Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/01C3202A7F6611F0908BBADDDAE4EC9C.roa
File: 01C3202A7F6611F0908BBADDDAE4EC9C.roa (raw, json)
Hash identifier: pSnEblhJxnzSWWWcXyNgtz4lPz8jzdPGCdOC2I9zr5I=
Subject key identifier: E7:B2:23:35:2A:6E:5C:A6:84:53:6D:DB:D8:E4:BA:2E:B7:CF:CC:FE
Certificate issuer: /CN=F365BA89AF/serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Certificate serial: 1A
Authority key identifier: 0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/01C3202A7F6611F0908BBADDDAE4EC9C.roa
Signing time: Fri 22 Aug 2025 14:40:54 +0000
ROA not before: Fri 22 Aug 2025 14:40:50 +0000
ROA not after: Thu 31 Aug 2045 14:40:50 +0000
asID: 329535
IP address blocks: 102.205.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Aug 2025 14:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BA89AF, serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Validity
Not Before: Aug 22 14:40:50 2025 GMT
Not After : Aug 31 14:40:50 2045 GMT
Subject: CN=68a88176-c27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:a0:da:73:2b:87:1c:2b:9a:22:c2:55:49:
63:58:1b:3f:be:57:75:54:97:8d:91:11:53:56:55:
e3:27:c2:f2:85:b7:eb:69:6e:2c:0a:42:30:cf:e9:
31:07:a2:a2:40:3f:3a:78:d9:fc:33:ae:c0:56:70:
1e:04:cc:74:74:2a:37:46:13:ed:d8:a0:ff:35:b7:
43:0a:8c:c2:f8:b0:6f:06:cb:48:4a:e7:d3:12:77:
d2:dd:4d:ab:b1:c6:d7:25:d8:ba:ca:78:47:a1:52:
ef:a4:5a:d1:1c:e8:61:04:bd:d5:c6:1a:ba:9b:1e:
f1:b1:a0:82:d5:f9:cc:b6:76:c7:92:00:59:d0:36:
3e:47:e5:8a:2c:f1:82:a1:06:cd:db:29:4d:36:a8:
1c:0a:26:63:b2:74:2d:52:b6:2e:2a:12:2a:b1:ed:
da:9e:8d:7c:dc:82:17:b8:8f:12:f6:c5:d5:ba:10:
db:35:20:84:c4:b4:ee:8e:cc:0e:b2:0e:27:98:e3:
f4:01:26:83:55:1e:f2:67:2d:bb:9c:b5:14:96:e3:
4c:09:f0:77:09:36:14:aa:cc:5c:63:0a:c8:0b:59:
60:d0:a7:e9:3a:af:5f:9c:04:e5:14:6b:a8:e2:28:
70:9a:f5:66:1d:39:b3:de:a8:f8:52:5b:a1:6e:75:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B2:23:35:2A:6E:5C:A6:84:53:6D:DB:D8:E4:BA:2E:B7:CF:CC:FE
X509v3 Authority Key Identifier:
keyid:0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/01C3202A7F6611F0908BBADDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.238.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1c:eb:05:7d:66:43:46:a6:40:f3:12:02:fa:6b:4d:00:50:
a1:59:93:84:f4:16:5b:7b:fd:20:75:76:b8:42:bd:78:aa:a6:
9c:07:c8:ad:de:4b:9f:d9:c2:82:27:89:0c:13:06:43:8d:92:
7b:d7:3e:04:8a:85:57:ce:05:24:1f:27:7a:24:c7:55:3d:e5:
9d:32:ff:ea:09:39:bf:1c:03:39:07:90:0e:0e:22:44:00:19:
8f:8b:08:aa:b5:a1:ac:1d:dc:fe:05:7a:e9:8d:b6:0d:cf:2b:
82:ba:ae:1b:fa:72:ad:60:c7:20:1b:70:5f:0b:75:9c:ae:ed:
76:ba:ef:8b:6a:5e:6a:8b:71:ba:65:00:df:d9:48:c3:67:5f:
5b:8e:20:48:7c:4a:82:12:7d:11:ad:36:f3:d0:76:8b:63:b5:
1b:4c:5b:f6:5a:42:da:05:20:d8:05:c0:e7:6f:27:96:99:12:
4f:9e:c5:cf:0e:e9:0b:45:a0:97:10:49:81:f2:65:fe:24:e7:
f9:d6:e3:f0:b6:c6:6a:c2:c0:9d:7d:56:aa:db:28:ed:3b:a5:
d7:b7:b6:4b:2b:0c:eb:be:29:1e:54:8e:5d:6e:51:8e:f7:e7:
c4:8f:81:f1:6f:ca:17:68:e8:c1:9f:12:a4:6e:26:5f:9f:d5:
aa:c7:82:65
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBGjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
QkE4OUFGMTEwLwYDVQQFEygwQzZFN0JEMzVCNDI2MTRGQ0Y4RDIyNEREODhFQjdC
MEY3RUZDMTgyMB4XDTI1MDgyMjE0NDA1MFoXDTQ1MDgzMTE0NDA1MFowGDEWMBQG
A1UEAxMNNjhhODgxNzYtYzI3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMiQoNpzK4ccK5oiwlVJY1gbP75XdVSXjZERU1ZV4yfC8oW362luLApCMM/p
MQeiokA/OnjZ/DOuwFZwHgTMdHQqN0YT7dig/zW3QwqMwviwbwbLSErn0xJ30t1N
q7HG1yXYusp4R6FS76Ra0RzoYQS91cYaupse8bGggtX5zLZ2x5IAWdA2Pkfliizx
gqEGzdspTTaoHAomY7J0LVK2LioSKrHt2p6NfNyCF7iPEvbF1boQ2zUghMS07o7M
DrIOJ5jj9AEmg1Ue8mctu5y1FJbjTAnwdwk2FKrMXGMKyAtZYNCn6TqvX5wE5RRr
qOIocJr1Zh05s96o+FJboW51Ax0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTnsiM1
Km5cpoRTbdvY5Lout8/M/jAfBgNVHSMEGDAWgBQMbnvTW0JhT8+NIk3Yjrew9+/B
gjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUJBODkvMzhDOUNBMjI3RjNCMTFGMEIxOUM3NEM4REFFNEVDOUMvREc1NzAx
dENZVV9QalNKTjJJNjNzUGZ2d1lJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvREc1NzAxdENZVV9QalNKTjJJNjNzUGZ2d1lJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUJBODkvMzhDOUNBMjI3RjNCMTFGMEIxOUM3NEM4REFF
NEVDOUMvMDFDMzIwMkE3RjY2MTFGMDkwOEJCQUREREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbN7jANBgkqhkiG9w0BAQsF
AAOCAQEARRzrBX1mQ0amQPMSAvprTQBQoVmThPQWW3v9IHV2uEK9eKqmnAfIrd5L
n9nCgieJDBMGQ42Se9c+BIqFV84FJB8neiTHVT3lnTL/6gk5vxwDOQeQDg4iRAAZ
j4sIqrWhrB3c/gV66Y22Dc8rgrquG/pyrWDHIBtwXwt1nK7tdrrvi2peaotxumUA
39lIw2dfW44gSHxKghJ9Ea0289B2i2O1G0xb9lpC2gUg2AXA528nlpkST57Fzw7p
C0WglxBJgfJl/iTn+dbj8LbGasLAnX1Wqtso7Tul17e2SysM674pHlSOXW5Rjvfn
xI+B8W/KF2jowZ8SpG4mX5/VqseCZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:24 2025 by rpki-client