Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A9554BD0275811F0A8E397B4DAE4EC9C.roa
File: A9554BD0275811F0A8E397B4DAE4EC9C.roa (raw, json)
Hash identifier: +M3JnjmUCxfDcTHegHr3Hef8c6OflZEuu0QeMSXXSHM=
Subject key identifier: 33:ED:3D:CC:04:CA:AD:A0:51:2A:E7:6B:5F:D5:45:F2:AD:59:1A:F6
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09BE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A9554BD0275811F0A8E397B4DAE4EC9C.roa
Signing time: Fri 02 May 2025 13:23:40 +0000
ROA not before: Fri 02 May 2025 13:23:36 +0000
ROA not after: Tue 10 Feb 2026 13:23:36 +0000
asID: 329007
IP address blocks: 102.135.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 07:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2494 (0x9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 2 13:23:36 2025 GMT
Not After : Feb 10 13:23:36 2026 GMT
Subject: CN=6814c75c-6dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ed:fc:5b:b7:e5:db:c0:b6:a0:da:7d:0e:eb:
7d:76:eb:2d:0d:84:14:05:84:41:da:24:e4:7f:6c:
75:5b:6b:31:d5:e5:41:a2:73:d5:26:03:e9:a7:4d:
a9:ce:28:6d:88:00:21:5e:38:35:2c:38:c5:ec:95:
be:32:20:27:cf:7f:e7:2d:1e:44:27:73:50:a0:51:
c4:25:15:b9:3d:85:69:e1:50:42:10:2a:b6:3f:9d:
62:10:9e:3d:07:08:f2:92:a7:5f:36:29:41:b4:f4:
e1:f4:33:a4:bf:b3:36:e3:8f:46:ad:e2:b2:d5:83:
94:a6:de:f1:f3:1d:e5:0f:9d:a8:d5:44:c5:37:51:
e2:2b:90:36:e3:1b:92:eb:ac:64:0d:50:56:ad:97:
57:24:e8:40:6e:9f:3f:0e:09:d6:00:c4:25:15:be:
79:7e:1e:7b:d8:20:0f:3f:fd:92:34:a1:17:26:3c:
59:18:0a:b3:a4:32:75:64:05:74:48:2f:9e:e5:2c:
69:ed:b8:89:f4:c2:94:cc:81:11:57:bd:a7:75:0a:
8b:dd:80:8a:e7:15:99:c9:f1:a8:24:ca:28:f5:27:
d7:70:40:d8:a2:66:ec:1e:95:41:77:dd:db:b8:3e:
10:01:6a:88:e6:cf:65:1e:3a:59:84:5a:d5:b1:39:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:3D:CC:04:CA:AD:A0:51:2A:E7:6B:5F:D5:45:F2:AD:59:1A:F6
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A9554BD0275811F0A8E397B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.98.0/24
Signature Algorithm: sha256WithRSAEncryption
86:72:c4:2a:4f:4c:a3:90:da:7f:f5:9c:87:47:4a:d3:a2:67:
cb:21:94:6c:04:5d:4d:42:ad:80:7a:bd:b1:f6:46:e9:03:31:
8b:b6:11:d4:b5:59:56:51:92:26:df:f2:6a:42:4a:b8:ef:d9:
40:b9:f6:01:8c:4c:72:04:f9:cb:fd:00:f6:83:c6:5c:f4:e3:
f6:11:8a:16:a7:81:00:49:aa:c7:29:43:ea:e2:a8:99:60:d2:
0b:9b:cd:84:56:92:4a:6b:fc:2c:0b:4c:58:b5:5f:be:83:a3:
e3:4e:84:4c:09:8e:ea:e1:7f:a3:ec:5e:0b:f1:47:d1:4e:d5:
bc:41:5e:3d:62:a0:bd:22:14:af:4f:9b:f0:ae:8d:6c:d9:5b:
d6:42:32:76:16:a3:19:be:ca:ab:bb:36:ee:59:0c:00:44:66:
92:c1:09:1c:29:56:f8:cf:0d:8c:ac:2f:79:c6:cc:40:d1:82:
ec:43:d3:01:99:f9:67:fb:63:9a:30:7c:c4:a7:d6:e4:76:c6:
f6:ab:c8:3c:ea:21:21:56:2b:13:e6:a4:d0:34:2d:f1:3b:e6:
0e:8d:84:a9:70:93:65:25:05:b0:99:7f:a5:e0:67:d2:e8:1d:
94:67:b4:c1:0e:28:a8:bb:f9:ed:a1:3c:bb:60:06:2b:fa:21:
19:2a:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:01:34 2025 by rpki-client