Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/6E3125D6FC9911EF9723E294762E951A.roa
File: 6E3125D6FC9911EF9723E294762E951A.roa (raw, json)
Hash identifier: tFTmOXSpu/f3bSWKoBuWUJ/GEzMZRQuODEYHFe4he3g=
Subject key identifier: E7:DD:1A:15:91:43:D7:DA:39:05:B2:67:33:A5:C5:87:33:9B:FC:7D
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01DA
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/6E3125D6FC9911EF9723E294762E951A.roa
Signing time: Sun 09 Mar 2025 03:48:58 +0000
ROA not before: Sun 09 Mar 2025 03:48:54 +0000
ROA not after: Mon 09 Mar 2026 03:48:54 +0000
asID: 328988
IP address blocks: 102.208.96.0/24 maxlen: 24
102.208.97.0/24 maxlen: 24
102.208.98.0/24 maxlen: 24
102.208.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 16:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Mar 9 03:48:54 2025 GMT
Not After : Mar 9 03:48:54 2026 GMT
Subject: CN=67cd0faa-1859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:d7:a6:fd:66:68:c4:9f:e6:27:2f:6e:05:
d7:e0:57:ad:38:fa:91:ae:87:6d:79:d7:22:60:76:
3b:ee:73:13:04:21:89:38:ba:95:54:7b:f6:a4:62:
1e:da:45:22:d9:f1:4a:f8:b2:e6:c6:9a:d3:b5:ce:
67:c3:76:c9:be:ec:f2:a0:92:31:ef:fc:f7:64:2c:
f8:29:49:4e:94:5a:d5:5d:75:b9:67:72:1d:23:fd:
41:02:ee:e2:cf:75:40:1e:29:69:84:d1:44:00:10:
34:f2:11:39:a2:28:69:c7:e4:d7:a0:b7:33:21:96:
37:3e:38:45:96:bb:ab:ef:f5:71:99:99:18:98:bd:
54:61:8e:cd:00:7f:43:85:d5:08:e6:81:31:0a:41:
b3:45:be:0e:ab:02:75:c9:2c:c3:11:fe:52:75:0d:
34:8b:d5:ac:e6:4d:01:5d:4f:53:3b:fa:15:fa:85:
21:00:03:4c:13:e8:7e:1f:16:b6:0b:79:b8:14:91:
44:a7:cf:e0:88:1f:e5:63:48:1b:4d:15:95:21:d0:
c7:b6:b2:85:37:8c:bb:11:09:94:bf:65:a6:5d:bf:
cc:a2:da:1c:d1:75:b1:ef:8b:3c:95:d6:ca:35:95:
88:54:ab:58:ab:bc:29:26:e4:83:09:d7:eb:ba:e9:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:1A:15:91:43:D7:DA:39:05:B2:67:33:A5:C5:87:33:9B:FC:7D
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/6E3125D6FC9911EF9723E294762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.96.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:b5:4b:bb:97:df:ed:5c:bd:a6:59:53:c5:87:8d:03:4f:82:
06:4b:eb:18:36:da:a6:c4:e1:45:92:7e:cd:f6:67:b4:ad:85:
2b:b4:b6:e6:3e:43:ac:fa:b0:3c:c6:68:63:97:5f:23:1c:69:
22:e5:5e:12:6e:c7:62:01:91:8c:aa:c4:eb:cd:96:10:85:af:
e0:c5:23:61:15:76:9e:3e:da:47:8a:b1:99:5d:a0:eb:e5:9f:
0c:dd:e1:d4:62:5f:cd:98:0c:ea:ef:a1:a0:42:6f:54:6d:7c:
10:51:4d:3b:44:35:f0:2e:ef:ce:08:b0:06:6e:5b:c1:30:1e:
4a:17:56:6f:0d:4b:9a:5c:47:f9:fe:69:4e:2a:7a:3a:19:8b:
33:5e:71:ad:99:09:de:8e:76:fa:e0:4c:03:55:6a:d2:77:11:
e5:7a:42:80:7d:80:71:35:0c:33:b0:4f:d3:27:8b:12:ac:ec:
ff:d6:99:fd:62:bb:11:9e:95:b4:a1:c2:f3:22:04:3b:96:a4:
4d:53:93:62:68:d3:96:db:21:78:56:87:35:d5:88:f6:20:71:
b3:86:a7:c0:22:36:90:d0:a2:c7:52:0d:8a:77:1b:d3:a1:4a:
56:91:31:ec:90:0a:95:bd:19:11:34:94:f4:99:39:5e:48:c4:
27:58:9e:d5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAdowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0EzNTFBRjExMC8GA1UEBRMoNThEQTNCRTMzMUE2MTJBQUFFNEY2QTMwNjM3NzA0
MDYzQUMzREQ0MjAeFw0yNTAzMDkwMzQ4NTRaFw0yNjAzMDkwMzQ4NTRaMBgxFjAU
BgNVBAMTDTY3Y2QwZmFhLTE4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJItem/WZoxJ/mJy9uBdfgV604+pGuh2151yJgdjvucxMEIYk4upVUe/ak
Yh7aRSLZ8Ur4subGmtO1zmfDdsm+7PKgkjHv/PdkLPgpSU6UWtVddblnch0j/UEC
7uLPdUAeKWmE0UQAEDTyETmiKGnH5NegtzMhljc+OEWWu6vv9XGZmRiYvVRhjs0A
f0OF1QjmgTEKQbNFvg6rAnXJLMMR/lJ1DTSL1azmTQFdT1M7+hX6hSEAA0wT6H4f
FrYLebgUkUSnz+CIH+VjSBtNFZUh0Me2soU3jLsRCZS/ZaZdv8yi2hzRdbHvizyV
1so1lYhUq1irvCkm5IMJ1+u66ZVXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU590a
FZFD19o5BbJnM6XFhzOb/H0wHwYDVR0jBBgwFoAUWNo74zGmEqquT2owY3cEBjrD
3UIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBMzUxL0Q4RTZDNUVBQzJFNjExRUU4QjkwNjk3Qjc3NTQxMkU2L1dObzc0
ekdtRXFxdVQyb3dZM2NFQmpyRDNVSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dObzc0ekdtRXFxdVQyb3dZM2NFQmpyRDNVSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNBMzUxL0Q4RTZDNUVBQzJFNjExRUU4QjkwNjk3Qjc3
NTQxMkU2LzZFMzEyNUQ2RkM5OTExRUY5NzIzRTI5NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0GAwDQYJKoZIhvcNAQEL
BQADggEBAK21S7uX3+1cvaZZU8WHjQNPggZL6xg22qbE4UWSfs32Z7SthSu0tuY+
Q6z6sDzGaGOXXyMcaSLlXhJux2IBkYyqxOvNlhCFr+DFI2EVdp4+2keKsZldoOvl
nwzd4dRiX82YDOrvoaBCb1RtfBBRTTtENfAu784IsAZuW8EwHkoXVm8NS5pcR/n+
aU4qejoZizNeca2ZCd6OdvrgTANVatJ3EeV6QoB9gHE1DDOwT9MnixKs7P/Wmf1i
uxGelbShwvMiBDuWpE1Tk2Jo05bbIXhWhzXViPYgcbOGp8AiNpDQosdSDYp3G9Oh
SlaRMeyQCpW9GRE0lPSZOV5IxCdYntU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:54 2025 by rpki-client