Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/09006A74347E11F0A60464AEDAE4EC9C.roa
File: 09006A74347E11F0A60464AEDAE4EC9C.roa (raw, json)
Hash identifier: s03JbGNBk8kXd8qSxHO6MVGUGZrIrikComxIiUYEH2E=
Subject key identifier: 95:00:F3:11:3E:E1:3A:3E:7E:BA:42:35:2B:15:BF:F0:8C:59:C2:AE
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 05BE
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/09006A74347E11F0A60464AEDAE4EC9C.roa
Signing time: Mon 19 May 2025 06:53:57 +0000
ROA not before: Mon 19 May 2025 06:53:52 +0000
ROA not after: Fri 18 May 2035 06:53:52 +0000
asID: 5536
IP address blocks: 102.218.128.0/24 maxlen: 32
102.218.130.0/24 maxlen: 32
102.219.22.0/24 maxlen: 32
102.220.125.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 22 May 2025 12:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1470 (0x5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: May 19 06:53:52 2025 GMT
Not After : May 18 06:53:52 2035 GMT
Subject: CN=682ad585-c452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:5c:a7:ba:6e:ef:89:6a:ce:88:5e:c9:72:
bb:71:8b:31:f8:d1:07:c0:cb:df:37:aa:51:04:59:
25:2d:67:9d:08:59:c1:0d:2e:fe:0d:c7:dc:cd:78:
a6:90:73:1f:b8:6c:d0:7e:e1:6a:ae:54:d1:ce:e5:
7f:f6:77:9a:d3:dc:1e:1b:a0:43:cc:d8:96:bd:50:
39:97:4a:e0:27:20:93:90:c9:1c:a5:85:77:88:be:
65:c7:14:8c:ef:9d:16:ce:08:78:25:d1:4c:15:0d:
95:3a:d7:fe:ee:11:b9:ec:7a:f4:a3:dd:fa:18:58:
b9:53:25:d3:98:1a:98:4e:d8:7d:41:1c:cd:18:c4:
14:55:b3:b0:8a:f4:7a:27:96:a8:ca:a7:33:9c:d3:
a6:71:ac:67:61:5a:8b:a9:84:f1:ae:32:84:48:25:
d5:3c:02:38:45:8d:50:de:ef:67:9d:ef:73:80:06:
74:32:fc:60:5e:be:13:0c:e4:cd:1c:91:e1:01:75:
41:bd:19:0a:9a:85:b7:cf:55:a1:e7:a0:c8:8e:f3:
3b:56:08:80:bf:19:fa:c8:ce:dd:0e:1f:3f:89:8a:
1e:f6:e2:15:3f:65:e3:6c:8a:3e:2a:f3:00:ed:f8:
a6:3f:de:59:7c:ef:cd:b2:12:5b:d4:0c:09:01:ef:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:F3:11:3E:E1:3A:3E:7E:BA:42:35:2B:15:BF:F0:8C:59:C2:AE
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/09006A74347E11F0A60464AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
102.218.130.0/24
102.219.22.0/24
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:de:da:f9:dc:04:06:fe:58:ab:c8:3a:70:4d:6d:d1:f5:ec:
e3:5b:8b:48:7a:cc:4a:11:41:87:2d:26:f9:76:3b:a9:96:80:
cd:04:0b:2b:f1:32:85:87:f9:4b:ee:bd:2d:8a:bc:1a:b7:f6:
e6:8c:77:91:5c:d7:8f:f7:8d:1a:f1:b5:be:5b:a8:a6:30:de:
8b:46:24:e2:59:04:a2:1b:0c:96:62:94:f7:2c:94:17:90:ec:
a4:9c:48:77:2c:be:8b:59:e0:a7:ca:9c:9f:ac:13:ee:6d:5b:
84:54:10:cf:ab:49:1f:24:b6:42:e9:de:b5:57:08:09:9f:02:
a1:69:16:6d:1c:2e:cd:b9:12:99:71:d8:dc:40:83:74:40:ca:
2c:6d:56:39:0c:36:60:ae:5d:7d:37:52:42:3d:49:3e:5a:10:
ae:46:f2:05:bf:8f:9d:c8:e1:1c:2f:0a:4f:99:27:ec:cc:d2:
00:8b:97:a2:83:93:fd:9a:23:d3:0e:1b:f6:2c:6f:7b:10:a9:
07:2f:1c:33:90:6b:b5:0a:44:b8:5a:0a:49:76:6b:25:ef:0d:
1d:52:e9:d0:43:db:b8:72:6d:1a:4b:44:71:62:82:ba:f7:85:
14:80:81:b1:bf:b2:ed:fc:95:8b:48:fb:7b:51:0f:98:9a:b5:
9b:82:80:92
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yNTA1MTkwNjUzNTJaFw0zNTA1MTgwNjUzNTJaMBgxFjAU
BgNVBAMTDTY4MmFkNTg1LWM0NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEYFynum7viWrOiF7JcrtxizH40QfAy983qlEEWSUtZ50IWcENLv4Nx9zN
eKaQcx+4bNB+4WquVNHO5X/2d5rT3B4boEPM2Ja9UDmXSuAnIJOQyRylhXeIvmXH
FIzvnRbOCHgl0UwVDZU61/7uEbnsevSj3foYWLlTJdOYGphO2H1BHM0YxBRVs7CK
9HonlqjKpzOc06ZxrGdhWouphPGuMoRIJdU8AjhFjVDe72ed73OABnQy/GBevhMM
5M0ckeEBdUG9GQqahbfPVaHnoMiO8ztWCIC/GfrIzt0OHz+Jih724hU/ZeNsij4q
8wDt+KY/3ll8782yElvUDAkB7+RHAgMBAAGjggK3MIICszAdBgNVHQ4EFgQUlQDz
ET7hOj5+ukI1KxW/8IxZwq4wHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4
QTAxNENFLzA5MDA2QTc0MzQ3RTExRjBBNjA0NjRBRURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABm2oADBABm2oIDBABm2xYD
BABm3H0wDQYJKoZIhvcNAQELBQADggEBAAre2vncBAb+WKvIOnBNbdH17ONbi0h6
zEoRQYctJvl2O6mWgM0ECyvxMoWH+UvuvS2KvBq39uaMd5Fc14/3jRrxtb5bqKYw
3otGJOJZBKIbDJZilPcslBeQ7KScSHcsvotZ4KfKnJ+sE+5tW4RUEM+rSR8ktkLp
3rVXCAmfAqFpFm0cLs25Eplx2NxAg3RAyixtVjkMNmCuXX03UkI9ST5aEK5G8gW/
j53I4RwvCk+ZJ+zM0gCLl6KDk/2aI9MOG/Ysb3sQqQcvHDOQa7UKRLhaCkl2ayXv
DR1S6dBD27hybRpLRHFigrr3hRSAgbG/su38lYtI+3tRD5iatZuCgJI=
-----END CERTIFICATE-----
Generated at Tue Jun 10 13:09:44 2025 by rpki-client