Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/318D13FC347E11F0B0388DB0DAE4EC9C.roa
File: 318D13FC347E11F0B0388DB0DAE4EC9C.roa (raw, json)
Hash identifier: uEFfAIeLWcc6sLnWIoFQ/hmBAAdcLXwl6COlyU0FzgI=
Subject key identifier: 03:08:77:89:1B:DB:1D:A9:B6:63:D7:98:8A:F0:F9:11:C1:8C:13:4B
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 05C0
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/318D13FC347E11F0B0388DB0DAE4EC9C.roa
Signing time: Mon 19 May 2025 06:55:05 +0000
ROA not before: Mon 19 May 2025 06:55:00 +0000
ROA not after: Fri 18 May 2035 06:55:00 +0000
asID: 37725
IP address blocks: 102.218.128.0/24 maxlen: 32
102.218.130.0/24 maxlen: 32
102.219.22.0/24 maxlen: 32
102.220.125.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 22 May 2025 12:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1472 (0x5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: May 19 06:55:00 2025 GMT
Not After : May 18 06:55:00 2035 GMT
Subject: CN=682ad5c9-fdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:c5:86:23:90:75:64:f6:d7:75:23:f5:80:
ec:0e:8c:de:4c:6e:5f:31:d5:ea:d5:7c:c4:34:29:
a2:17:81:87:b0:07:ef:83:07:d7:9e:1c:b2:8a:21:
69:dc:bc:e2:5c:fc:ba:8a:cc:7a:15:93:52:8c:07:
d4:07:2e:d1:95:e7:0a:bd:bb:e9:1f:ec:dc:f8:a9:
94:d0:5e:90:26:f3:fd:ab:cf:e9:39:ca:07:53:c7:
77:88:ca:28:9e:47:31:3e:95:b4:5d:cc:aa:3f:fc:
ce:9e:ba:e4:c0:22:5e:29:cc:3d:db:39:81:04:06:
20:3b:ca:f4:1a:c2:09:84:11:26:b0:db:53:25:78:
76:98:c9:d6:d9:fb:bf:64:a4:c9:62:1a:42:0a:86:
a7:bf:4b:11:9f:f0:ab:d8:d4:99:e1:a5:d6:45:10:
da:c3:55:b4:ad:c3:88:7b:38:1b:3a:1f:80:df:a8:
40:18:c5:fd:ef:4f:37:f4:e5:7e:4c:71:64:72:f3:
53:1a:5c:4c:24:43:94:0b:eb:26:ac:bc:f2:01:98:
d5:1e:d3:56:a9:a1:c8:53:e6:11:aa:dc:8d:90:f2:
3c:55:5f:ad:d3:a0:76:72:7e:b2:f0:15:99:4d:52:
5b:ab:62:0f:16:20:5b:1f:07:af:8d:da:a4:c1:de:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:77:89:1B:DB:1D:A9:B6:63:D7:98:8A:F0:F9:11:C1:8C:13:4B
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/318D13FC347E11F0B0388DB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
102.218.130.0/24
102.219.22.0/24
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8e:87:e1:b5:1b:ca:2d:6d:9b:20:82:56:eb:7c:f9:1b:f1:
7d:8e:ef:5b:b0:af:8c:90:94:ba:5d:bb:2d:1f:27:fd:78:db:
30:01:df:2d:55:3e:7e:21:87:77:b1:83:57:d0:72:4d:6a:94:
d5:ac:c8:90:2a:91:8e:2d:30:4d:61:47:3d:75:ce:db:94:2f:
8f:5c:31:30:70:d3:03:b9:6f:59:75:be:63:09:12:61:8c:57:
47:9e:e7:dd:7f:28:f7:34:f6:e4:08:10:44:5e:f5:9f:47:a6:
f2:f3:83:e4:30:e0:b5:06:2f:7e:37:a5:dc:13:b6:7c:d4:2a:
1a:76:51:4e:d4:33:2e:d4:af:b0:64:a1:90:a5:42:b8:58:6d:
84:7f:b8:1b:fd:2f:4c:6e:96:3d:b8:0d:46:5b:bc:42:05:77:
95:f6:ae:f7:9a:f3:ef:7e:1d:63:a3:66:92:cc:cb:53:9c:f7:
98:9a:e6:07:49:19:bb:13:96:0e:26:ad:6c:02:2a:70:87:51:
4b:6a:34:bb:2a:82:74:b5:5d:a4:6f:99:dd:20:98:2d:c5:db:
7e:15:68:51:43:f0:d9:82:8c:38:08:80:a0:fb:56:6b:4c:c5:
bf:a2:b9:4f:5e:5c:fa:f2:8e:8e:f8:f3:4b:97:7f:bc:33:6d:
66:f2:35:0d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yNTA1MTkwNjU1MDBaFw0zNTA1MTgwNjU1MDBaMBgxFjAU
BgNVBAMTDTY4MmFkNWM5LWZkYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9BsWGI5B1ZPbXdSP1gOwOjN5Mbl8x1erVfMQ0KaIXgYewB++DB9eeHLKK
IWncvOJc/LqKzHoVk1KMB9QHLtGV5wq9u+kf7Nz4qZTQXpAm8/2rz+k5ygdTx3eI
yiieRzE+lbRdzKo//M6euuTAIl4pzD3bOYEEBiA7yvQawgmEESaw21MleHaYydbZ
+79kpMliGkIKhqe/SxGf8KvY1JnhpdZFENrDVbStw4h7OBs6H4DfqEAYxf3vTzf0
5X5McWRy81MaXEwkQ5QL6yasvPIBmNUe01apochT5hGq3I2Q8jxVX63ToHZyfrLw
FZlNUlurYg8WIFsfB6+N2qTB3gmvAgMBAAGjggK3MIICszAdBgNVHQ4EFgQUAwh3
iRvbHam2Y9eYivD5EcGME0swHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4
QTAxNENFLzMxOEQxM0ZDMzQ3RTExRjBCMDM4OERCMERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABm2oADBABm2oIDBABm2xYD
BABm3H0wDQYJKoZIhvcNAQELBQADggEBAAWOh+G1G8otbZsgglbrfPkb8X2O71uw
r4yQlLpduy0fJ/142zAB3y1VPn4hh3exg1fQck1qlNWsyJAqkY4tME1hRz11ztuU
L49cMTBw0wO5b1l1vmMJEmGMV0ee591/KPc09uQIEERe9Z9HpvLzg+Qw4LUGL343
pdwTtnzUKhp2UU7UMy7Ur7BkoZClQrhYbYR/uBv9L0xulj24DUZbvEIFd5X2rvea
8+9+HWOjZpLMy1Oc95ia5gdJGbsTlg4mrWwCKnCHUUtqNLsqgnS1XaRvmd0gmC3F
234VaFFD8NmCjDgIgKD7VmtMxb+iuU9eXPryjo7480uXf7wzbWbyNQ0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:51:17 2025 by rpki-client