Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8442B818258811F08B5CD298DAE4EC9C.roa
File: 8442B818258811F08B5CD298DAE4EC9C.roa (raw, json)
Hash identifier: pDOjPfFxur0o8gfoPN2SQuKAIRc/ajBp999F2V26wIk=
Subject key identifier: 6A:BA:6F:67:A2:50:88:30:6A:08:BA:82:97:5E:71:F9:9E:76:6A:A7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 097F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8442B818258811F08B5CD298DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 06:01:12 +0000
ROA not before: Wed 30 Apr 2025 06:01:06 +0000
ROA not after: Tue 01 Dec 2026 06:01:06 +0000
asID: 55154
IP address blocks: 102.135.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 06:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 30 06:01:06 2025 GMT
Not After : Dec 1 06:01:06 2026 GMT
Subject: CN=6811bca8-74ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:45:88:1b:47:79:d2:3c:b8:ec:42:a6:a1:8c:
d6:65:43:a6:e5:61:ce:3e:8e:ab:41:b2:63:d0:5b:
72:28:fb:61:27:f4:16:c7:89:a6:c5:80:e2:67:d8:
dd:9f:8f:5c:10:56:c7:8c:c6:51:14:8a:1d:10:c4:
85:cf:9f:3d:74:3c:ce:a5:25:47:51:f7:8b:c6:c1:
4c:74:73:04:db:8b:ca:c3:f4:27:c1:3f:10:c0:a2:
54:2b:60:52:54:dd:62:ff:41:74:d2:dc:3b:bf:c2:
3a:4b:db:80:92:b6:48:2d:ff:6a:02:eb:65:9c:f0:
93:3f:89:0f:97:ad:fe:2e:a9:cd:9d:80:23:b4:3e:
7e:08:a2:42:ce:8e:61:d5:72:8e:72:84:22:66:42:
8a:e3:40:b4:f5:b4:22:3a:6c:a7:50:f1:89:8a:8d:
0b:29:2b:c2:c1:0d:cb:48:db:82:30:b7:44:d6:b3:
04:eb:f1:6b:b8:19:3f:d8:53:d3:c9:8f:13:af:8d:
7f:d5:90:17:67:bf:af:a6:82:04:62:87:de:2c:51:
f2:a6:df:64:d0:03:83:1b:ae:a1:e8:b4:a8:01:26:
49:73:fd:31:7b:31:30:9b:b5:86:52:b5:b7:eb:a7:
09:7e:68:55:d2:b5:03:87:cc:12:20:ab:2e:83:2a:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BA:6F:67:A2:50:88:30:6A:08:BA:82:97:5E:71:F9:9E:76:6A:A7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8442B818258811F08B5CD298DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.38.0/24
Signature Algorithm: sha256WithRSAEncryption
78:67:82:d6:84:d3:5c:62:ec:11:04:96:9c:71:67:bf:d8:40:
2f:0a:72:86:71:3e:72:14:1d:05:9f:89:5f:86:3b:e6:ea:b1:
b7:81:1a:59:cf:f9:e7:65:29:f5:ec:9a:67:1a:bc:e5:1e:3c:
05:6e:ea:91:1d:91:29:72:ba:ca:87:46:06:aa:d6:44:f3:7e:
57:5f:68:62:dd:38:d6:b1:80:10:51:f8:74:6e:31:65:b0:f5:
09:7d:f2:10:e9:a9:22:13:37:7a:b6:a1:39:f7:db:13:f5:4e:
cd:32:23:b7:a1:43:80:ab:2c:f4:14:5b:7b:41:7a:b4:5c:c2:
a8:27:c1:77:61:70:1d:73:82:31:ac:f3:bc:e6:35:38:79:ca:
2b:4a:e0:de:be:38:05:99:ba:08:17:3a:f0:f5:92:19:7d:19:
c5:e7:9a:bc:c3:aa:7b:58:ea:06:fd:d6:7f:b2:31:88:1d:de:
7a:a9:ba:c6:b9:12:c0:30:05:95:c0:cb:c7:ea:bc:30:8e:cb:
d6:52:e5:d6:52:8d:f4:3f:c9:97:0f:66:e7:a7:45:b4:29:91:
f9:17:a2:ba:e9:4c:5f:fb:22:09:a1:33:2f:0e:08:9f:11:d3:
59:5e:49:d1:b5:2b:fc:00:e2:5e:24:8f:2b:21:8e:67:4d:a2:
13:ad:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:22:04 2025 by rpki-client