Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8D7E716A24FC11F093422CE8DAE4EC9C.roa
File: 8D7E716A24FC11F093422CE8DAE4EC9C.roa (raw, json)
Hash identifier: 6xmy1763CcvC2P/bBVD6PIP1QandPbe0wYnitcM4fHE=
Subject key identifier: 57:13:23:19:A9:D1:D5:17:92:AF:CE:87:3C:B5:32:F5:7E:A9:A0:73
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 097B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8D7E716A24FC11F093422CE8DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 13:19:18 +0000
ROA not before: Tue 29 Apr 2025 13:19:13 +0000
ROA not after: Wed 29 Apr 2026 13:19:13 +0000
asID: 55154
IP address blocks: 102.135.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 06:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2427 (0x97b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 29 13:19:13 2025 GMT
Not After : Apr 29 13:19:13 2026 GMT
Subject: CN=6810d1d5-defe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:77:5f:84:96:69:90:a0:de:6b:95:6f:7a:
93:e0:5d:a6:78:9c:34:93:51:6a:cb:14:f9:69:0d:
d4:a3:bb:ad:60:2d:ab:6c:c0:5e:bb:23:7b:bc:2b:
e4:75:f4:f5:f9:aa:87:a3:65:f7:0b:bb:79:1f:cb:
17:e5:7b:39:2d:e1:ac:fa:6a:04:e2:d2:51:b7:47:
d2:29:81:dd:e7:32:a2:83:a0:c4:0d:7f:07:3f:5a:
4c:d6:8b:8b:ba:6c:45:62:f5:65:b8:95:1b:7a:a9:
b7:f7:cb:5b:0e:81:e9:a3:18:dc:07:5b:d6:a9:5d:
66:68:79:a0:40:45:17:06:82:d2:b2:ea:43:61:89:
1d:11:00:de:45:cc:23:c8:87:41:f3:a4:c0:00:59:
1e:6c:47:74:46:f0:9c:e5:92:26:de:03:fb:21:24:
45:a4:da:fe:45:88:37:29:ce:3f:49:a9:4e:dd:7b:
da:77:43:54:06:4e:ea:a5:d8:66:b9:a9:e5:4f:6f:
ed:22:2b:0a:75:66:c5:5d:95:13:82:ec:71:eb:ea:
0a:05:21:c2:2f:c0:88:6d:89:9f:fd:87:a7:a6:fc:
97:c3:3e:74:0b:8d:eb:5c:ab:a2:86:22:bc:c0:59:
0e:93:63:c1:1d:2e:08:d4:08:b2:5e:fb:ad:ea:69:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:13:23:19:A9:D1:D5:17:92:AF:CE:87:3C:B5:32:F5:7E:A9:A0:73
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8D7E716A24FC11F093422CE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:24:1f:ef:7e:bb:79:94:69:91:a9:6a:a1:ed:15:5f:25:56:
d3:f7:2b:a2:f3:3f:f7:a7:6a:19:d3:7f:16:d2:00:d1:61:55:
d7:71:62:32:59:39:f5:9c:f2:b9:00:78:c1:20:b0:1c:80:48:
a5:3a:f2:37:12:e5:b3:31:ff:bc:fb:80:5e:05:52:db:9f:59:
20:2e:45:34:45:31:0c:4f:32:bf:c9:3c:0b:54:2b:4f:8d:9e:
92:7b:af:00:47:c0:f7:26:a7:bd:7d:7f:7c:3c:d4:ba:00:1f:
a7:e4:eb:50:6b:b7:1e:d8:65:92:5a:cd:b4:97:07:ba:f2:5b:
d8:2c:4b:35:b0:51:46:d1:f5:d8:56:22:63:2d:ac:75:6b:67:
8d:1f:66:a1:ce:e4:93:c5:e8:af:4b:f8:52:0e:4f:7a:ad:13:
61:9e:a2:ea:40:df:db:8f:8c:9c:c4:43:bc:42:ab:77:67:25:
eb:95:a7:a2:97:24:f3:e3:92:8a:b2:cf:de:af:80:f2:59:bd:
a8:df:6d:eb:0a:94:37:8c:34:b4:22:6d:e5:e2:37:0b:f3:0d:
c9:df:5b:8c:bf:ee:43:4b:c6:8d:8f:32:65:b0:53:5a:a6:b6:
69:05:26:5c:86:01:35:64:92:64:bb:64:ca:78:0d:0d:e2:bf:
85:f9:b4:66
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCXswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA0MjkxMzE5MTNaFw0yNjA0MjkxMzE5MTNaMBgxFjAU
BgNVBAMTDTY4MTBkMWQ1LWRlZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzqXdfhJZpkKDea5VvepPgXaZ4nDSTUWrLFPlpDdSju61gLatswF67I3u8
K+R19PX5qoejZfcLu3kfyxflezkt4az6agTi0lG3R9Ipgd3nMqKDoMQNfwc/WkzW
i4u6bEVi9WW4lRt6qbf3y1sOgemjGNwHW9apXWZoeaBARRcGgtKy6kNhiR0RAN5F
zCPIh0HzpMAAWR5sR3RG8JzlkibeA/shJEWk2v5FiDcpzj9JqU7de9p3Q1QGTuql
2Ga5qeVPb+0iKwp1ZsVdlROC7HHr6goFIcIvwIhtiZ/9h6em/JfDPnQLjetcq6KG
IrzAWQ6TY8EdLgjUCLJe+63qaWAVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVxMj
GanR1ReSr86HPLUy9X6poHMwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzhEN0U3MTZBMjRGQzExRjA5MzQyMkNFOERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh2cwDQYJKoZIhvcNAQEL
BQADggEBAG0kH+9+u3mUaZGpaqHtFV8lVtP3K6LzP/enahnTfxbSANFhVddxYjJZ
OfWc8rkAeMEgsByASKU68jcS5bMx/7z7gF4FUtufWSAuRTRFMQxPMr/JPAtUK0+N
npJ7rwBHwPcmp719f3w81LoAH6fk61Brtx7YZZJazbSXB7ryW9gsSzWwUUbR9dhW
ImMtrHVrZ40fZqHO5JPF6K9L+FIOT3qtE2GeoupA39uPjJzEQ7xCq3dnJeuVp6KX
JPPjkoqyz96vgPJZvajfbesKlDeMNLQibeXiNwvzDcnfW4y/7kNLxo2PMmWwU1qm
tmkFJlyGATVkkmS7ZMp4DQ3iv4X5tGY=
-----END CERTIFICATE-----
Generated at Tue May 6 14:56:42 2025 by rpki-client