Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F5EAD5A3C2911F0B61C257BDAE4EC9C.roa
File: 6F5EAD5A3C2911F0B61C257BDAE4EC9C.roa (raw, json)
Hash identifier: YeGbmmkPI8BngqkR1LqfqXXg1D5xHfJ+DfWIl/2yfs4=
Subject key identifier: 94:C4:D9:30:FB:5F:5D:C4:58:D0:A0:2D:8B:2D:EF:8A:CC:E4:C6:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01839E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F5EAD5A3C2911F0B61C257BDAE4EC9C.roa
Signing time: Thu 29 May 2025 01:08:31 +0000
ROA not before: Thu 29 May 2025 01:08:26 +0000
ROA not after: Wed 18 Jun 2025 01:08:26 +0000
asID: 214142
IP address blocks: 154.93.1.0/24 maxlen: 24
154.93.3.0/24 maxlen: 24
154.93.26.0/24 maxlen: 24
154.94.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 02:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99230 (0x1839e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 01:08:26 2025 GMT
Not After : Jun 18 01:08:26 2025 GMT
Subject: CN=6837b38f-21fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:fe:26:94:24:18:9c:71:a9:7e:29:31:82:
57:8e:45:7f:d6:54:9d:5e:84:e1:0a:f8:38:f9:1f:
99:d4:f2:6f:05:ec:51:5c:87:ac:d1:94:c9:4e:b0:
28:f5:4a:1c:d0:06:71:b7:0c:92:73:4a:3d:e0:ac:
28:5b:58:a7:0d:bf:30:76:34:06:25:50:12:2f:49:
ee:bc:01:b1:e3:53:b6:9b:93:f8:c2:b6:7a:27:7e:
9e:70:f1:ea:d4:58:25:c9:61:46:3d:21:76:da:4d:
ed:5d:f1:ce:b5:50:78:a8:b3:82:cd:ce:db:57:43:
90:26:ab:db:73:92:c2:4d:6e:63:7f:7b:88:80:b3:
03:5e:4a:68:19:24:b6:36:ba:19:b0:e8:97:c8:f7:
86:d5:a5:b1:1c:b9:33:a6:8c:37:b4:e5:c0:ec:82:
98:94:6f:1e:4c:a6:76:9a:c3:ae:e2:75:94:99:78:
8a:64:3b:5a:b3:dd:1f:4f:9d:1f:66:cb:fc:c1:5c:
62:8b:28:e0:1b:6a:7b:ba:ad:44:05:69:28:b6:27:
06:37:e6:4f:24:f9:35:2a:8c:b8:73:fd:80:64:64:
09:c8:95:97:fb:e5:e6:79:b9:00:a4:a6:81:6a:4b:
a6:97:57:8d:7b:98:de:05:79:18:03:9d:d7:ed:ba:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:D9:30:FB:5F:5D:C4:58:D0:A0:2D:8B:2D:EF:8A:CC:E4:C6:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F5EAD5A3C2911F0B61C257BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.1.0/24
154.93.3.0/24
154.93.26.0/24
154.94.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4a:50:3b:2f:40:f5:71:a0:c8:d9:f1:87:06:97:91:ef:a8:
d9:37:73:d8:dc:21:34:28:af:45:4b:cd:cc:b8:32:5d:40:02:
90:39:b4:3c:8d:22:0f:20:ec:46:50:a2:c0:c5:4e:51:f5:e3:
36:0d:f0:45:3c:f5:22:65:57:a9:8a:05:c0:45:78:37:e5:d9:
a9:0b:4f:34:a6:63:76:80:2c:14:19:96:9a:94:da:3a:91:c9:
4e:63:98:cc:03:1b:6c:76:c8:31:9a:9b:07:d2:a1:c4:2c:35:
04:bf:9d:df:17:80:dd:4b:30:06:ab:24:96:fe:0b:98:8d:fa:
f2:45:8f:ec:31:33:e9:4c:ea:7d:2c:5b:03:5a:1f:54:a7:51:
c1:fe:8c:ba:33:a7:7e:ef:df:99:3c:dd:0b:fb:9a:09:b6:e3:
c3:98:cf:96:45:3a:8b:f1:c7:47:db:a7:e8:38:5d:ab:bb:bd:
e3:b9:e4:f0:bc:7d:c0:ce:2f:ed:63:7e:6f:c8:ee:ef:88:49:
85:eb:5f:bf:bc:f9:ba:f3:8b:18:4d:c3:e4:81:b2:e3:20:51:
83:fb:3f:cd:1d:5d:0d:c6:f6:c9:5b:39:10:ed:0b:07:22:b4:
b0:58:ee:5e:d3:e3:60:f2:92:58:5c:df:c7:11:17:0e:0c:64:
4d:b5:99:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:29:55 2025 by rpki-client