Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/47515F7AFC9A11EF98FF8F99762E951A.roa
File: 47515F7AFC9A11EF98FF8F99762E951A.roa (raw, json)
Hash identifier: zzuqcx+Qk8fHbijx3N6wxSWePzlAFbedDahGSECDqt8=
Subject key identifier: C5:4B:73:3F:B9:C4:09:63:E6:10:24:DF:C4:4A:9C:9B:14:3C:71:18
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01E3
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/47515F7AFC9A11EF98FF8F99762E951A.roa
Signing time: Sun 09 Mar 2025 03:55:02 +0000
ROA not before: Sun 09 Mar 2025 03:54:58 +0000
ROA not after: Mon 09 Mar 2026 03:54:58 +0000
asID: 19905
IP address blocks: 102.208.96.0/24 maxlen: 24
102.208.97.0/24 maxlen: 24
102.208.98.0/24 maxlen: 24
102.208.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 16:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Mar 9 03:54:58 2025 GMT
Not After : Mar 9 03:54:58 2026 GMT
Subject: CN=67cd1116-0586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:8a:37:08:a4:de:d4:f3:ee:65:15:a4:dd:
e2:71:24:13:c9:bf:ca:be:40:08:03:3f:e7:6d:bf:
db:a3:b5:d8:b6:ed:d5:b0:cf:30:21:81:a7:c0:c1:
b4:47:a8:2c:38:fc:a6:ae:cb:f4:0a:df:bb:37:35:
5a:f0:c0:92:17:60:19:4c:1a:f0:8f:d1:c6:dc:94:
5a:90:9f:16:e7:b5:4e:9f:8e:58:af:a0:f5:fe:70:
69:d7:95:59:c3:49:09:b5:bf:93:84:a4:b5:87:ea:
59:03:86:b7:f5:07:77:7c:6d:4f:51:19:fa:bd:23:
ba:56:59:2e:61:5c:f6:7f:f1:2c:22:87:bd:85:88:
8f:94:f3:12:d1:29:21:b2:38:d3:bf:ae:69:11:25:
3f:c6:a3:2c:60:24:c2:d8:e9:06:07:68:54:b6:72:
aa:66:b7:66:15:b2:42:e0:8a:6d:aa:1f:bd:dd:19:
1b:67:4c:0d:6d:d0:a7:fa:c0:22:ba:0d:7e:2a:3d:
ba:b5:08:9f:06:04:83:26:82:69:cc:21:6e:48:82:
98:c0:e4:88:aa:34:2e:e1:fe:cd:48:30:b4:1b:c2:
ac:31:76:26:fe:b3:4c:c0:e9:09:eb:1f:45:f1:b2:
99:17:f7:0f:b1:43:5e:30:84:31:de:a0:66:5f:66:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:73:3F:B9:C4:09:63:E6:10:24:DF:C4:4A:9C:9B:14:3C:71:18
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/47515F7AFC9A11EF98FF8F99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.96.0/22
Signature Algorithm: sha256WithRSAEncryption
af:f6:44:46:37:f9:0a:0d:cf:93:b0:b2:c9:ae:a5:db:92:3e:
6b:4f:c7:3d:9d:39:7c:84:d1:31:ea:40:df:8b:2d:8b:b1:52:
9b:0f:ae:4a:d4:aa:af:be:ef:87:e8:3e:e4:c9:d5:66:0c:c9:
db:4b:4f:7c:cb:82:ec:75:5b:99:e0:52:69:65:24:5b:4a:d6:
17:f7:c9:07:27:ff:08:00:3c:56:8b:ee:f7:1e:73:4a:ba:fc:
9e:84:a6:a8:86:32:0b:8c:22:68:e9:7d:52:12:28:70:e4:bf:
08:95:5b:4e:64:6b:13:06:d3:f2:0a:8d:1c:5a:3b:14:d0:6d:
3c:0a:f3:46:81:1a:b9:d2:36:f5:a0:92:1b:89:1b:b3:07:34:
a0:6a:2d:8e:e6:67:d6:54:0c:71:b7:af:7f:f3:b9:22:2f:48:
ba:b1:2a:53:e9:16:31:77:64:36:56:9f:4a:91:c0:ca:b3:78:
94:49:46:3c:e2:b3:d8:66:ea:48:80:8f:97:47:e7:7d:33:4d:
50:6b:99:64:b6:ac:3a:69:de:34:b0:46:03:01:e8:7f:12:40:
fc:e9:49:04:04:72:24:4d:02:11:3c:eb:05:fd:80:33:93:99:
8b:2c:00:95:83:7b:b3:d7:33:21:3e:c7:5a:74:31:68:a8:12:
26:f9:f3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:52 2025 by rpki-client