This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/8E5C0462309B11F0978757AFDAE4EC9C.roa
File:                     8E5C0462309B11F0978757AFDAE4EC9C.roa (raw, json)
Hash identifier:          RbNjQUcvOoWrNY2yWVtb4cgLJ503VbtkRVqpxLJH3hk=
Subject key identifier:   8F:A4:93:E4:59:AB:B9:F6:E6:1D:68:9F:92:81:C7:36:55:39:C3:20
Certificate issuer:       /CN=F36993D4AF/serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
Certificate serial:       07
Authority key identifier: 08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/8E5C0462309B11F0978757AFDAE4EC9C.roa
Signing time:             Wed 14 May 2025 08:15:12 +0000
ROA not before:           Wed 14 May 2025 08:15:07 +0000
ROA not after:            Fri 31 May 2030 08:15:07 +0000
asID:                     328482
IP address blocks:        102.67.152.0/22 maxlen: 22
                          2c0f:ed90::/32 maxlen: 32
Validation:               Failed, certificate revoked on Wed 14 May 2025 10:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36993D4AF, serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
        Validity
            Not Before: May 14 08:15:07 2025 GMT
            Not After : May 31 08:15:07 2030 GMT
        Subject: CN=68245110-44aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:d6:77:57:49:10:ce:7e:74:0c:eb:24:2c:
                    91:d6:25:54:25:9b:a8:bd:27:9d:83:3e:92:a9:d1:
                    a7:bd:61:0d:96:61:80:c2:d7:c3:cb:02:4e:ec:1e:
                    e9:fc:99:9f:39:72:f9:aa:54:ff:b1:39:11:41:af:
                    9c:67:ba:97:a8:f8:71:2b:6b:c1:f0:d8:d7:90:62:
                    b2:96:15:d7:a2:c3:e7:e2:77:ca:48:5b:56:8a:18:
                    b7:e9:4b:7b:ce:dd:2a:9c:48:e1:97:04:f9:46:e9:
                    82:59:ce:fb:5a:26:4a:3c:ee:58:d5:40:d4:b9:83:
                    6f:99:83:4d:ce:92:8d:85:c3:b4:54:5f:6c:f9:71:
                    91:73:91:78:0a:ce:fd:87:4d:1e:02:98:f1:1e:b2:
                    39:c2:a5:f8:80:41:06:c6:78:78:a3:a9:b1:ca:95:
                    b3:0f:ee:80:bb:5a:d4:01:17:7a:53:aa:c5:f9:23:
                    da:e7:40:e6:08:8d:c4:76:27:01:3a:bd:45:e2:61:
                    24:0c:49:0c:f7:3b:24:2c:e5:f8:4a:96:9e:55:16:
                    2e:00:ce:65:91:25:ff:78:5b:72:a9:04:d5:68:c2:
                    b6:5d:45:8e:a8:a0:82:6e:aa:81:95:e6:14:5d:3f:
                    f0:cd:5e:26:d8:62:3d:45:28:c5:50:47:55:66:39:
                    24:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A4:93:E4:59:AB:B9:F6:E6:1D:68:9F:92:81:C7:36:55:39:C3:20
            X509v3 Authority Key Identifier:
                keyid:08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/8E5C0462309B11F0978757AFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.67.152.0/22
                IPv6:
                  2c0f:ed90::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:cc:78:94:c7:8b:12:2b:df:db:61:44:cf:ac:4d:f6:71:77:
         f6:cf:a9:55:71:c4:e0:c5:45:56:8a:50:81:ca:25:00:f4:38:
         52:71:58:dc:df:52:39:f1:66:86:88:8a:de:12:a7:f4:88:3c:
         cb:9d:d4:1e:10:40:5e:cf:11:81:aa:47:83:a3:8c:b4:e2:9d:
         f4:f3:f4:4d:66:9d:b4:3c:0c:51:4a:c9:b6:e7:38:1f:4f:19:
         60:fd:cc:68:c4:a7:35:a9:6c:9f:ed:be:14:eb:36:94:b0:f9:
         8a:2e:02:d2:7e:c9:b0:16:ba:7d:29:20:0f:78:de:3c:fa:fa:
         e6:6b:5c:45:8d:99:0c:b3:93:0f:b4:c0:2d:cf:aa:8e:32:70:
         67:a8:7b:a6:2f:74:db:39:59:7c:ba:f7:61:9e:2b:01:76:d5:
         07:22:d1:b0:22:e0:ba:ce:35:7b:a3:78:6b:61:b7:f0:43:b9:
         a8:de:f0:1c:97:20:2a:ac:69:f8:d4:d1:7d:3a:6d:b0:a9:0c:
         64:ba:3d:62:71:f7:4f:97:df:64:21:20:37:a3:ab:bb:6c:da:
         4e:af:ab:ea:3d:5e:c8:07:6f:31:65:4f:ae:1c:97:69:56:fd:
         59:60:02:59:d2:22:ed:d2:ad:99:7f:e3:af:49:61:57:cf:a4:
         6e:87:1b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----