Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/C3C8725CFC9811EFBDEE5090762E951A.roa
File: C3C8725CFC9811EFBDEE5090762E951A.roa (raw, json)
Hash identifier: AHjNuSAtq0qzmRCGup4GmtEZkj4RpAF3usdNj6aN+i8=
Subject key identifier: CF:F7:37:54:06:93:86:C7:05:65:FD:47:43:AC:14:76:E4:FC:58:59
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01D5
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/C3C8725CFC9811EFBDEE5090762E951A.roa
Signing time: Sun 09 Mar 2025 03:44:12 +0000
ROA not before: Sun 09 Mar 2025 03:44:08 +0000
ROA not after: Mon 09 Mar 2026 03:44:08 +0000
asID: 328988
IP address blocks: 102.218.48.0/24 maxlen: 24
102.218.49.0/24 maxlen: 24
102.218.50.0/24 maxlen: 24
102.218.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 16:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Mar 9 03:44:08 2025 GMT
Not After : Mar 9 03:44:08 2026 GMT
Subject: CN=67cd0e8c-2e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:d9:7b:a2:e4:72:fd:d4:f5:0e:0a:57:f9:
4d:fe:04:51:f8:60:0f:d3:16:9e:90:da:18:43:7b:
0a:f2:dc:c7:4c:6f:07:9a:32:d1:0b:20:b2:60:61:
28:fa:6b:de:22:76:fb:b6:ef:85:13:f6:a7:5a:4f:
36:b3:36:12:d3:3d:fc:45:5d:a1:1c:06:54:d6:1e:
d4:6b:8a:96:a9:7b:d3:4a:8d:5a:88:a6:6f:d4:b1:
ae:fc:0b:eb:ad:d6:da:ae:d4:ea:1e:7e:72:64:e4:
78:6e:4b:b1:a0:26:e7:be:70:a6:f0:7b:0b:9b:9f:
40:e9:a0:28:81:8d:23:9e:fe:e9:46:28:db:4b:56:
20:d9:1d:4b:be:09:9b:72:d6:f5:95:0e:1a:13:56:
da:23:84:c7:2e:95:82:7d:38:0e:69:80:3e:78:9b:
3f:e4:08:75:66:c7:17:80:32:c7:98:43:16:c0:00:
31:f8:ce:73:0e:a9:f0:47:75:19:97:a5:30:06:3c:
2a:d1:0b:f7:5a:79:e2:f6:50:d1:5a:79:89:88:de:
c9:af:62:82:1d:09:36:bc:0b:3b:26:b0:56:f3:6c:
0c:f1:42:fa:ce:8e:0f:a5:6d:5a:61:4c:0d:49:bf:
7b:98:24:e0:4f:1b:9d:75:b4:0c:98:dc:e7:68:01:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F7:37:54:06:93:86:C7:05:65:FD:47:43:AC:14:76:E4:FC:58:59
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/C3C8725CFC9811EFBDEE5090762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.48.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:08:8b:fb:cc:74:5a:db:1d:05:29:ab:83:e8:20:32:4d:9a:
7e:d5:53:3c:22:df:47:71:58:33:49:09:94:67:d3:d5:ad:20:
ba:df:db:ad:e3:75:2b:ae:e7:94:ab:8f:22:31:cc:f1:f2:e7:
fd:c9:c1:69:33:95:8c:e4:04:4c:33:90:5b:f5:65:6a:a0:8c:
cb:98:c5:fe:5c:90:88:a2:16:82:d0:de:1f:0f:af:62:25:71:
61:4c:93:f5:af:c9:5b:ed:b1:c2:9f:a2:2c:8f:e1:ff:8c:4e:
ce:ae:a8:b7:3c:84:bb:85:c0:70:e3:04:e4:5a:bb:27:00:86:
57:47:f3:d5:34:cd:99:8c:48:c3:b8:68:7a:52:d9:cc:fd:63:
15:02:d8:ae:4c:26:8c:fb:93:0d:fa:43:41:57:2d:50:7e:dd:
83:c1:ca:ac:b2:87:0d:70:37:08:aa:20:09:74:b8:9f:09:d5:
8c:73:92:02:27:c9:de:9c:38:04:e9:ed:93:45:a8:3e:39:d6:
4a:0f:22:e7:82:11:a1:3b:0a:be:58:82:83:76:e4:d6:ea:8b:
3c:ea:0f:34:96:14:09:4d:d1:e4:9c:f2:7b:45:d4:f9:3a:a6:
4f:9b:12:ae:21:90:bb:27:68:e6:1b:4b:de:12:30:19:9b:d9:
f5:f6:e4:a9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0EzNTFBRjExMC8GA1UEBRMoNThEQTNCRTMzMUE2MTJBQUFFNEY2QTMwNjM3NzA0
MDYzQUMzREQ0MjAeFw0yNTAzMDkwMzQ0MDhaFw0yNjAzMDkwMzQ0MDhaMBgxFjAU
BgNVBAMTDTY3Y2QwZThjLTJlMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCte9l7ouRy/dT1DgpX+U3+BFH4YA/TFp6Q2hhDewry3MdMbweaMtELILJg
YSj6a94idvu274UT9qdaTzazNhLTPfxFXaEcBlTWHtRripape9NKjVqIpm/Usa78
C+ut1tqu1OoefnJk5HhuS7GgJue+cKbwewubn0DpoCiBjSOe/ulGKNtLViDZHUu+
CZty1vWVDhoTVtojhMculYJ9OA5pgD54mz/kCHVmxxeAMseYQxbAADH4znMOqfBH
dRmXpTAGPCrRC/daeeL2UNFaeYmI3smvYoIdCTa8CzsmsFbzbAzxQvrOjg+lbVph
TA1Jv3uYJOBPG511tAyY3OdoAWHNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUz/c3
VAaThscFZf1HQ6wUduT8WFkwHwYDVR0jBBgwFoAUWNo74zGmEqquT2owY3cEBjrD
3UIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBMzUxL0Q4RTZDNUVBQzJFNjExRUU4QjkwNjk3Qjc3NTQxMkU2L1dObzc0
ekdtRXFxdVQyb3dZM2NFQmpyRDNVSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dObzc0ekdtRXFxdVQyb3dZM2NFQmpyRDNVSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNBMzUxL0Q4RTZDNUVBQzJFNjExRUU4QjkwNjk3Qjc3
NTQxMkU2L0MzQzg3MjVDRkM5ODExRUZCREVFNTA5MDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2jAwDQYJKoZIhvcNAQEL
BQADggEBAM8Ii/vMdFrbHQUpq4PoIDJNmn7VUzwi30dxWDNJCZRn09WtILrf263j
dSuu55SrjyIxzPHy5/3JwWkzlYzkBEwzkFv1ZWqgjMuYxf5ckIiiFoLQ3h8Pr2Il
cWFMk/WvyVvtscKfoiyP4f+MTs6uqLc8hLuFwHDjBORauycAhldH89U0zZmMSMO4
aHpS2cz9YxUC2K5MJoz7kw36Q0FXLVB+3YPByqyyhw1wNwiqIAl0uJ8J1YxzkgIn
yd6cOATp7ZNFqD451koPIueCEaE7Cr5YgoN25NbqizzqDzSWFAlN0eSc8ntF1Pk6
pk+bEq4hkLsnaOYbS94SMBmb2fX25Kk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:01 2025 by rpki-client