Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/D4E1968E355C11F094C7907FDAE4EC9C.roa
File: D4E1968E355C11F094C7907FDAE4EC9C.roa (raw, json)
Hash identifier: tHwXLTBbRgvQGwZwtcGPzxJ4GnU+wIc37QvLNOmCNYU=
Subject key identifier: 34:FA:73:CB:E4:81:5E:E4:68:B7:FB:FC:F4:68:A7:4D:72:31:6A:1F
Certificate issuer: /CN=F36C6D54AF/serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Certificate serial: 3A
Authority key identifier: 40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/D4E1968E355C11F094C7907FDAE4EC9C.roa
Signing time: Tue 20 May 2025 09:28:48 +0000
ROA not before: Tue 20 May 2025 09:28:43 +0000
ROA not after: Wed 20 May 2026 09:28:43 +0000
asID: 22690
IP address blocks: 102.207.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 10:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6D54AF, serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Validity
Not Before: May 20 09:28:43 2025 GMT
Not After : May 20 09:28:43 2026 GMT
Subject: CN=682c4b50-11dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:56:52:d3:20:88:78:9f:83:9a:26:44:8d:98:
57:cc:05:c8:65:90:b2:58:fd:96:f8:2b:e2:9a:9e:
05:ce:91:d7:25:c3:f8:79:81:13:70:3a:2a:eb:24:
0d:77:12:66:25:68:38:95:85:d0:09:d5:14:36:b0:
07:86:fc:41:67:d9:ac:53:38:83:50:c9:86:ba:fa:
26:32:96:76:64:d6:d9:e9:ac:87:c3:2c:32:91:54:
34:e3:fd:67:6f:15:b5:08:4f:30:ed:72:c6:d7:d9:
b2:2b:c2:5f:c0:de:7b:54:ff:9d:d0:df:59:dd:a2:
aa:dd:df:37:67:65:c3:95:8d:a8:93:4d:84:70:02:
59:1a:1f:a5:c3:d8:2c:13:68:57:bf:ee:6f:aa:e1:
35:1a:5b:f7:0c:11:e5:22:19:72:c1:3e:48:a4:fe:
c2:ed:6f:ef:82:26:b2:78:fe:53:8a:ae:96:f1:bf:
51:cf:43:7c:95:d5:92:93:74:81:d0:93:4d:fd:51:
1c:08:14:d7:4e:7d:47:57:93:65:a7:6e:ab:57:f1:
16:2c:05:31:4b:d0:4f:d4:ac:78:cc:10:2c:e2:70:
6a:ea:d9:3b:72:c6:0f:93:fb:b3:06:b3:ab:eb:fc:
d1:a7:4a:67:7a:f3:4d:a5:a3:4d:38:8c:36:01:9b:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FA:73:CB:E4:81:5E:E4:68:B7:FB:FC:F4:68:A7:4D:72:31:6A:1F
X509v3 Authority Key Identifier:
keyid:40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/D4E1968E355C11F094C7907FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d0:99:db:cf:4d:46:b8:fc:08:d3:b0:d0:97:ab:bf:4d:88:
98:5e:58:47:c9:5e:00:17:62:75:ce:98:9e:be:30:23:5b:cf:
66:7c:0d:b8:02:af:3f:48:5e:08:39:45:2b:c4:ff:de:54:35:
cf:80:9d:c6:17:61:31:ad:0e:dd:d8:ee:e4:82:ae:9f:b2:70:
b6:da:87:cb:78:66:47:03:11:80:81:72:5d:fb:14:84:ff:62:
15:d4:61:6f:a2:b9:95:c3:a3:8f:36:ad:f7:f0:64:a4:d2:11:
11:53:27:c3:36:38:69:49:eb:35:c3:26:29:80:2b:a4:5f:cb:
e8:1b:ea:26:30:a0:a5:f6:dd:7f:63:a2:2a:97:65:55:62:1b:
7d:95:c5:b4:ad:9e:e0:45:04:81:8e:21:4f:d9:1f:d3:b7:8e:
d8:4f:e4:3d:ee:a1:9d:7a:a1:34:d3:9d:a8:0e:76:35:2a:fd:
7b:11:6d:34:ab:49:88:38:cd:c1:98:68:7e:70:1b:69:c6:05:
c4:8d:c4:8a:76:13:ed:8e:49:dd:7e:db:a0:34:55:a1:c5:b9:
2b:7b:58:b8:09:c9:bd:6f:58:b8:ca:47:46:06:3e:c3:4d:67:
42:b8:30:f3:16:a3:e1:15:c7:ff:81:c3:68:70:e7:d1:96:43:
a6:e7:d0:6c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBOjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NkQ1NEFGMTEwLwYDVQQFEyg0MDg5NTg4ODFCOTRFMzU2ODFFREMxRDFERjA4NTlG
NzcxMzZBMEE1MB4XDTI1MDUyMDA5Mjg0M1oXDTI2MDUyMDA5Mjg0M1owGDEWMBQG
A1UEAxMNNjgyYzRiNTAtMTFkZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOdWUtMgiHifg5omRI2YV8wFyGWQslj9lvgr4pqeBc6R1yXD+HmBE3A6Kusk
DXcSZiVoOJWF0AnVFDawB4b8QWfZrFM4g1DJhrr6JjKWdmTW2emsh8MsMpFUNOP9
Z28VtQhPMO1yxtfZsivCX8Dee1T/ndDfWd2iqt3fN2dlw5WNqJNNhHACWRofpcPY
LBNoV7/ub6rhNRpb9wwR5SIZcsE+SKT+wu1v74Imsnj+U4qulvG/Uc9DfJXVkpN0
gdCTTf1RHAgU1059R1eTZaduq1fxFiwFMUvQT9SseMwQLOJwaurZO3LGD5P7swaz
q+v80adKZ3rzTaWjTTiMNgGbsV0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQ0+nPL
5IFe5Gi3+/z0aKdNcjFqHzAfBgNVHSMEGDAWgBRAiViIG5TjVoHtwdHfCFn3cTag
pTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzZENTQvRjQ2RDExODYyMjc0MTFGMEEwRkRGMjdFREFFNEVDOUMvUUlsWWlC
dVU0MWFCN2NIUjN3aFo5M0Uyb0tVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUUlsWWlCdVU0MWFCN2NIUjN3aFo5M0Uyb0tVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZENTQvRjQ2RDExODYyMjc0MTFGMEEwRkRGMjdFREFF
NEVDOUMvRDRFMTk2OEUzNTVDMTFGMDk0Qzc5MDdGREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbP+TANBgkqhkiG9w0BAQsF
AAOCAQEAp9CZ289NRrj8CNOw0Jerv02ImF5YR8leABdidc6Ynr4wI1vPZnwNuAKv
P0heCDlFK8T/3lQ1z4CdxhdhMa0O3dju5IKun7JwttqHy3hmRwMRgIFyXfsUhP9i
FdRhb6K5lcOjjzat9/BkpNIREVMnwzY4aUnrNcMmKYArpF/L6BvqJjCgpfbdf2Oi
KpdlVWIbfZXFtK2e4EUEgY4hT9kf07eO2E/kPe6hnXqhNNOdqA52NSr9exFtNKtJ
iDjNwZhofnAbacYFxI3EinYT7Y5J3X7boDRVocW5K3tYuAnJvW9YuMpHRgY+w01n
Qrgw8xaj4RXH/4HDaHDn0ZZDpufQbA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:51:22 2025 by rpki-client