Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/7FED06DEFBB611EFA68A6185762E951A.roa
File: 7FED06DEFBB611EFA68A6185762E951A.roa (raw, json)
Hash identifier: xswiz6+mvTt/FxPVqMXOAb0IaazJYyijkTvzf8ePTY0=
Subject key identifier: FD:7B:F3:94:39:75:BB:6C:CB:25:28:AC:B8:CD:3E:B7:2A:4D:48:AD
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01CA
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/7FED06DEFBB611EFA68A6185762E951A.roa
Signing time: Sat 08 Mar 2025 00:44:32 +0000
ROA not before: Sat 08 Mar 2025 00:00:28 +0000
ROA not after: Sun 08 Mar 2026 00:00:28 +0000
asID: 19905
IP address blocks: 102.213.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Mar 2025 19:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Mar 8 00:00:28 2025 GMT
Not After : Mar 8 00:00:28 2026 GMT
Subject: CN=67cb92f0-5559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:b8:3a:fd:ff:d3:16:36:65:d7:18:73:f4:
7c:e1:c9:6b:36:58:c4:2c:0c:0d:9e:7b:89:83:54:
4e:ed:55:1f:fb:1b:d9:fe:07:ab:a6:82:96:b4:4b:
37:d9:e9:e7:09:58:58:7d:bd:36:ca:ea:67:6e:59:
9a:ed:87:59:60:bf:a7:74:f9:c9:b8:cc:ff:87:e7:
82:33:b8:bd:f0:f0:36:c9:c2:7d:39:6d:52:15:df:
9f:f8:1a:1f:64:7b:7e:dc:18:ff:38:2d:27:46:a7:
7b:f6:8a:1e:99:4e:1a:33:b3:8b:83:73:a3:b6:3d:
27:4b:4e:97:6c:22:5a:bb:27:18:ee:48:74:62:7a:
d3:46:4b:63:b0:ea:21:ee:20:62:53:e1:27:17:79:
97:b9:38:00:49:0e:22:e0:b9:5c:a7:17:ec:87:1b:
93:a5:64:46:38:a2:17:d9:fe:d1:e3:37:14:5b:ee:
e6:d2:92:d7:83:1c:82:c1:38:e2:b2:4c:08:17:95:
ce:af:c3:11:35:88:ae:8d:21:35:58:61:04:68:35:
1c:42:b8:e1:4b:b6:4e:dc:52:c8:d2:34:15:41:25:
1e:ff:cb:0f:81:99:42:2b:04:04:62:89:e9:b6:e6:
4d:1b:45:97:73:bf:26:fa:66:d5:be:e0:ed:25:9a:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7B:F3:94:39:75:BB:6C:CB:25:28:AC:B8:CD:3E:B7:2A:4D:48:AD
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/7FED06DEFBB611EFA68A6185762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.68.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:94:36:95:a1:6e:84:c4:88:18:90:b2:68:60:29:ba:3a:46:
7d:3c:e3:13:f4:1c:05:19:32:9e:16:56:ce:d7:e3:35:cb:b0:
34:3e:1c:d2:69:93:9c:fc:de:55:f2:de:b5:a6:b9:b9:65:d7:
f9:0e:02:ba:a4:f5:be:89:d9:99:7c:aa:a6:f7:08:e1:65:6b:
cc:eb:04:b8:3b:a0:f3:f6:4b:87:7b:fb:10:19:ea:ef:80:09:
58:20:1d:ec:5d:b4:50:5d:7e:df:51:74:76:4e:2f:50:c5:e1:
d2:d3:69:eb:a5:a4:63:0d:66:7d:61:59:b2:90:eb:31:5a:09:
5a:75:c1:1b:17:af:8d:2b:6a:e9:3e:ad:5c:1d:9b:71:34:ec:
1d:74:f7:b4:ae:ab:04:51:1e:88:cd:e1:14:dc:fe:f5:35:ab:
ad:9b:55:5b:19:4c:9e:43:e0:49:5c:4a:56:5d:9b:14:f5:bd:
da:5e:4c:33:30:a7:47:84:45:6e:42:3f:d0:07:ae:94:29:0f:
40:4c:b7:ae:27:da:bf:d2:85:48:74:9d:72:bb:da:8b:b1:51:
48:b0:0d:b3:71:58:35:74:09:e0:87:7e:d4:99:6f:a6:58:28:
a0:4c:e8:df:b1:e2:d8:28:27:03:af:01:66:df:80:5b:a6:d5:
a8:06:c6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:12 2025 by rpki-client