Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/9C611702F3B111EC8FDBCB8CF1222468.roa
File: 9C611702F3B111EC8FDBCB8CF1222468.roa (raw, json)
Hash identifier: RZVEZAwypsBwC/AmKzUWukVJaSGKeWWHqkQdvXBar34=
Subject key identifier: 2C:0D:EA:FA:11:36:A1:18:A6:8F:04:3F:DE:AF:9F:55:88:57:9E:F9
Certificate issuer: /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial: 73
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/9C611702F3B111EC8FDBCB8CF1222468.roa
Signing time: Fri 24 Jun 2022 11:34:30 +0000
ROA not before: Fri 24 Jun 2022 11:34:26 +0000
ROA not after: Thu 24 Jun 2032 11:34:26 +0000
asID: 6453
IP address blocks: 102.112.0.0/13 maxlen: 24
196.20.128.0/17 maxlen: 24
196.192.0.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jun 2022 17:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3930AF
Validity
Not Before: Jun 24 11:34:26 2022 GMT
Not After : Jun 24 11:34:26 2032 GMT
Subject: CN=62b5a146-f7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:23:19:c7:be:5a:ee:b4:dc:6d:d8:12:5c:
58:77:d7:19:6a:c1:9d:9e:95:5b:c5:b5:ea:dc:f9:
fd:ef:46:cd:bf:ec:ab:b3:0e:1e:94:6b:47:1e:e7:
07:c3:c7:85:59:40:09:8d:b1:f3:0b:fc:49:f9:ff:
29:80:cd:20:39:9e:a7:0a:e3:d3:7d:8a:f1:a7:16:
3e:2c:70:3d:71:41:0c:c9:e2:98:5d:dd:05:38:fe:
28:d2:4c:5b:09:98:c4:7a:c2:86:43:82:76:57:3e:
8a:42:a6:23:e7:9b:b6:2f:94:eb:4e:11:b3:d1:47:
a8:7f:27:d6:4f:89:68:1a:28:84:cc:06:f5:5f:40:
d7:24:9e:4d:61:14:66:09:b6:e6:ef:d8:a9:89:9c:
3a:2f:6c:76:52:b6:4b:3e:97:cd:80:98:5e:2d:41:
8d:76:ba:fd:bf:e6:a0:1c:7d:18:7e:13:5a:8c:42:
87:27:68:64:21:84:8b:ce:71:ff:9c:8c:73:fc:f7:
8b:2b:90:a4:43:15:c2:fb:37:0d:53:8e:50:38:9a:
de:bf:d3:c5:d6:47:b0:83:5e:0a:c1:87:2d:bf:93:
e6:02:2d:52:76:8d:08:c6:42:12:40:a6:6e:09:fe:
bd:fc:1d:27:79:16:d1:de:bb:2b:ef:e4:27:fe:be:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0D:EA:FA:11:36:A1:18:A6:8F:04:3F:DE:AF:9F:55:88:57:9E:F9
X509v3 Authority Key Identifier:
keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/9C611702F3B111EC8FDBCB8CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.112.0.0/13
196.20.128.0/17
196.192.0.0/20
Signature Algorithm: sha256WithRSAEncryption
88:8f:d7:af:70:27:b2:91:92:e8:f0:86:63:34:b4:4b:bd:db:
38:ed:f6:9e:3f:6a:60:c3:13:90:2b:ad:c4:da:18:eb:df:ae:
a2:44:d5:ca:f1:8d:dc:46:d9:4b:fd:46:8f:bf:ef:9c:95:aa:
e6:63:77:59:95:32:cc:0a:e0:28:b5:a5:24:63:0b:45:4d:97:
