Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6F59AD863AEF11F0AFE0AD8EDAE4EC9C.roa
File: 6F59AD863AEF11F0AFE0AD8EDAE4EC9C.roa (raw, json)
Hash identifier: kOeRL03PfCB8W2mkGcsjmGLbd/0lgYpfTSeQ4W+JpRs=
Subject key identifier: D1:B6:C2:BF:EE:DC:10:AA:F1:B7:63:FE:C2:56:D0:76:F8:05:83:9A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B00
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6F59AD863AEF11F0AFE0AD8EDAE4EC9C.roa
Signing time: Tue 27 May 2025 11:40:49 +0000
ROA not before: Tue 27 May 2025 11:40:44 +0000
ROA not after: Thu 27 May 2027 11:40:44 +0000
asID: 61317
IP address blocks: 154.16.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 06:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6912 (0x1b00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 27 11:40:44 2025 GMT
Not After : May 27 11:40:44 2027 GMT
Subject: CN=6835a4c1-3c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:09:5f:95:60:1b:30:b6:86:d5:c1:66:7d:
de:ed:a2:24:82:d4:29:1a:96:f7:ff:51:92:fb:c6:
64:f6:d0:a5:04:8b:e7:06:44:ac:f1:91:8a:54:a5:
a2:f4:2c:79:2b:e0:dc:f9:47:c9:f4:12:5b:0f:78:
79:48:d2:09:7e:f1:2d:86:d3:93:e0:00:24:28:8c:
ef:02:02:97:8e:eb:63:ca:85:d1:b6:32:05:03:02:
3e:b7:a6:54:b8:0f:f7:b8:d8:df:00:54:b7:c1:11:
36:2a:87:b7:6c:dd:26:cb:35:7c:6e:55:58:82:50:
05:fa:b7:b3:0a:66:66:fe:b5:62:63:c8:e5:23:0b:
3f:1d:a2:a6:ae:e1:5f:98:38:b6:d7:c5:fb:18:0b:
1b:f1:34:26:ba:41:9f:2b:eb:e5:c4:47:2a:9b:78:
d5:03:38:63:a7:9a:39:fc:11:81:fb:f9:f4:69:b3:
fc:4b:65:5a:38:e3:e0:24:25:95:92:7b:64:59:57:
76:50:e0:7e:30:42:c1:f8:3c:95:b6:b8:c6:0a:11:
56:e6:c3:19:98:de:b3:77:bd:8f:9c:be:d6:30:1b:
c8:ea:c8:ff:f4:df:95:6c:3c:6a:14:24:b8:0c:05:
9f:ae:0b:ac:4a:bf:55:30:e5:ab:55:25:26:49:12:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B6:C2:BF:EE:DC:10:AA:F1:B7:63:FE:C2:56:D0:76:F8:05:83:9A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6F59AD863AEF11F0AFE0AD8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:0c:49:1c:f3:92:55:12:3e:40:da:9a:f5:5a:68:8e:59:f3:
26:fb:5d:9a:7d:f3:72:c3:a3:81:21:2b:85:b5:f7:55:1c:93:
d5:7a:8a:31:f5:9b:47:e0:37:0c:e2:b7:f4:e9:63:21:01:72:
3f:b4:a4:3c:95:bd:e8:26:72:10:5e:24:d8:41:84:cd:fb:92:
29:99:c0:79:fe:d9:34:7c:30:7a:a9:02:49:8f:c8:9e:11:14:
26:11:7e:ee:e7:d7:2f:67:d0:75:1e:7c:a5:3b:12:1d:83:64:
5f:ae:ea:51:14:07:5a:08:97:a7:38:6a:e1:06:9c:30:49:23:
ef:de:0c:d3:05:f8:0e:b5:0f:c0:e2:b0:0d:42:a3:8a:76:b2:
81:d9:37:c6:f7:d1:42:9c:54:46:69:ba:77:c5:6c:94:18:44:
fd:77:7c:a8:fc:e3:e3:06:8f:53:e2:24:99:58:d0:5a:56:d9:
af:7f:5e:cd:e5:1d:47:68:f0:f2:ac:cf:d5:7d:8d:72:3f:6b:
89:ee:71:6e:5f:e0:1f:e2:0a:2c:50:ad:c7:37:6e:8b:65:16:
29:29:54:08:66:ff:fb:e4:31:20:0c:b7:b6:59:11:ae:fa:46:
27:0d:cf:fe:a5:6e:c3:39:59:cd:a5:f6:ad:2f:36:62:18:3b:
45:f1:bd:e4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGwAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA1MjcxMTQwNDRaFw0yNzA1MjcxMTQwNDRaMBgxFjAU
BgNVBAMTDTY4MzVhNGMxLTNjMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1oglflWAbMLaG1cFmfd7toiSC1Ckalvf/UZL7xmT20KUEi+cGRKzxkYpU
paL0LHkr4Nz5R8n0ElsPeHlI0gl+8S2G05PgACQojO8CApeO62PKhdG2MgUDAj63
plS4D/e42N8AVLfBETYqh7ds3SbLNXxuVViCUAX6t7MKZmb+tWJjyOUjCz8doqau
4V+YOLbXxfsYCxvxNCa6QZ8r6+XERyqbeNUDOGOnmjn8EYH7+fRps/xLZVo44+Ak
JZWSe2RZV3ZQ4H4wQsH4PJW2uMYKEVbmwxmY3rN3vY+cvtYwG8jqyP/035VsPGoU
JLgMBZ+uC6xKv1Uw5atVJSZJEpYBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0bbC
v+7cEKrxt2P+wlbQdvgFg5owHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzZGNTlBRDg2M0FFRjExRjBBRkUwQUQ4RURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECYwDQYJKoZIhvcNAQEL
BQADggEBALMMSRzzklUSPkDamvVaaI5Z8yb7XZp983LDo4EhK4W191Uck9V6ijH1
m0fgNwzit/TpYyEBcj+0pDyVvegmchBeJNhBhM37kimZwHn+2TR8MHqpAkmPyJ4R
FCYRfu7n1y9n0HUefKU7Eh2DZF+u6lEUB1oIl6c4auEGnDBJI+/eDNMF+A61D8Di
sA1Co4p2soHZN8b30UKcVEZpunfFbJQYRP13fKj84+MGj1PiJJlY0FpW2a9/Xs3l
HUdo8PKsz9V9jXI/a4nucW5f4B/iCixQrcc3botlFikpVAhm//vkMSAMt7ZZEa76
RicNz/6lbsM5Wc2l9q0vNmIYO0XxveQ=
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:30:20 2025 by rpki-client