Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D8D2BA7A3FE811F0A2E576DBDAE4EC9C.roa
File: D8D2BA7A3FE811F0A2E576DBDAE4EC9C.roa (raw, json)
Hash identifier: RpGhdASxW8p9RNXtNFQqwQhuOgoJQt2g3MOQg/IisAQ=
Subject key identifier: F0:6D:0F:07:A0:9F:9D:39:24:F0:BD:A0:CB:19:28:D1:CD:79:97:16
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 14E2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D8D2BA7A3FE811F0A2E576DBDAE4EC9C.roa
Signing time: Mon 02 Jun 2025 19:36:15 +0000
ROA not before: Mon 02 Jun 2025 19:36:10 +0000
ROA not after: Wed 02 Jun 2027 19:36:10 +0000
asID: 9304
IP address blocks: 102.129.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 08:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5346 (0x14e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 2 19:36:10 2025 GMT
Not After : Jun 2 19:36:10 2027 GMT
Subject: CN=683dfd2f-c347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:f2:38:b7:fc:c2:37:84:4e:d2:4c:1a:1c:
e0:05:91:28:b9:54:67:38:33:61:a6:3a:27:af:6f:
c0:8c:75:1d:6c:19:7d:ec:42:56:93:3b:c4:5e:92:
0c:12:0e:41:4b:b5:d3:f7:e9:3c:9e:e8:fd:57:0d:
e6:b4:c4:39:c7:05:33:cf:a3:80:c2:7d:c2:34:84:
bb:eb:e4:a7:ae:fc:26:9e:de:50:05:05:2e:9a:64:
39:b9:dd:b3:54:1b:da:50:45:96:5c:d1:44:93:07:
ea:00:2e:66:bc:de:ef:ec:1a:b4:ce:5d:b1:df:99:
d1:e5:ed:d9:19:4e:57:62:21:9d:8f:78:dc:21:ea:
ad:60:e7:90:04:f7:d0:a0:de:2e:a6:55:56:37:e7:
00:f0:7e:5e:de:e3:30:6e:49:12:c8:d1:a7:8c:b2:
47:70:cb:e0:36:d5:5d:cd:28:9d:d9:db:02:88:74:
63:49:5e:85:19:2c:48:9f:67:67:e8:dc:fb:36:3f:
ce:b6:44:5e:48:ec:70:82:de:b1:47:27:3d:43:7e:
ab:97:b1:15:85:89:82:43:1c:80:b4:a0:7b:29:e1:
86:fd:df:d9:c6:a0:34:fc:f1:d2:a3:9e:b4:05:2a:
0d:7a:cb:f3:48:a7:bf:84:a9:18:e2:27:f1:e8:a4:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6D:0F:07:A0:9F:9D:39:24:F0:BD:A0:CB:19:28:D1:CD:79:97:16
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D8D2BA7A3FE811F0A2E576DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:16:3d:fa:8d:77:c0:ef:22:3e:91:54:8c:06:e9:fb:c2:18:
64:c2:51:65:ec:e2:db:a9:43:5c:46:1d:73:29:02:05:24:9b:
39:15:56:3f:26:5e:4f:74:55:68:20:aa:1d:7d:d4:d1:3f:2d:
9d:32:7f:27:d3:86:4b:a8:6a:bc:27:42:b0:a3:90:59:57:84:
e7:82:be:e5:e7:0b:5d:e3:cd:cf:44:dd:c8:66:0f:9b:f5:19:
15:c2:3a:df:50:a4:48:2a:bf:29:76:80:43:87:ff:8d:93:4f:
b3:7a:04:bf:79:ba:ca:d2:dc:9b:bf:22:3a:05:0b:83:64:cb:
85:b8:94:18:db:58:7a:ef:04:8f:3d:b2:e1:1a:c3:be:02:06:
81:3e:5f:8e:33:3c:4c:fd:0a:09:2c:00:97:83:73:80:2d:39:
16:d5:bc:e1:c2:40:3b:79:15:25:ba:b5:63:94:83:6d:4a:6e:
c9:36:24:e8:8e:d8:ee:c9:e6:f9:6c:42:54:32:00:fc:a1:64:
ec:b4:d3:8a:fd:e0:db:f1:69:d5:e6:0a:61:df:ba:de:75:4d:
cb:c1:00:31:12:57:5f:66:dd:94:ed:0b:b3:a7:13:75:4c:6f:
47:d8:e4:07:4d:76:07:ae:ba:7f:d8:af:ef:d8:6b:30:39:79:
82:f1:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:55 2025 by rpki-client