Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/9A9CB9D2D5B611EFAA55865E762E951A.roa
File: 9A9CB9D2D5B611EFAA55865E762E951A.roa (raw, json)
Hash identifier: N6Z3agJw2WRVTzVJjZYNmmWntAGIQywRFTSZy4Vr0gE=
Subject key identifier: 64:E8:9E:AB:FF:73:64:36:F6:60:EA:BC:61:85:B9:18:56:70:B2:7E
Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial: 011D
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/9A9CB9D2D5B611EFAA55865E762E951A.roa
Signing time: Sat 18 Jan 2025 16:09:33 +0000
ROA not before: Sat 18 Jan 2025 16:09:29 +0000
ROA not after: Tue 18 Jan 2028 16:09:29 +0000
asID: 328721
IP address blocks: 102.222.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 16:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36877BBAF, serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Validity
Not Before: Jan 18 16:09:29 2025 GMT
Not After : Jan 18 16:09:29 2028 GMT
Subject: CN=678bd23d-5ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:13:c3:49:96:c3:18:fd:cb:ce:de:5e:9e:
5b:1f:7f:f7:2f:6b:de:b8:9d:f6:d1:ac:71:cd:cf:
c6:6b:74:c7:6e:f5:e9:3a:e2:ac:c3:88:e1:c4:a4:
6d:4f:89:ac:8b:99:45:d0:ee:e6:2d:69:a6:c1:54:
6d:80:4a:4a:57:5f:6a:26:00:e5:8c:c8:00:19:5a:
8b:3d:e0:1f:76:ca:de:7b:be:82:4d:e0:d4:b7:36:
42:66:35:f6:00:21:33:90:77:de:00:28:db:64:47:
a8:b5:7b:2b:ee:9c:ac:a1:d6:44:6a:cf:3a:ae:63:
c1:9d:73:11:7d:10:2c:74:fc:29:e9:62:ff:e9:b9:
9c:e0:33:0e:87:b3:3f:56:ee:91:3b:4c:e8:da:37:
ca:62:29:ac:b0:82:10:5f:59:3e:dc:94:68:d7:49:
bd:e6:64:f2:f8:a6:6b:aa:f5:88:ac:55:75:31:69:
57:50:6c:19:49:43:3a:43:9d:0c:09:2c:01:e3:6d:
05:ec:34:d0:2d:e8:e1:19:20:b0:32:92:39:21:55:
43:f4:8a:4c:fe:cf:91:f0:f1:b6:c0:41:62:b8:8a:
78:03:32:bf:9f:0d:e5:a9:b1:e9:9f:ea:16:5e:90:
56:8d:73:58:bc:95:02:c6:44:69:f7:2d:a4:3d:91:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E8:9E:AB:FF:73:64:36:F6:60:EA:BC:61:85:B9:18:56:70:B2:7E
X509v3 Authority Key Identifier:
keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/9A9CB9D2D5B611EFAA55865E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.57.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5e:58:6f:f1:c5:6f:a4:21:ff:cf:f5:04:b4:47:cd:29:ab:
f8:ba:d6:87:fa:f3:c3:5b:55:b5:c7:3b:2e:d5:a2:fe:03:ea:
8f:77:77:7a:33:48:75:7b:64:e6:03:68:30:0b:45:77:fe:a9:
bc:bc:53:22:17:82:29:8c:62:c0:55:7c:de:ac:07:34:a6:4e:
89:c4:18:29:9d:22:1d:f7:83:a5:93:e5:85:3f:ff:ec:fc:3f:
6a:1d:64:d8:c8:c3:84:19:ae:5a:50:63:74:72:8c:9f:77:ad:
ed:00:0a:e1:a0:cd:ed:57:5a:6f:c8:ab:22:5e:0b:54:a7:d9:
96:78:ab:13:31:10:0d:d8:8a:9f:61:62:32:a1:e2:12:28:ff:
14:93:24:5a:4f:1c:b1:3c:36:3f:46:3f:af:55:10:b2:ec:f2:
0e:bc:e4:81:1b:d8:f4:03:35:4b:f4:d3:b2:26:5c:f9:dc:9e:
4a:cc:3e:b8:b9:34:bc:7b:69:e8:09:d5:04:ba:e7:ae:e1:c3:
4f:6f:d7:f8:07:35:a9:19:da:aa:40:78:84:5b:6f:45:4f:72:
c1:0c:6d:5a:ba:1b:b8:1a:3d:57:1b:e2:cc:b2:26:ae:fc:f4:
98:d9:de:dd:36:35:8f:d9:e0:c4:96:23:90:ae:43:bd:c9:cc:
e0:28:41:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:59:39 2025 by rpki-client