Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/7FD2529ED44311EEBC692254775412E6.roa
File: 7FD2529ED44311EEBC692254775412E6.roa (raw, json)
Hash identifier: l5r89eElRkevVp59XS3tOB4vN6ybp6Eo9Hr24aOeh6s=
Subject key identifier: 13:DA:71:AD:27:5B:5A:B4:96:F9:8C:7C:5D:87:AD:01:7E:1C:5D:8F
Certificate issuer: /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial: 10
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/7FD2529ED44311EEBC692254775412E6.roa
Signing time: Mon 26 Feb 2024 01:08:07 +0000
ROA not before: Mon 26 Feb 2024 01:08:04 +0000
ROA not after: Thu 26 Feb 2026 01:08:04 +0000
asID: 8346
IP address blocks: 102.214.128.0/22 maxlen: 22
102.216.216.0/22 maxlen: 22
2c0f:2240::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Feb 2024 01:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Validity
Not Before: Feb 26 01:08:04 2024 GMT
Not After : Feb 26 01:08:04 2026 GMT
Subject: CN=65dbe477-34d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:6f:e6:79:cb:91:19:99:57:f7:42:78:7f:
ef:d4:44:a8:c0:f2:22:7f:b1:a3:da:60:79:4b:46:
45:11:2e:a5:ff:ed:cb:53:0e:10:73:7c:06:48:8d:
23:2a:12:e3:34:c8:9d:64:43:ba:cd:b8:91:3e:57:
a8:30:e6:0d:9d:65:55:d0:c3:bb:57:b2:c0:da:54:
f3:6d:6e:09:da:95:cf:36:b7:b3:30:e3:6b:e6:a6:
07:af:2d:0c:4b:e5:12:0f:d0:77:18:ee:7b:7b:5b:
e0:c4:19:0a:e5:37:f1:c2:13:9a:5e:24:4c:28:a8:
8b:c9:1f:99:de:48:0c:85:03:35:34:d5:e2:a6:fe:
d1:79:69:14:8f:94:35:81:0c:5f:2d:ad:d2:6d:2a:
bf:f5:1e:6f:a3:a7:e1:9e:2c:2d:c3:d5:45:54:2e:
27:ea:f5:08:ff:53:de:a4:5e:2d:d2:79:f4:71:e5:
54:74:de:c5:d3:dc:50:0d:bb:a5:b4:91:91:79:eb:
56:64:c7:47:32:01:13:c3:33:54:8c:d5:52:74:94:
3c:d3:02:ac:53:70:63:08:09:8a:c4:3b:e8:ed:4b:
ae:5e:94:02:8b:16:ed:30:38:74:05:29:fc:3b:7c:
f3:7d:18:7d:42:00:65:4f:e9:51:f0:55:53:d5:63:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DA:71:AD:27:5B:5A:B4:96:F9:8C:7C:5D:87:AD:01:7E:1C:5D:8F
X509v3 Authority Key Identifier:
keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/7FD2529ED44311EEBC692254775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.128.0/22
102.216.216.0/22
IPv6:
2c0f:2240::/32
Signature Algorithm: sha256WithRSAEncryption
70:1a:21:b2:67:39:4f:78:47:07:a1:7b:7e:9f:db:0e:f4:98:
f6:50:0a:3d:f9:12:a6:3a:19:38:04:e5:f9:b1:64:e5:4b:e6:
2f:51:bc:a5:ab:6f:7e:db:67:55:8d:39:61:f4:29:46:db:0d:
f3:be:0d:1b:49:40:e3:9a:d6:fe:e6:3e:fe:1a:e9:b7:41:09:
28:9b:3d:0c:15:64:f9:09:bd:3f:2d:c7:b2:61:f2:1a:23:8a:
bd:9d:35:f6:16:ae:f3:d3:41:fe:e3:c1:aa:c2:33:07:65:6c:
63:03:8d:b0:11:c0:51:25:f5:9c:39:3b:60:51:e7:2c:51:0e:
dd:c9:72:99:48:88:32:88:09:a9:99:25:44:c1:4e:31:2b:60:
81:70:8a:bd:a2:34:39:eb:78:b0:77:65:23:e1:e9:b4:7e:68:
f8:4c:59:d0:ac:c2:49:e2:a5:c3:5e:46:28:1d:a3:64:31:db:
70:6b:d4:23:52:49:72:5e:7a:cc:a9:46:87:4c:fa:e6:e9:13:
21:de:52:ea:5f:d0:9f:8e:50:c4:8f:25:cd:94:f8:1b:49:3a:
ae:a0:d7:38:4e:da:95:da:4d:99:6c:96:af:d2:25:e1:1c:9a:
c2:de:10:a0:21:10:b0:b6:2f:d2:ef:bc:14:3a:58:58:05:b3:
ea:21:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:46:07 2025 by rpki-client