Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98156A0E393611F08FEFAFDBDAE4EC9C.roa
File: 98156A0E393611F08FEFAFDBDAE4EC9C.roa (raw, json)
Hash identifier: UPyRWkHjeEImTovDeTatTQKVLPILNiGUrFA+pL1En/Q=
Subject key identifier: AD:94:62:C2:95:49:62:34:10:88:C4:C4:7A:18:33:58:D3:16:07:27
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14D4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98156A0E393611F08FEFAFDBDAE4EC9C.roa
Signing time: Sun 25 May 2025 07:05:09 +0000
ROA not before: Sun 25 May 2025 07:05:05 +0000
ROA not after: Tue 25 May 2027 07:05:05 +0000
asID: 834
IP address blocks: 102.129.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 19:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5332 (0x14d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 25 07:05:05 2025 GMT
Not After : May 25 07:05:05 2027 GMT
Subject: CN=6832c125-11b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:41:36:c0:ae:77:dd:8e:54:8a:a3:64:c1:
ba:61:8e:76:c7:5a:00:c7:dd:81:4c:f0:d3:df:d6:
2d:3e:83:15:05:32:38:59:5f:42:f6:1e:98:7e:8f:
d0:cf:31:b6:f5:c6:23:fc:f0:c4:84:94:b9:2a:88:
82:d8:08:80:ba:9a:89:f8:57:79:a0:89:29:26:8e:
3f:7a:37:20:8b:47:8b:ef:94:6b:8f:52:e1:5e:fc:
0e:4d:17:8a:7b:b1:19:87:8b:ce:57:d3:57:4a:80:
de:a4:a0:64:28:73:b8:6a:33:4b:d7:2b:8c:76:05:
3d:65:82:51:61:eb:f4:00:bb:bb:66:9f:d3:e3:f1:
c3:fe:60:15:d5:a6:a5:6e:91:16:34:f7:60:76:3e:
9b:13:f2:d7:62:0d:26:03:a4:16:e6:06:97:75:fe:
77:be:e9:61:1a:6d:97:15:c9:b7:0a:a3:ec:fa:ec:
3b:07:39:1f:b1:2d:84:d9:77:86:d1:00:44:33:ae:
13:f7:32:93:02:ff:ee:f3:d8:05:d3:5f:e4:b9:23:
07:55:71:4b:0d:04:c5:56:b9:db:a6:e0:9d:bf:14:
61:6b:87:20:b7:88:7f:38:81:2f:e9:79:dc:27:dd:
1c:26:48:4b:d3:d4:25:9f:01:a6:2d:04:c0:b4:84:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:94:62:C2:95:49:62:34:10:88:C4:C4:7A:18:33:58:D3:16:07:27
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98156A0E393611F08FEFAFDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.130.0/24
Signature Algorithm: sha256WithRSAEncryption
09:73:4c:86:25:81:c3:a1:c6:8f:e5:df:78:5f:3c:dc:33:87:
ed:f6:7c:ca:d3:9e:99:c3:e3:b0:e2:95:99:b9:02:8a:61:39:
dc:ed:bf:cf:ad:cd:65:b1:7b:a2:30:83:bc:cb:2e:65:60:b0:
35:85:05:cf:91:5b:80:57:85:26:64:e7:eb:1d:7f:77:46:e6:
ea:b6:4a:64:09:bd:98:3e:a3:60:af:ce:ae:67:9b:8f:2f:13:
f3:42:0a:bd:84:6e:7c:3a:9d:33:a0:a0:45:e7:a8:b8:07:2d:
24:41:3b:65:53:4f:66:8f:8f:5e:2e:58:af:ba:7d:4f:52:f5:
a3:57:6d:bf:20:e3:20:70:b2:2a:48:c7:3e:bb:0f:25:19:ff:
11:8b:04:75:4c:79:a2:a7:13:81:e1:92:d1:a2:d6:16:a9:a0:
82:76:ed:36:39:24:14:da:d2:e4:3c:80:65:f9:10:03:a6:3c:
f8:f8:8b:20:36:24:6f:ba:a0:41:2e:c0:69:61:04:e8:2f:90:
36:9b:c2:89:d7:96:c5:cb:fe:53:05:f5:d1:f8:3a:42:7c:11:
51:67:e7:d9:b2:d5:2f:30:b4:6b:61:cc:30:26:69:7d:56:0a:
94:cc:c1:38:7b:73:50:9d:a8:4a:2e:33:b8:32:59:58:61:ce:
2e:c0:27:78
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFNQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTA1MjUwNzA1MDVaFw0yNzA1MjUwNzA1MDVaMBgxFjAU
BgNVBAMTDTY4MzJjMTI1LTExYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcnEE2wK533Y5UiqNkwbphjnbHWgDH3YFM8NPf1i0+gxUFMjhZX0L2Hph+
j9DPMbb1xiP88MSElLkqiILYCIC6mon4V3mgiSkmjj96NyCLR4vvlGuPUuFe/A5N
F4p7sRmHi85X01dKgN6koGQoc7hqM0vXK4x2BT1lglFh6/QAu7tmn9Pj8cP+YBXV
pqVukRY092B2PpsT8tdiDSYDpBbmBpd1/ne+6WEabZcVybcKo+z67DsHOR+xLYTZ
d4bRAEQzrhP3MpMC/+7z2AXTX+S5IwdVcUsNBMVWudum4J2/FGFrhyC3iH84gS/p
edwn3RwmSEvT1CWfAaYtBMC0hCptAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrZRi
wpVJYjQQiMTEehgzWNMWBycwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzk4MTU2QTBFMzkzNjExRjA4RkVGQUZEQkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYIwDQYJKoZIhvcNAQEL
BQADggEBAAlzTIYlgcOhxo/l33hfPNwzh+32fMrTnpnD47DilZm5AophOdztv8+t
zWWxe6Iwg7zLLmVgsDWFBc+RW4BXhSZk5+sdf3dG5uq2SmQJvZg+o2Cvzq5nm48v
E/NCCr2Ebnw6nTOgoEXnqLgHLSRBO2VTT2aPj14uWK+6fU9S9aNXbb8g4yBwsipI
xz67DyUZ/xGLBHVMeaKnE4HhktGi1hapoIJ27TY5JBTa0uQ8gGX5EAOmPPj4iyA2
JG+6oEEuwGlhBOgvkDabwonXlsXL/lMF9dH4OkJ8EVFn59my1S8wtGthzDAmaX1W
CpTMwTh7c1CdqEouM7gyWVhhzi7AJ3g=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:30:43 2025 by rpki-client