c3:07:d3:36:8e:bb:51:06:c9:22:14:73:86:20:59:87:c7:f6:
8d:4e:98:be:1a:e8:55:78:fa:34:1f:9a:63:e3:9c:21:92:1e:
18:d8:7e:28:ad:4b:b3:c5:d6:f2:d0:91:d4:97:b5:f7:36:53:
59:ad:ff:c2:20:9a:e4:97:e4:2e:26:ab:eb:69:bf:da:06:a2:
d3:f3:55:bd:3f:49:46:e1:7d:3d:3e:38:e3:8f:ef:7a:15:ae:
d9:e2:d6:bf:95:7c:12:c0:ef:17:8b:9b:00:23:b0:f1:8d:3c:
52:41:11:29:72:9f:70:e8:11:70:0d:d0:d2:a7:3f:ea:3e:51:
76:8d:1b:b3:8a:80:aa:e4:93:18:0a:31:be:97:ca:bc:19:fc:
29:98:94:23:67:4c:0e:6b:8f:42:48:d3:68:7d:04:30:1d:67:
c2:89:81:9a:b8:f4:a8:3c:5e:aa:69:f0:45:57:67:35:e7:39:
18:78:5d:28
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIBczANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZE
MzkzMEFGMTEwLwYDVQQFEygzNUNGMDY3REMyNkVFNDg5NUY0QjE2QUQ5QkQzMDBG
RUFCQzNBMzUzMB4XDTIyMDYyNDExMzQyNloXDTMyMDYyNDExMzQyNlowGDEWMBQG
A1UEAwwNNjJiNWExNDYtZjdkYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKAjIxnHvlrutNxt2BJcWHfXGWrBnZ6VW8W16tz5/e9Gzb/sq7MOHpRrRx7n
B8PHhVlACY2x8wv8Sfn/KYDNIDmepwrj032K8acWPixwPXFBDMnimF3dBTj+KNJM
WwmYxHrChkOCdlc+ikKmI+ebti+U604Rs9FHqH8n1k+JaBoohMwG9V9A1ySeTWEU
Zgm25u/YqYmcOi9sdlK2Sz6XzYCYXi1BjXa6/b/moBx9GH4TWoxChydoZCGEi85x
/5yMc/z3iyuQpEMVwvs3DVOOUDia3r/TxdZHsINeCsGHLb+T5gItUnaNCMZCEkCm
bgn+vfwdJ3kW0d67K+/kJ/6+/MUCAwEAAaOCArAwggKsMB0GA1UdDgQWBBQsDer6
ETahGKaPBD/er59ViFee+TAfBgNVHSMEGDAWgBQ1zwZ9wm7kiV9LFq2b0wD+q8Oj
UzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDM5MzAvNjNDNDZFQzhBMEYzMTFFQzk0NkVEQTk0NUE0MEQ1NzcvTmM4R2Zj
SnU1SWxmU3hhdG05TUFfcXZEbzFNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTmM4R2ZjSnU1SWxmU3hhdG05TUFfcXZEbzFNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDM5MzAvNjNDNDZFQzhBMEYzMTFFQzk0NkVEQTk0NUE0
MEQ1NzcvOUM2MTE3MDJGM0IxMTFFQzhGREJDQjhDRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAqBggrBgEFBQcBBwEB/wQbMBkwFwQCAAEwEQMDA2ZwAwQHxBSAAwQExMAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCIj9evcCeykZLo8IZjNLRLvds47faeP2pgwxOQK63E
2hjr366iRNXK8Y3cRtlL/UaPv++clarmY3dZlTLMCuAotaUkYwtFTZfDB9M2jrtR
BskiFHOGIFmHx/aNTpi+GuhVePo0H5pj45whkh4Y2H4orUuzxdby0JHUl7X3NlNZ
rf/CIJrkl+QuJqvrab/aBqLT81W9P0lG4X09Pjjjj+96Fa7Z4ta/lXwSwO8Xi5sA
I7DxjTxSQREpcp9w6BFwDdDSpz/qPlF2jRuzioCq5JMYCjG+l8q8GfwpmJQjZ0wO
a49CSNNofQQwHWfCiYGauPSoPF6qafBFV2c15zkYeF0o
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:37 2025 by rpki-client