Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/EF98DBD8326711F0ACC23EB0DAE4EC9C.roa
File: EF98DBD8326711F0ACC23EB0DAE4EC9C.roa (raw, json)
Hash identifier: POhGOmnNnB9EGvKw50W7OrdnKdm2e7Uv2QZIilKh1K0=
Subject key identifier: 1A:45:D6:3E:EB:92:35:A2:3F:86:23:71:AF:5E:AC:31:4D:40:22:25
Certificate issuer: /CN=F36C6D54AF/serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Certificate serial: 30
Authority key identifier: 40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/EF98DBD8326711F0ACC23EB0DAE4EC9C.roa
Signing time: Fri 16 May 2025 15:10:43 +0000
ROA not before: Fri 16 May 2025 15:10:39 +0000
ROA not after: Fri 15 May 2026 15:10:39 +0000
asID: 22690
IP address blocks: 102.207.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6D54AF, serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Validity
Not Before: May 16 15:10:39 2025 GMT
Not After : May 15 15:10:39 2026 GMT
Subject: CN=68275573-c1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9b:04:36:af:96:32:37:a2:6a:d4:82:c1:fe:
e6:b0:85:94:5b:de:c3:6d:fd:98:c5:a2:bf:2e:26:
07:a6:98:55:85:b7:67:99:4c:4d:48:ab:ce:8c:bd:
e0:f0:21:e2:05:cd:b7:9b:75:9c:12:c7:31:63:b4:
df:53:1f:03:5e:0d:81:51:9a:07:8e:be:46:d8:c5:
7c:d1:e0:91:96:1e:76:e8:a8:98:9d:26:4e:cb:ac:
00:8b:eb:a7:5b:75:d6:a0:08:a8:6b:87:33:4b:42:
6c:a8:64:e4:70:c7:9b:76:a7:50:27:e1:c1:39:d4:
38:85:c6:0e:62:58:30:04:4f:45:22:f3:7e:81:a5:
eb:fb:0c:d0:0c:b9:a5:4b:ce:b3:d1:3b:ee:d8:f1:
62:37:fc:64:75:65:1c:8e:3a:d0:18:cd:42:e3:bf:
6c:84:38:88:c5:31:6f:22:70:59:34:5b:f0:83:9f:
0b:38:6f:e9:60:7e:0b:4c:a9:b7:1f:43:75:b7:65:
96:e7:43:f3:cf:02:75:69:11:71:c1:d6:f2:b6:81:
ed:a6:2c:70:12:e9:70:3f:cc:db:49:30:60:44:c8:
59:f6:b8:9d:42:b8:5a:4c:4a:8e:8e:b2:a4:c4:cd:
f9:2f:4a:9f:17:8c:fd:98:3b:d4:41:20:df:17:e0:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:D6:3E:EB:92:35:A2:3F:86:23:71:AF:5E:AC:31:4D:40:22:25
X509v3 Authority Key Identifier:
keyid:40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/EF98DBD8326711F0ACC23EB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:db:0c:72:dc:83:d6:f1:f1:e3:36:ad:55:3e:58:04:7d:9a:
6a:af:ea:80:7e:6b:7b:d3:27:83:50:0c:e5:41:16:ba:98:9a:
ec:c7:67:60:fc:66:a8:aa:eb:c0:87:b2:ee:c0:0b:09:60:de:
4f:5a:16:6c:58:72:f1:cb:47:7d:3a:dc:1f:6a:ca:dc:d5:17:
25:ae:0e:57:1e:6e:d4:3a:ba:64:dc:b6:eb:c8:c2:b2:21:f6:
25:1a:62:a6:21:ec:1f:73:9f:58:e9:ff:e2:7c:88:ab:f1:c6:
5d:04:67:71:20:53:7e:b3:be:41:8f:49:30:ba:c0:ec:bd:9d:
f2:34:eb:c1:85:38:28:b3:20:e5:6b:60:7c:29:8e:c0:d1:8c:
21:cc:17:9e:ea:39:14:49:45:72:46:76:6a:9c:4a:15:10:68:
54:70:fc:a8:75:73:72:c2:52:01:77:03:65:fe:36:9f:1c:51:
72:9a:b1:de:bc:c1:6d:eb:55:5e:1d:cc:33:78:be:08:db:8a:
84:9e:eb:c5:9c:9c:30:65:e0:e3:c3:d6:72:4c:03:f1:a1:ab:
7d:d9:fa:c5:82:3f:cf:fa:1c:51:d8:f1:1f:cc:8b:d0:d1:9f:
5d:86:88:cc:69:7d:bf:2b:ed:21:87:0a:e4:0f:ee:71:30:8b:
59:ce:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:44:35 2025 by rpki-client