Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/134C0450258A11F091F5A5A3DAE4EC9C.roa
File: 134C0450258A11F091F5A5A3DAE4EC9C.roa (raw, json)
Hash identifier: GtpGQMhLgk+jgcRYaFgEygioFvrdNgHFtsEIeojzdr0=
Subject key identifier: DE:49:A4:A1:BC:3A:43:0C:57:79:C9:F5:D6:10:8E:79:38:07:5B:37
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0983
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/134C0450258A11F091F5A5A3DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 06:12:21 +0000
ROA not before: Wed 30 Apr 2025 06:12:16 +0000
ROA not after: Tue 13 Jan 2026 06:12:16 +0000
asID: 208485
IP address blocks: 102.135.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 06:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2435 (0x983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 30 06:12:16 2025 GMT
Not After : Jan 13 06:12:16 2026 GMT
Subject: CN=6811bf45-f10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:99:3b:69:35:1a:cd:e3:6f:46:1e:a2:f7:
07:d0:06:3c:fd:63:73:2d:2b:8c:31:4d:fe:c4:a4:
1b:43:22:6c:7c:b1:84:07:ee:43:19:a8:71:05:e1:
2c:11:73:37:c7:d5:93:5b:7f:33:67:eb:04:a5:ad:
8b:cb:73:fc:6d:53:ef:93:e4:38:ae:47:d5:3d:4b:
3d:48:3f:ff:a0:35:8e:4c:bb:bd:1a:c1:82:f6:3d:
5a:38:38:3f:0c:b5:7c:40:8d:9f:1a:60:f4:5b:c1:
fd:91:1e:18:11:6e:e7:3b:32:64:72:1f:9f:5a:5b:
df:26:b8:27:bb:2a:fd:bd:10:58:11:05:60:7e:20:
ad:fe:29:1b:23:b3:46:37:a7:73:86:b8:19:8c:b7:
97:ba:aa:ff:c4:b4:f9:02:71:cf:ba:d3:d8:a5:1a:
af:f3:30:b6:7d:3c:12:8a:ad:59:ca:6a:e6:9e:af:
b4:2d:bb:a3:13:5d:eb:1d:f2:ad:ee:6d:f5:40:31:
f0:9e:67:c8:8a:ac:4f:82:fb:c1:11:d7:97:62:fa:
42:3b:05:9d:61:be:f9:7f:9a:42:e8:cd:1c:a9:36:
1d:7d:37:47:7b:5f:21:3a:53:6c:34:a4:83:d9:d9:
b2:88:4b:63:8a:de:8d:8b:8c:4b:a9:5e:14:d7:06:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:49:A4:A1:BC:3A:43:0C:57:79:C9:F5:D6:10:8E:79:38:07:5B:37
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/134C0450258A11F091F5A5A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.34.0/24
Signature Algorithm: sha256WithRSAEncryption
37:8d:f2:9a:ca:25:c5:20:27:0e:e4:b0:e2:64:66:09:77:f8:
5c:2f:d2:02:cd:0d:76:9c:d2:3b:ec:2a:db:3c:08:24:46:c3:
e0:76:90:15:32:c3:99:4f:66:e6:2c:a6:68:f1:22:3a:99:e5:
d0:f2:5b:8e:55:db:45:02:73:33:fb:df:c7:2c:83:0f:6a:3c:
79:50:af:5c:47:b5:b9:95:2e:cc:fc:6c:47:35:84:fd:f0:e0:
9d:68:a6:a4:f7:94:65:92:a6:5d:65:87:72:4d:e3:ad:b3:f6:
fe:61:fe:5f:ea:20:90:80:d8:c6:d3:cb:d3:b2:cb:e6:a4:fd:
24:70:fc:99:6c:a0:53:1f:6b:6d:d2:47:04:46:0f:3f:d7:20:
61:c8:78:58:2c:b8:36:a8:04:ef:78:24:55:d9:bd:b1:df:9b:
3b:2d:30:79:3f:1f:29:0c:1d:04:5e:aa:74:0f:cf:2a:d5:8b:
fd:52:84:c8:b4:ac:6d:e1:b1:c4:c6:81:0e:3d:97:83:33:65:
b9:0c:a4:b0:37:14:de:ae:1f:93:4b:06:23:0b:de:0d:2f:a5:
64:37:73:1b:71:01:29:0f:fc:18:52:2a:c1:84:cf:86:29:a0:
55:2e:1a:8b:a8:08:20:00:a2:6b:1e:a8:c2:9d:4e:9c:f2:ee:
60:ac:ef:d9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCYMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA0MzAwNjEyMTZaFw0yNjAxMTMwNjEyMTZaMBgxFjAU
BgNVBAMTDTY4MTFiZjQ1LWYxMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOL5k7aTUazeNvRh6i9wfQBjz9Y3MtK4wxTf7EpBtDImx8sYQH7kMZqHEF
4SwRczfH1ZNbfzNn6wSlrYvLc/xtU++T5DiuR9U9Sz1IP/+gNY5Mu70awYL2PVo4
OD8MtXxAjZ8aYPRbwf2RHhgRbuc7MmRyH59aW98muCe7Kv29EFgRBWB+IK3+KRsj
s0Y3p3OGuBmMt5e6qv/EtPkCcc+609ilGq/zMLZ9PBKKrVnKauaer7Qtu6MTXesd
8q3ubfVAMfCeZ8iKrE+C+8ER15di+kI7BZ1hvvl/mkLozRypNh19N0d7XyE6U2w0
pIPZ2bKIS2OK3o2LjEupXhTXBp0hAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3kmk
obw6QwxXecn11hCOeTgHWzcwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzEzNEMwNDUwMjU4QTExRjA5MUY1QTVBM0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhyIwDQYJKoZIhvcNAQEL
BQADggEBADeN8prKJcUgJw7ksOJkZgl3+Fwv0gLNDXac0jvsKts8CCRGw+B2kBUy
w5lPZuYspmjxIjqZ5dDyW45V20UCczP738csgw9qPHlQr1xHtbmVLsz8bEc1hP3w
4J1opqT3lGWSpl1lh3JN462z9v5h/l/qIJCA2MbTy9Oyy+ak/SRw/JlsoFMfa23S
RwRGDz/XIGHIeFgsuDaoBO94JFXZvbHfmzstMHk/HykMHQReqnQPzyrVi/1ShMi0
rG3hscTGgQ49l4MzZbkMpLA3FN6uH5NLBiML3g0vpWQ3cxtxASkP/BhSKsGEz4Yp
oFUuGouoCCAAomseqMKdTpzy7mCs79k=
-----END CERTIFICATE-----
Generated at Wed May 7 22:10:49 2025 by rpki-client