Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/D7ADF964FBB611EFA2D27C89762E951A.roa
File: D7ADF964FBB611EFA2D27C89762E951A.roa (raw, json)
Hash identifier: uERKk3aR5HoFxbFbRwypSc8PPSuVExbO0k0CG0rpJFs=
Subject key identifier: C9:48:E3:74:B7:14:11:C7:00:37:39:F2:55:AE:24:67:EA:5F:70:BD
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01CC
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/D7ADF964FBB611EFA2D27C89762E951A.roa
Signing time: Sat 08 Mar 2025 00:46:59 +0000
ROA not before: Sat 08 Mar 2025 00:00:55 +0000
ROA not after: Sun 08 Mar 2026 00:00:55 +0000
asID: 19905
IP address blocks: 102.218.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Mar 2025 19:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Mar 8 00:00:55 2025 GMT
Not After : Mar 8 00:00:55 2026 GMT
Subject: CN=67cb9383-3acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:68:be:fc:aa:43:06:f8:49:c8:94:e5:31:
99:4f:81:16:84:fb:27:cb:4d:2a:9a:f7:4a:3f:07:
5f:94:b2:52:13:c8:ab:28:4f:46:2d:72:f4:d1:c3:
a8:7f:8c:37:00:62:25:15:c3:c1:48:cd:fb:a6:b6:
4e:e7:af:a6:7a:83:a0:e0:84:c8:55:f3:ef:ac:ec:
17:0c:32:25:de:0f:4a:f8:d2:15:1d:63:88:d9:93:
22:77:c4:ef:6a:d0:46:34:bf:e2:18:86:d4:f8:cb:
30:d3:27:24:7d:9c:e2:e2:81:67:5a:88:0d:07:ea:
f7:d7:69:4c:f1:a1:92:5e:8b:81:dc:34:e4:a3:6e:
6d:f3:99:d2:f4:2d:c2:e9:7a:f2:41:1f:91:01:ae:
93:af:23:8a:d0:81:f2:5b:0a:41:27:bc:44:3c:d1:
2c:f7:5c:ad:51:1f:1a:30:6e:b1:c0:78:3c:c0:cf:
d7:6c:f6:ad:a1:96:7d:58:c5:0e:ba:21:d0:e7:17:
d2:56:f0:98:3b:aa:41:fc:2b:ad:42:ed:e3:86:ff:
a0:c3:ce:ee:cf:c8:ca:98:b5:52:65:ee:cd:97:58:
10:7c:ff:c8:f2:d6:55:bb:1c:8c:0d:ca:ee:10:c7:
95:ce:5f:ed:1b:ae:9b:ee:bb:4b:6b:c3:ff:fb:3c:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:48:E3:74:B7:14:11:C7:00:37:39:F2:55:AE:24:67:EA:5F:70:BD
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/D7ADF964FBB611EFA2D27C89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.48.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:2e:1d:69:53:af:3a:9f:4f:4f:56:f3:ce:e8:6e:e5:d5:13:
8c:31:f1:20:40:e1:a4:04:32:2f:df:9a:fd:37:a5:04:b3:e4:
e0:f3:46:27:ad:05:f9:2a:16:3b:cb:71:0e:6f:57:a8:9f:7d:
5f:30:c1:d7:10:ca:b0:e8:af:71:c0:af:ba:86:48:78:ff:d7:
20:42:78:49:51:57:82:cd:74:60:67:af:e2:3f:b7:ef:0b:21:
39:71:0f:67:58:71:2d:44:e9:8c:5a:90:66:6e:f3:20:21:6c:
d7:ae:40:12:c2:59:64:23:6a:77:76:6a:a4:f2:ee:05:6c:d7:
10:16:25:7b:02:b7:49:aa:ab:fa:63:91:38:19:45:c0:3b:d3:
7c:6c:4c:4b:41:b9:8d:d3:c4:7f:14:6c:1f:0d:6d:5f:36:a7:
d3:4c:79:1f:35:28:ba:24:35:a6:2e:5f:9b:12:50:75:c6:1c:
5f:4d:11:6f:a4:eb:2f:39:6c:7a:83:5b:2f:be:0a:ab:b4:4c:
13:60:db:02:7f:fc:4c:a7:5d:dc:fd:59:4c:f9:47:37:14:fb:
49:df:93:af:9e:0c:c0:95:7d:50:fa:6e:51:a8:f7:7b:f9:89:
7c:33:d0:b4:ec:f3:37:7c:1e:7e:4f:c0:2b:07:da:0d:6f:3b:
5c:04:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:57:09 2025 by rpki-client