Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C70CF8054CC11F1AC268705CF1D38B0.roa
File: 6C70CF8054CC11F1AC268705CF1D38B0.roa (raw, json)
Hash identifier: ipv0sOD/Tm2kmFxs7+GHcmMyXt71RJvhAT4BBPmxtJw=
Subject key identifier: 4E:64:44:04:BE:E2:35:AB:1D:C9:E1:02:4C:50:B5:05:77:EF:DA:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C70CF8054CC11F1AC268705CF1D38B0.roa
Signing time: Thu 21 May 2026 04:20:40 +0000
ROA not before: Thu 21 May 2026 04:20:35 +0000
ROA not after: Fri 10 Jul 2026 04:20:35 +0000
asID: 395793
IP address blocks: 154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
154.200.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 May 2026 13:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118054 (0x1cd26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 04:20:35 2026 GMT
Not After : Jul 10 04:20:35 2026 GMT
Subject: CN=6a0e8818-46cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:28:ef:f7:33:90:db:a5:a3:43:19:99:af:
25:a6:0a:57:10:fa:90:56:58:b8:3f:73:a0:4f:b0:
76:2a:00:e3:36:fa:1b:62:f1:65:fe:77:53:e1:30:
0c:55:03:28:69:a1:3b:1a:1a:2d:b1:05:fc:69:4e:
8a:86:a1:8d:e5:ff:30:24:87:0e:15:44:34:e1:00:
97:a3:37:af:de:3b:7d:71:b6:0a:6c:af:e1:a8:e7:
f8:b3:60:78:3a:28:b6:ca:17:2e:45:73:0b:e2:1b:
bf:9f:f2:f7:3c:05:d3:72:56:f9:9d:65:f7:42:bc:
6b:12:26:47:50:c6:8e:7b:7a:2f:14:c1:0e:c8:48:
6b:57:92:62:62:0f:f8:0a:b1:3c:b4:b9:15:bb:12:
d7:40:ed:fb:f1:c5:4d:2d:62:a3:6b:83:10:9c:09:
a2:b7:c1:f7:90:88:7a:12:03:b0:55:63:3d:47:30:
c0:be:ed:df:01:f1:fb:12:3f:ed:f5:98:cb:31:ed:
8b:a2:42:65:86:fc:b2:39:d0:8d:3c:c4:f6:06:11:
8a:33:97:a6:69:39:d1:82:c3:d6:45:a2:0d:b4:1f:
b4:97:d9:48:fa:b3:a8:de:ab:b9:17:f1:bb:49:12:
13:9f:c5:1d:77:fe:76:c2:f0:36:0c:07:68:67:c9:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:44:04:BE:E2:35:AB:1D:C9:E1:02:4C:50:B5:05:77:EF:DA:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C70CF8054CC11F1AC268705CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.210.0-154.196.212.255
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:9d:87:00:52:38:41:f6:9c:5e:aa:fd:24:cd:b5:7f:ec:0d:
80:1b:31:6a:f9:4b:73:92:e1:0b:cd:64:e5:59:ea:9b:64:e6:
fb:5e:b2:f9:60:c3:38:df:2d:7f:c1:aa:b6:e8:6b:eb:d6:61:
ab:c6:23:3f:ea:14:9c:84:b1:88:94:c3:03:96:34:32:96:78:
e2:db:74:a9:23:b7:4d:b2:1f:71:8e:85:c5:f7:74:1a:6d:15:
e8:2a:1a:ad:80:55:b4:48:a5:ec:3f:89:5b:4d:7f:bc:14:ef:
86:cc:c9:53:ee:10:ff:da:3b:7c:32:9d:1d:68:20:7b:39:fb:
a5:8d:c9:93:fd:5d:0e:a0:03:24:9c:e8:c9:1f:65:16:03:d7:
64:43:3c:21:50:ab:70:df:9d:db:a7:33:a8:c1:52:2c:55:41:
f2:20:00:9d:eb:b2:22:6e:45:62:26:5c:e7:37:c9:7f:0d:2e:
49:92:fe:ea:c0:7a:7b:55:a7:3c:7f:c0:81:e4:54:9a:03:38:
db:54:f5:3c:a3:a0:75:ec:2e:f0:7a:3f:25:a2:52:5d:fa:b6:
15:b8:ce:9c:66:7e:52:4a:a6:66:b4:92:2d:5e:4d:1f:96:07:
44:9d:99:a4:1b:ae:90:f3:08:e9:f2:24:27:82:0c:64:00:e6:
cd:5d:52:a5
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAc0mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIxMDQyMDM1WhcNMjYwNzEwMDQyMDM1WjAYMRYw
FAYDVQQDEw02YTBlODgxOC00NmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1ywo7/czkNulo0MZma8lpgpXEPqQVli4P3OgT7B2KgDjNvobYvFl/ndT
4TAMVQMoaaE7GhotsQX8aU6KhqGN5f8wJIcOFUQ04QCXozev3jt9cbYKbK/hqOf4
s2B4Oii2yhcuRXML4hu/n/L3PAXTclb5nWX3QrxrEiZHUMaOe3ovFMEOyEhrV5Ji
Yg/4CrE8tLkVuxLXQO378cVNLWKja4MQnAmit8H3kIh6EgOwVWM9RzDAvu3fAfH7
Ej/t9ZjLMe2LokJlhvyyOdCNPMT2BhGKM5emaTnRgsPWRaINtB+0l9lI+rOo3qu5
F/G7SRITn8Udd/52wvA2DAdoZ8n4CwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFE5k
RAS+4jWrHcnhAkxQtQV379oWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QzcwQ0Y4MDU0Q0MxMUYxQUMyNjg3MDVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAGaxNIDBACaxNQDBACa
yD8wDQYJKoZIhvcNAQELBQADggEBAMCdhwBSOEH2nF6q/STNtX/sDYAbMWr5S3OS
4QvNZOVZ6ptk5vtesvlgwzjfLX/Bqrboa+vWYavGIz/qFJyEsYiUwwOWNDKWeOLb
dKkjt02yH3GOhcX3dBptFegqGq2AVbRIpew/iVtNf7wU74bMyVPuEP/aO3wynR1o
IHs5+6WNyZP9XQ6gAySc6MkfZRYD12RDPCFQq3DfndunM6jBUixVQfIgAJ3rsiJu
RWImXOc3yX8NLkmS/urAentVpzx/wIHkVJoDONtU9TyjoHXsLvB6PyWiUl36thW4
zpxmflJKpma0ki1eTR+WB0SdmaQbrpDzCOnyJCeCDGQA5s1dUqU=
-----END CERTIFICATE-----
Generated at Mon May 25 02:50:24 2026 by rpki-client