Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/D3A6267E7F6511F0A5D0ACDBDAE4EC9C.roa
File: D3A6267E7F6511F0A5D0ACDBDAE4EC9C.roa (raw, json)
Hash identifier: fhOLbSoldzEWmcMOU9Fh6w3ar6OpqjmpHFD5fefKYXw=
Subject key identifier: 73:4E:B8:A8:ED:39:BA:44:A6:E3:83:6C:08:76:E8:88:FB:59:46:C7
Certificate issuer: /CN=F365BA89AF/serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Certificate serial: 18
Authority key identifier: 0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/D3A6267E7F6511F0A5D0ACDBDAE4EC9C.roa
Signing time: Fri 22 Aug 2025 14:39:37 +0000
ROA not before: Fri 22 Aug 2025 14:39:32 +0000
ROA not after: Thu 31 Aug 2045 14:39:32 +0000
asID: 329535
IP address blocks: 102.205.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Aug 2025 14:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BA89AF, serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Validity
Not Before: Aug 22 14:39:32 2025 GMT
Not After : Aug 31 14:39:32 2045 GMT
Subject: CN=68a88129-05e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:81:61:7f:42:1d:de:58:2a:a4:0c:ce:f2:
0f:8a:a2:b0:bd:26:ec:91:51:89:78:3e:14:21:00:
7a:b2:02:c3:ca:0b:55:be:2d:77:c0:cd:ad:00:33:
f2:29:ed:99:1c:f1:cb:ca:e6:81:5c:a7:fa:c3:74:
c0:24:8f:de:61:a9:b8:b7:0c:3b:bd:bf:8b:ed:4c:
33:07:d1:a0:71:38:b9:e4:67:7d:5a:ee:3d:9a:2e:
2b:9f:df:d9:46:51:c6:be:fc:ed:f6:83:f2:18:d8:
e8:ed:b6:da:b0:fa:3f:dc:a1:09:6a:73:7a:80:92:
02:f0:31:3b:d2:b9:9b:7a:92:fd:0c:0a:35:06:ea:
63:87:23:21:ee:90:a3:93:4d:32:96:59:61:45:95:
7e:f7:10:e6:d0:fc:f7:c4:ff:99:cd:21:39:c9:1c:
e7:a5:73:6f:17:2e:4d:1d:d4:27:de:f8:5e:20:33:
b2:f6:d8:d6:b0:bd:c0:3c:8d:cb:30:11:50:d0:96:
2d:55:6f:34:70:f0:34:e4:41:ed:68:3b:17:f7:02:
c1:5d:aa:85:36:23:21:7f:97:75:2c:9d:f5:e1:7e:
4d:8d:f4:3a:8c:19:7b:7b:2d:c6:9c:20:56:0a:a6:
c0:67:74:47:40:e9:33:eb:29:09:c8:46:54:38:b2:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:B8:A8:ED:39:BA:44:A6:E3:83:6C:08:76:E8:88:FB:59:46:C7
X509v3 Authority Key Identifier:
keyid:0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/D3A6267E7F6511F0A5D0ACDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.237.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:99:d3:c5:6c:bc:86:bf:02:5d:09:c2:1e:f3:f7:ef:fe:78:
2d:02:a1:62:d5:56:7a:be:96:fb:51:bb:a0:12:50:1d:a6:70:
de:3a:33:9d:80:b4:0c:eb:fb:0e:55:4d:ac:b6:d6:08:1e:3c:
1a:4f:98:58:e7:e7:62:3a:ff:8d:fe:1c:2f:56:b1:52:99:ca:
4c:eb:b7:ac:d8:43:16:38:7a:e3:01:59:f3:d0:d6:88:17:3c:
c7:b8:1e:13:73:9d:fb:0d:21:9d:4c:0d:d7:75:1c:3b:08:9e:
9a:29:e4:ae:7f:8c:bc:49:26:38:a7:69:a2:ef:45:3d:48:9e:
13:07:4a:b0:92:c7:89:c6:ad:cb:a4:34:92:05:84:4a:38:68:
1f:7b:c9:dc:b0:b1:9e:c9:3a:22:18:21:a5:e2:a9:da:5a:c3:
26:87:02:78:7e:d2:75:13:ba:46:a7:5f:26:09:1e:1b:22:bf:
4e:01:29:3b:d6:57:fb:b6:aa:dc:5d:84:9f:f6:2f:46:c9:d2:
c4:40:a4:34:bd:be:bc:b5:40:ad:34:03:69:1c:77:be:33:30:
b7:14:ab:8b:99:34:55:4d:1c:97:c1:00:0c:87:e7:bb:aa:04:
24:bb:88:9f:53:7f:5d:e0:48:e5:06:04:44:03:82:8e:ac:39:
e7:8a:8c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:13 2025 by rpki-client