI2MjU2RDhERUU4RjY5
RTc3MjRDQUQ1QTAeFw0yNTA2MjAyMTAwMzVaFw0yNjAzMjUyMTAwMzVaMBgxFjAU
BgNVBAMTDTY4NTVjYmY3LTBiOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxwzUsakzGZUNMGK1qTIiT/R0adAwZlzCiE2oqe+5dEoj7wMAYfUvw1qgb
m3uE5ZlBr3WGi7YipqvXRLl2caGmca7gGbgi4g6JxRTwUeJMftszisLuJ017OG4S
k4ZnA7WnE0QtAX7wFlMgeNj4t/Qh+0wM043Z7jffJvn+py9Gxy1xQuoMXnQT3z2g
74a1sIVCKmAe4ECE1LQHv9+++OQe+IS73Z+bytixm4J2elvStYCCX9v4ToUi/ZiN
qz8h9alLC9n0A/BXnlDJnt9cIjsfMkkEqiCoQrdwIXUpSWEB0whmNTGMUofPUBCJ
AnGzfv+PBKoPM/J6mo1GQ4alv/vbAgMBAAGjggK6MIICtjAdBgNVHQ4EFgQUzOPc
Pz21pdTKVXXvFpz7vQiEEQIwHwYDVR0jBBgwFoAU6J7+NR5gJSomJW2N7o9p53JM
rVowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0RkYwLzc0NUY2MjQwOUI0NTExRUQ5M0M5NTBBRUYxMjIyNDY4LzZKNy1O
UjVnSlNvbUpXMk43bzlwNTNKTXJWby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzZKNy1OUjVnSlNvbUpXMk43bzlwNTNKTXJWby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ0RkYwLzc0NUY2MjQwOUI0NTExRUQ5M0M5NTBBRUYx
MjIyNDY4LzlFRTQwRDhFNEUxOTExRjBCMUQzNEZDNkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm1SwDBAJm35wwDQQCAAIw
BwMFACwPCcAwDQYJKoZIhvcNAQELBQADggEBAKUL3HBzZm4vxBBjecYdFUKy4fAr
cfm5bTd6nURRerm0FeN4jWswjrxbwwrCP4onq/8cK+XaET3wI607NF+4Gepz5c5D
B4q7GLFmYXiwUB0cT3JAko6lDgnAAp/mztnKSLXSOsZtK63c8cKF1ss2GfXGHg+S
5hD0uVXqJYW+rnJbfxzNKLsYWaDnhkYerabLiUWSAdeNZJOL1DZAjxJN2nIoNA3l
kez2Ldm0cXXqcgvXAbrzyGQteT54fWGlCGK+jQSb1j5vuyByfoiXbsxJ6yhB0OnH
RGWncTzPQSqdlWBkteSGxXSQsNe9UgzJ/17pFQ4aC/akPi3RuJBIbsHuq+I=
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:01:29 2025 by rpki-client