Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/8026E31AEEB211EF8F3C27A0762E951A.roa
File: 8026E31AEEB211EF8F3C27A0762E951A.roa (raw, json)
Hash identifier: SfP3hpMXyRV6eThuf9nTAflF8aTaJ+gYhgX1cVKeYoI=
Subject key identifier: 4E:36:2E:76:A5:BD:20:5D:08:42:1F:9C:EE:C1:A8:44:97:69:B5:F6
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 0691
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/8026E31AEEB211EF8F3C27A0762E951A.roa
Signing time: Wed 19 Feb 2025 11:13:09 +0000
ROA not before: Wed 19 Feb 2025 11:13:06 +0000
ROA not after: Thu 19 Feb 2026 11:13:06 +0000
asID: 213481
IP address blocks: 102.207.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 17:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF
Validity
Not Before: Feb 19 11:13:06 2025 GMT
Not After : Feb 19 11:13:06 2026 GMT
Subject: CN=67b5bcc5-6d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:6f:d8:85:7d:ba:46:33:e4:6d:df:4b:7b:
b8:e4:3c:d7:fb:ea:3f:07:2d:df:5b:76:4e:14:2f:
7e:4c:8b:67:30:1e:db:0d:bb:94:86:08:f1:3b:42:
49:0a:c9:c3:e3:6d:c0:53:84:01:2c:da:ab:aa:d8:
9d:6e:8b:3b:07:23:d2:78:26:eb:50:93:33:52:f3:
ca:ed:05:f0:c8:0c:ac:52:d4:5f:21:55:ba:68:0b:
8c:3c:d8:0b:d0:bd:f7:2c:ba:17:cc:d8:fa:84:5d:
3e:ba:40:57:f5:8c:44:06:f7:ea:54:38:34:d7:7c:
ab:02:74:cc:24:bb:94:67:30:98:53:be:30:f0:25:
fb:9a:6c:c0:e4:74:53:bb:5c:b5:f3:b4:34:9f:b8:
b4:60:38:62:e6:fe:97:29:09:ec:6d:d4:69:22:d9:
f2:ae:96:74:f3:b3:63:c2:3f:92:7f:78:d1:1d:a5:
e3:a1:71:39:af:80:b5:21:8a:a7:ff:53:03:ef:a9:
55:89:30:4e:db:d5:b2:c1:b2:b5:ca:7a:25:b4:f0:
e7:7a:ab:81:92:ce:85:30:b7:85:ce:70:d2:a6:ce:
a6:8a:d2:50:20:5f:5a:8b:24:9b:54:d4:2e:60:63:
a9:b1:dc:1d:ac:9f:15:6d:37:33:a3:b9:26:a5:11:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:36:2E:76:A5:BD:20:5D:08:42:1F:9C:EE:C1:A8:44:97:69:B5:F6
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/8026E31AEEB211EF8F3C27A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.37.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6f:67:f8:87:f5:17:1d:91:5b:bd:3c:68:10:e1:5b:81:31:
6d:b6:de:f4:d8:ed:c5:5a:44:e5:4e:15:b7:63:d0:6f:57:7c:
7b:02:47:9c:59:ee:26:a8:f0:fe:0b:d1:e9:84:be:37:de:6c:
43:e6:21:28:0a:55:3f:f9:d7:e3:e8:84:0e:0c:99:f5:d6:4f:
31:c3:4e:58:79:02:4a:46:12:81:b6:14:22:9d:76:76:d5:35:
3a:50:a4:3a:59:34:69:f0:11:b1:52:a3:45:90:cd:ac:cd:09:
c8:df:91:34:6f:d1:44:cf:f8:bf:cf:8f:fd:25:55:d1:a8:1c:
17:33:b0:ec:a0:d1:6d:1e:42:fa:48:64:e3:bc:9c:a2:99:b0:
8b:9b:21:38:25:37:89:a1:62:fb:71:79:f8:7c:51:38:a2:08:
73:27:5f:75:23:8a:94:8b:b6:bc:a5:bb:88:3c:b4:85:9a:8c:
ad:be:28:e4:66:f6:d4:e2:f0:5d:ab:62:5c:41:2e:e2:86:0e:
ef:b6:4b:6e:08:a3:a1:fd:ed:b1:69:c5:9f:cc:bc:a2:c3:03:
59:da:d4:20:fe:9f:02:79:1d:31:89:fd:11:7d:6a:e5:37:e6:
94:d4:55:7a:bc:9c:2b:a7:35:07:9c:83:f1:06:c7:58:54:13:
11:b7:c1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:35:29 2025 by rpki-client