Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/D3248B0C4E2B11F0BB3996BADAE4EC9C.roa
File: D3248B0C4E2B11F0BB3996BADAE4EC9C.roa (raw, json)
Hash identifier: cGxlCf86CPhqG+1+NhbJ63VtKKE/ziGHk4NRHkv5AQQ=
Subject key identifier: F1:81:92:A2:66:80:B6:4B:AC:10:DB:B2:96:3E:61:82:A6:65:C3:FE
Certificate issuer: /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial: 03A5
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/D3248B0C4E2B11F0BB3996BADAE4EC9C.roa
Signing time: Fri 20 Jun 2025 23:10:58 +0000
ROA not before: Sat 21 Jun 2025 23:10:54 +0000
ROA not after: Sun 21 Jun 2026 23:10:54 +0000
asID: 37284
IP address blocks: 102.223.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jun 2025 12:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933 (0x3a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644FF0AF, serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Validity
Not Before: Jun 21 23:10:54 2025 GMT
Not After : Jun 21 23:10:54 2026 GMT
Subject: CN=6855ea82-6ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:23:4b:42:38:ea:f7:cd:54:d8:2c:76:f2:
d4:67:b1:f4:c7:09:fa:a8:65:f8:82:3b:fd:f0:e4:
a8:ac:ce:60:4c:4b:73:ac:44:c7:d1:3f:28:0f:d2:
93:16:33:12:11:93:34:f0:59:c0:2b:a5:5c:58:61:
87:07:21:25:75:4e:61:07:f0:ed:63:ce:1a:dc:b9:
bd:3e:33:5b:a7:94:5f:82:ed:91:3e:58:a2:1a:b8:
3c:0a:fa:48:98:9e:66:a4:f0:61:21:d4:57:65:19:
04:d0:9b:bf:94:d6:b7:3b:3c:67:27:61:1d:ef:11:
0f:45:b9:bc:f3:3c:f4:83:9a:c2:e6:70:14:5d:20:
aa:f8:f1:ff:61:9d:fe:49:f1:99:16:83:62:49:46:
8d:c1:fd:dc:3f:bc:88:9d:a6:51:5e:33:a9:2e:ac:
5c:bd:70:c7:50:9d:6c:ed:10:61:4f:a2:eb:35:5c:
3c:8f:95:bd:e4:03:19:b2:49:6f:c4:99:0d:80:99:
f0:2b:0d:8f:42:ae:45:3d:19:ea:b7:39:f1:df:1f:
84:5d:87:b0:18:1c:8c:5d:b9:5a:46:9a:19:12:d8:
47:51:5f:29:de:a2:90:ac:03:9f:3d:ec:3c:de:4c:
50:cd:fb:28:9e:15:c8:ca:d7:9e:cf:f8:88:78:fe:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:81:92:A2:66:80:B6:4B:AC:10:DB:B2:96:3E:61:82:A6:65:C3:FE
X509v3 Authority Key Identifier:
keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/D3248B0C4E2B11F0BB3996BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:65:d6:1f:e2:2f:55:c2:51:00:d7:0d:95:88:49:06:df:4d:
8c:2b:66:35:85:5f:17:8e:d4:ce:02:ed:c6:21:49:38:7a:39:
f1:28:3e:2a:1c:09:85:06:66:41:f7:c1:9f:19:02:22:e3:cd:
48:c7:11:2f:bd:85:ec:a1:9e:24:9b:9e:bf:e1:b4:fd:8f:0d:
2a:29:81:cd:0c:83:47:b2:81:b5:f3:0c:54:6b:88:c6:be:78:
88:eb:c8:98:b2:24:c4:ac:df:62:66:1c:42:bc:ee:4b:14:15:
b6:b4:06:6c:d6:ff:1e:19:8e:58:12:79:cc:89:c8:f7:8e:9c:
75:51:41:11:fc:8f:7e:57:c1:89:95:89:d5:4b:23:7f:4e:0f:
c9:1d:84:c3:a2:54:a9:4e:02:b2:13:ae:02:15:04:d6:92:10:
6a:b2:2f:2f:3a:3b:fc:27:7b:91:c2:14:9b:87:ce:c2:1e:84:
f2:d3:39:05:8c:90:90:15:0c:9a:eb:b9:39:9f:1b:07:f7:2a:
64:db:12:5d:7a:e1:0e:3a:d7:ad:bb:1c:61:c7:69:5d:32:4a:
c5:72:59:d8:67:3d:bb:f9:a7:4d:94:d7:d9:14:68:ba:2c:98:
cf:ab:b4:63:1d:49:13:97:82:4a:b8:07:e2:ad:b9:8d:4a:81:
a9:18:4d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:34 2025 by rpki-client