Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/67FDF45C227611F0A1B70E88DAE4EC9C.roa
File: 67FDF45C227611F0A1B70E88DAE4EC9C.roa (raw, json)
Hash identifier: bVUyepaOXROnHbhSvWJXRM03zaCF+RYPc+x10BRCWn4=
Subject key identifier: 10:34:5E:06:7F:B1:83:89:9F:05:81:08:37:E2:64:76:B1:8C:28:F6
Certificate issuer: /CN=F36C6D54AF/serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Certificate serial: 02
Authority key identifier: 40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/67FDF45C227611F0A1B70E88DAE4EC9C.roa
Signing time: Sat 26 Apr 2025 08:14:00 +0000
ROA not before: Sat 26 Apr 2025 08:13:55 +0000
ROA not after: Sat 25 Apr 2026 08:13:55 +0000
asID: 329489
IP address blocks: 102.207.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 29 Apr 2025 09:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6D54AF, serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Validity
Not Before: Apr 26 08:13:55 2025 GMT
Not After : Apr 25 08:13:55 2026 GMT
Subject: CN=680c95c8-b921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:30:b8:53:13:4f:19:a8:5b:21:09:9e:cf:
fd:b8:88:17:27:9d:50:bf:15:bf:04:46:29:d4:ba:
f1:49:36:96:ed:99:b8:76:4a:b8:07:e5:49:0c:0f:
1e:42:68:38:af:8d:c4:43:ad:7d:96:51:90:07:74:
a1:90:64:b2:42:b1:ed:85:82:fe:33:e7:5a:d9:79:
a1:e2:f5:6e:12:28:1e:53:ff:40:8a:38:c7:9f:be:
ac:94:01:00:ee:82:9d:42:5c:19:f3:3a:26:7d:96:
a1:4c:f2:3d:6f:ae:1b:3d:df:fe:db:99:29:43:e7:
9f:b8:7e:a6:28:b7:68:e1:89:6b:b9:2d:4b:4b:2f:
a8:aa:fe:f1:cf:02:8a:67:76:6d:e4:9e:cf:09:26:
31:7d:07:83:49:9a:3f:14:93:f9:8d:a7:75:e3:0c:
6d:7e:b1:15:a9:b3:f5:1e:4f:0a:27:f6:cc:6a:ca:
04:a5:f4:a7:65:d6:aa:7f:5f:7f:a0:cd:c7:30:bb:
af:93:3d:b2:4e:12:a2:50:8f:1e:71:a4:0f:5c:c1:
94:9b:d0:3e:f1:6a:da:5e:31:df:28:91:f6:79:4b:
17:23:ee:de:7d:b3:39:2e:32:64:46:50:6c:ea:1e:
0b:09:de:36:2c:58:4d:c9:7a:47:c8:14:39:d5:3c:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:34:5E:06:7F:B1:83:89:9F:05:81:08:37:E2:64:76:B1:8C:28:F6
X509v3 Authority Key Identifier:
keyid:40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/67FDF45C227611F0A1B70E88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.248.0/23
Signature Algorithm: sha256WithRSAEncryption
00:ff:c4:9d:79:7d:88:5c:a5:93:63:f3:2a:a8:66:b9:e6:a3:
0c:cb:39:d8:23:a4:50:67:89:d1:62:e5:20:8f:d7:82:7f:a6:
18:53:1a:6e:a3:e4:58:5f:2f:c6:20:e5:6f:00:22:ea:10:36:
05:f6:3e:71:87:98:1b:4f:49:eb:a1:18:ea:6b:e5:12:c4:f8:
80:0f:ff:1c:0b:25:89:3a:12:f5:cb:7d:14:94:7d:1d:ad:e6:
ea:52:e7:e7:3e:ad:3e:54:4e:23:4a:3b:6a:f5:c4:a5:5e:66:
db:64:6f:ec:1a:30:28:61:df:1d:b2:a6:e8:64:77:01:60:5f:
52:d5:3e:03:3c:65:a2:15:77:f9:69:25:31:21:3d:9d:de:39:
05:35:f7:87:20:32:dd:69:a8:9e:c2:a8:cb:2e:33:a6:e6:7c:
4c:33:4a:72:90:4d:38:d8:1e:00:88:44:75:72:94:78:dd:e3:
96:e2:76:f2:0a:90:8a:c9:9d:26:c7:10:28:9e:6f:55:1f:fb:
4a:10:6f:57:15:77:a6:10:8b:42:11:73:e6:8b:f1:2b:32:94:
60:06:51:b7:bd:8d:d6:35:7f:a8:31:d1:8d:c2:f0:c4:45:1d:
9a:cf:e9:f2:4f:94:2a:5b:fe:2b:21:f2:bb:ed:91:32:a5:45:
8e:b3:ba:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:36 2025 by rpki-client