Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A5BB0200258A11F0BB8962A6DAE4EC9C.roa
File: A5BB0200258A11F0BB8962A6DAE4EC9C.roa (raw, json)
Hash identifier: d8mTyuc8x5sGd91LlKyhaCND1aP/o37QGJgkhEh7gvY=
Subject key identifier: A8:B8:84:0D:2B:6D:E4:73:58:83:29:46:1F:18:12:39:0F:8C:4B:88
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 098B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A5BB0200258A11F0BB8962A6DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 06:16:27 +0000
ROA not before: Wed 30 Apr 2025 06:16:22 +0000
ROA not after: Tue 10 Feb 2026 06:16:22 +0000
asID: 208485
IP address blocks: 102.135.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 06:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2443 (0x98b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 30 06:16:22 2025 GMT
Not After : Feb 10 06:16:22 2026 GMT
Subject: CN=6811c03b-b43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:3d:db:0b:2a:3c:e7:7c:76:e5:f5:1b:e3:
5e:f6:5b:43:4a:83:04:b7:b4:45:37:31:e5:0d:33:
cd:5b:20:38:0b:3a:26:4e:97:60:6f:fa:0e:dc:de:
77:22:9d:7c:a0:dc:24:bf:eb:23:7a:cb:9c:a4:53:
ba:7a:b6:4b:7b:1f:2b:81:20:a0:91:22:b3:81:18:
28:5e:f7:2d:33:91:cc:5e:09:c1:61:1f:b9:31:73:
4a:93:86:b7:66:cd:06:4d:28:75:0b:3c:42:34:97:
a9:9c:8d:3a:42:ae:44:dd:4d:a6:cc:ba:61:6b:bf:
cf:38:0a:a3:6c:16:5e:8e:1a:9d:91:18:b3:94:61:
40:a0:38:2b:17:65:dd:15:97:f5:e9:54:0d:0b:3b:
a0:8d:3d:e1:96:2e:03:1a:b5:cc:9a:31:51:a0:09:
8a:19:19:66:23:71:3c:40:20:86:b5:8d:b9:d9:c3:
2f:57:1d:ee:e4:8d:1e:5d:5e:4a:ae:19:0d:45:76:
26:48:6f:c7:15:ce:e4:a7:98:55:12:62:75:0c:75:
6a:67:5d:db:01:1c:cb:f9:98:b4:a1:ea:b3:6c:7d:
c9:ae:1c:4e:54:f1:29:b4:ad:92:5f:2b:e6:b5:b9:
69:d3:ca:9a:b5:22:21:f6:1a:16:fe:14:ff:5e:61:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:84:0D:2B:6D:E4:73:58:83:29:46:1F:18:12:39:0F:8C:4B:88
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A5BB0200258A11F0BB8962A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:22:10:89:34:4e:18:6a:36:7e:07:a6:f1:76:26:7a:d9:8e:
33:7a:be:08:2e:d5:01:36:10:fb:21:bf:fa:00:10:75:71:1b:
f4:ae:a8:1c:dc:b5:ee:6b:ff:a7:20:23:40:f2:b4:b9:08:4e:
4e:d9:7c:fe:eb:0a:29:a9:6a:6a:f6:ff:7f:77:70:e5:66:ae:
92:7d:5a:f3:07:eb:87:09:6b:55:07:a8:1e:6e:0d:16:c6:32:
b0:24:c2:c6:57:97:9b:90:62:18:d1:d5:29:0c:e0:af:c6:94:
c7:ec:0f:34:61:63:02:45:12:a6:0f:8c:37:05:8b:95:6d:21:
64:dc:70:63:6f:02:65:2b:3e:ee:d4:3e:45:e1:4c:e5:63:d8:
49:84:78:df:e3:83:9d:d5:bf:3f:e5:6c:8d:97:38:e9:74:20:
ac:29:d2:77:12:87:5d:ba:3f:a7:a5:5c:5a:e9:ae:7d:69:15:
33:e6:67:80:a2:b0:9e:c2:bc:5c:2e:5c:30:96:35:56:eb:15:
fe:1f:9f:2e:d9:88:d1:f9:86:4e:be:a9:51:0c:e4:31:f7:27:
96:db:bb:69:a7:0e:c9:0c:ee:41:be:68:26:26:bb:10:e7:49:
b4:c3:74:b9:c4:f4:24:43:bf:af:c4:e5:88:e3:08:68:fd:91:
71:7d:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:29:07 2025 by rpki-client