Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0320F3B23EC911F09010019ADAE4EC9C.roa
File: 0320F3B23EC911F09010019ADAE4EC9C.roa (raw, json)
Hash identifier: 01Jeqp9ZqxDWOMn0zn4XIJ6Bu+u5XhcLpff6oC1Y/Pk=
Subject key identifier: 0E:B8:01:65:9A:D4:85:C0:07:C3:2C:7C:CE:D9:37:C3:EE:6F:F4:AF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14DF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0320F3B23EC911F09010019ADAE4EC9C.roa
Signing time: Sun 01 Jun 2025 09:15:52 +0000
ROA not before: Sun 01 Jun 2025 09:15:47 +0000
ROA not after: Tue 01 Jun 2027 09:15:47 +0000
asID: 834
IP address blocks: 102.165.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 19:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5343 (0x14df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 1 09:15:47 2025 GMT
Not After : Jun 1 09:15:47 2027 GMT
Subject: CN=683c1a48-a093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:18:6e:0f:50:a1:73:b5:1d:c8:c3:f2:4e:
d0:f4:4f:dc:0e:4b:9e:8c:ff:d3:38:e1:d2:0c:82:
ef:8e:8c:77:15:95:35:49:cc:af:83:c8:ad:19:89:
34:8c:81:73:19:7c:b1:1c:41:f5:29:8d:ef:5a:45:
a0:e4:e4:e1:6d:cc:8c:ee:8a:35:4d:e1:69:2f:b3:
01:a8:e9:b6:5c:b9:7c:b0:51:1e:31:26:95:80:57:
ed:87:73:82:7b:e5:10:c3:0e:01:8f:79:3e:e8:aa:
d0:09:c9:e6:6a:b6:1e:55:f2:dd:d3:bf:1f:63:4c:
e5:4d:c9:1b:6e:94:bd:99:2d:d4:0c:e0:c3:4c:8f:
76:6f:c0:3c:db:57:00:03:59:90:31:82:5d:82:c8:
a1:2a:a9:24:58:2f:34:6d:39:1e:13:45:10:1a:48:
95:f3:ad:3c:44:78:a0:fb:cb:e6:b0:5c:2f:2c:8e:
ce:60:a8:d8:44:c5:18:91:80:80:c3:c1:08:85:02:
c3:93:2a:d9:7e:6b:d7:e3:42:8c:09:c9:64:1a:48:
31:2e:d4:80:48:dc:32:27:2a:3e:3b:db:15:f5:22:
61:b9:32:f4:b3:50:c9:29:ce:b0:87:92:42:8d:31:
bb:7e:28:ab:08:38:1a:d7:37:d6:8a:a7:61:78:7c:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:01:65:9A:D4:85:C0:07:C3:2C:7C:CE:D9:37:C3:EE:6F:F4:AF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0320F3B23EC911F09010019ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.12.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0c:e6:41:c2:d7:53:ca:fa:71:a6:f0:b0:97:67:84:91:aa:
fe:17:99:64:c6:dd:5f:60:36:9f:80:6d:b0:00:b2:42:c0:a4:
6f:ed:0d:9e:90:10:aa:49:0b:a2:79:8a:48:da:4b:df:7e:03:
22:26:52:1f:a3:fa:86:80:7d:45:b7:31:5e:34:a4:35:8a:f2:
9b:e0:94:05:6a:b9:73:02:4c:df:e8:fa:b5:1e:c9:dd:16:e9:
c9:b5:c2:97:b4:c4:ef:1a:3f:eb:01:43:d5:29:22:b2:f7:f8:
11:00:b6:38:b5:7d:c7:7b:f8:37:34:c6:0b:27:67:07:11:8b:
f1:4d:7b:73:bf:af:b7:61:00:70:1c:38:58:bc:3c:f8:41:8f:
71:86:f4:09:da:43:55:5c:2b:fd:cd:f9:c7:69:d4:d3:b5:fc:
b0:57:28:e9:7a:90:a6:53:40:b5:1a:a4:ac:e6:dd:57:08:10:
59:75:7e:95:59:d9:ab:54:cf:dc:b4:cb:da:64:88:24:60:6b:
f8:e7:4e:c6:65:c4:28:fb:8c:0c:06:bd:f6:89:fa:93:aa:82:
99:ae:ec:7e:ca:76:9f:9b:41:9d:01:73:c3:6d:8f:8a:75:a1:
00:b6:46:4d:0c:78:f6:eb:52:6a:33:e7:db:86:45:42:d7:c9:
3c:e1:c7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:26:29 2025 by rpki-client