Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/C514C99C299A11F0983389D3DAE4EC9C.roa
File: C514C99C299A11F0983389D3DAE4EC9C.roa (raw, json)
Hash identifier: kFHC2DRHhI2Nc7fpeFsztxsWVieIgRNX2jSmDrCbFqc=
Subject key identifier: FF:75:93:D2:29:7B:B1:4A:0F:8B:22:24:38:E1:F6:CA:45:46:5D:5A
Certificate issuer: /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial: 07
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/C514C99C299A11F0983389D3DAE4EC9C.roa
Signing time: Mon 05 May 2025 10:21:56 +0000
ROA not before: Mon 05 May 2025 10:21:51 +0000
ROA not after: Tue 05 May 2026 10:21:51 +0000
asID: 328939
IP address blocks: 102.206.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 10:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Validity
Not Before: May 5 10:21:51 2025 GMT
Not After : May 5 10:21:51 2026 GMT
Subject: CN=68189144-43e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:2d:fe:e8:51:c4:76:f0:a0:2d:e1:1c:4b:
62:9f:04:55:84:fc:17:14:28:18:0d:8d:94:8c:c6:
08:d9:bb:d1:25:90:4f:ae:a5:2c:3e:af:56:24:91:
40:22:f5:43:20:55:8b:53:d6:c2:da:ab:04:a5:87:
f9:3c:75:35:11:0a:01:de:b0:a1:07:51:b9:87:0c:
82:23:74:e1:e2:ca:04:4f:ea:22:3a:11:e8:a5:63:
d6:a5:85:4b:b7:aa:c2:14:f0:7c:00:f9:f7:fd:88:
e2:3d:19:69:76:f1:fe:3a:d3:c0:91:db:83:22:1d:
e3:53:06:80:1b:01:7a:7a:67:fe:e7:0c:44:69:64:
83:bd:ed:b4:ef:45:ec:e3:4e:ff:41:3c:63:4b:19:
57:dd:48:86:b5:18:b2:15:da:ae:36:22:9b:e3:c4:
62:dc:37:a3:5c:6e:18:7c:58:49:5e:16:98:d8:20:
3e:c3:05:f1:94:79:89:58:e2:c6:09:d7:50:d0:6b:
d0:4d:a4:18:d8:40:5b:a7:b4:9b:2a:bf:90:21:25:
e8:12:be:63:75:da:64:0b:5b:48:de:ec:70:99:af:
2b:6f:f4:ef:60:3e:ee:25:73:f0:a2:0e:2a:66:43:
e1:a4:86:3e:5c:89:1d:c6:f4:5d:fb:53:ee:b9:5e:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:93:D2:29:7B:B1:4A:0F:8B:22:24:38:E1:F6:CA:45:46:5D:5A
X509v3 Authority Key Identifier:
keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/C514C99C299A11F0983389D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.128.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3e:41:60:18:c6:3c:9a:6f:01:38:fa:4b:51:81:3f:80:81:
b9:a0:12:e8:ee:dd:41:f0:4d:35:2f:59:a6:88:92:64:de:34:
68:b8:90:80:78:15:44:bf:3e:e9:13:15:a8:69:16:96:07:36:
5c:1c:b1:90:d4:d7:82:ad:4d:a4:54:29:08:77:e2:0f:de:85:
5d:a4:98:07:e7:68:c3:75:23:94:e1:65:a4:c3:1f:ef:d6:39:
f2:e6:64:32:95:cb:a9:54:93:be:99:0c:6e:d5:4f:94:80:92:
57:54:39:c1:fe:43:9b:b6:32:36:3c:35:7e:81:0b:ba:db:fa:
4b:cd:fa:f8:59:fb:d1:9e:9e:2a:d6:fe:ac:fc:25:7f:ee:fc:
d7:e1:28:d9:4a:cf:9d:15:49:bf:fd:10:3e:cf:64:55:8e:9e:
89:10:82:79:3d:ca:bc:73:e1:57:ce:be:52:07:c9:2c:76:48:
2f:21:15:64:16:f0:b0:2e:e7:ea:97:04:60:1f:78:c8:49:b1:
e3:f8:ee:e5:9e:29:61:8a:3f:91:b0:9f:83:0c:32:ba:9a:a5:
df:56:be:3e:ce:31:a3:da:db:1c:d2:18:9b:b8:5e:4f:7a:60:
f9:ed:65:f4:a6:24:8f:bd:7e:3a:78:8b:cd:0c:ab:73:01:26:
b0:3e:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:31:38 2025 by rpki-client