Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/BD6554C4E92011EF86F73D65762E951A.roa
File: BD6554C4E92011EF86F73D65762E951A.roa (raw, json)
Hash identifier: CaIYKCYANkBoyafuMnwQ7h8u5QUSvk0bXmuQ+UakCtg=
Subject key identifier: 95:27:35:9F:65:B6:F6:90:C9:8F:CA:FA:D5:39:B3:34:9B:D1:12:E7
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 2B
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/BD6554C4E92011EF86F73D65762E951A.roa
Signing time: Wed 12 Feb 2025 09:07:10 +0000
ROA not before: Wed 12 Feb 2025 09:07:06 +0000
ROA not after: Sun 31 Dec 2028 09:07:06 +0000
asID: 30985
IP address blocks: 102.213.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 12 09:07:06 2025 GMT
Not After : Dec 31 09:07:06 2028 GMT
Subject: CN=67ac64be-21cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:60:7b:99:b0:00:8d:c3:68:0c:b4:f4:d3:
8a:9a:13:58:d0:34:7d:28:2f:7e:ca:5b:67:d3:4a:
74:68:f8:e4:50:e4:bc:c0:0f:75:73:ad:20:24:47:
d6:ef:3c:38:3c:b8:53:07:9b:11:cc:16:67:e9:1c:
f1:23:84:ad:79:0f:74:45:55:5c:83:39:fc:37:43:
5a:b6:a0:3d:5c:fc:52:1e:14:60:59:f6:75:ba:77:
ed:71:73:fc:84:00:9a:ee:2c:7f:c8:ef:25:da:41:
4d:d0:9f:d6:dd:c5:0d:4a:e8:08:eb:60:57:3b:2f:
78:65:0e:4b:a2:16:22:63:b3:e4:f2:f9:22:1b:2f:
8e:1f:a0:47:16:ab:69:88:bf:2c:a4:ee:8d:a7:7d:
ad:4c:e0:48:f1:5f:99:f6:f9:fc:1b:35:88:0b:7b:
e2:fe:47:49:ff:49:a3:83:b7:44:f5:d1:18:20:4d:
28:11:3a:0d:e3:df:5e:b0:57:99:a1:65:63:ac:eb:
ca:19:73:ea:70:b0:a1:fb:28:e8:7f:dc:b1:d6:e6:
f5:29:8b:2d:44:0e:c1:54:53:5b:6b:ec:ba:cc:1b:
ea:02:22:3c:5d:a3:ec:7c:9c:ef:ff:9c:9a:44:06:
be:15:61:a6:ac:1f:55:e4:a9:39:06:d0:77:20:97:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:27:35:9F:65:B6:F6:90:C9:8F:CA:FA:D5:39:B3:34:9B:D1:12:E7
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/BD6554C4E92011EF86F73D65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.136.0/22
Signature Algorithm: sha256WithRSAEncryption
69:bf:99:ec:be:c6:b0:0e:2e:98:81:2a:65:1e:ce:9c:9f:7a:
32:1d:5e:fb:0e:44:af:7a:5d:61:33:d4:fa:fe:47:1d:82:bf:
64:30:26:f4:15:89:3b:fa:21:89:06:2c:31:93:8e:12:fb:93:
f8:49:93:a7:6b:e6:21:96:f4:cc:41:f2:d9:29:a9:88:e8:21:
b3:4e:ae:53:eb:02:c7:82:44:f0:69:c4:1f:13:5e:95:c8:8a:
3e:e5:7a:86:34:34:56:5b:e3:5a:5e:7e:fd:b8:0f:eb:71:e2:
1e:c0:a4:d0:eb:02:88:6b:61:be:89:df:73:47:d4:c0:a2:bc:
8e:15:80:c1:a7:96:fd:84:78:2b:15:f8:74:a0:c7:80:c4:c7:
a1:02:ef:ba:9c:6c:96:8e:01:4c:0d:bc:e5:6c:de:58:f3:c4:
6b:47:8d:9f:51:eb:9b:b3:29:b2:db:c1:c3:26:2f:b7:5d:52:
bf:f6:0b:19:a5:13:3c:53:31:21:69:6d:0e:71:32:5b:80:ad:
9b:70:39:70:41:43:ba:3e:7d:b7:93:bd:02:b7:64:e4:49:c2:
4f:f3:0b:ba:8d:f0:46:4c:0d:a9:25:c5:ee:25:f4:4d:9d:b0:
4d:14:e8:58:38:01:1a:23:14:4f:5f:3b:81:4a:e7:ae:69:04:
ac:8f:90:91
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBKzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
Q0Q3MkFGMTEwLwYDVQQFEyg3NzA4RTY2RjFDMDdDMUQ3NjcwQUVCREJBRTE4NkRB
NDJCQ0IzMEM3MB4XDTI1MDIxMjA5MDcwNloXDTI4MTIzMTA5MDcwNlowGDEWMBQG
A1UEAxMNNjdhYzY0YmUtMjFjZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN8lYHuZsACNw2gMtPTTipoTWNA0fSgvfspbZ9NKdGj45FDkvMAPdXOtICRH
1u88ODy4UwebEcwWZ+kc8SOErXkPdEVVXIM5/DdDWragPVz8Uh4UYFn2dbp37XFz
/IQAmu4sf8jvJdpBTdCf1t3FDUroCOtgVzsveGUOS6IWImOz5PL5Ihsvjh+gRxar
aYi/LKTujad9rUzgSPFfmfb5/Bs1iAt74v5HSf9Jo4O3RPXRGCBNKBE6DePfXrBX
maFlY6zryhlz6nCwofso6H/csdbm9SmLLUQOwVRTW2vsuswb6gIiPF2j7Hyc7/+c
mkQGvhVhpqwfVeSpOQbQdyCXFRcCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSVJzWf
Zbb2kMmPyvrVObM0m9ES5zAfBgNVHSMEGDAWgBR3COZvHAfB12cK69uuGG2kK8sw
xzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYyRTk1MUEvZHdqbWJ4
d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZHdqbWJ4d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYy
RTk1MUEvQkQ2NTU0QzRFOTIwMTFFRjg2RjczRDY1NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbViDANBgkqhkiG9w0BAQsF
AAOCAQEAab+Z7L7GsA4umIEqZR7OnJ96Mh1e+w5Er3pdYTPU+v5HHYK/ZDAm9BWJ
O/ohiQYsMZOOEvuT+EmTp2vmIZb0zEHy2SmpiOghs06uU+sCx4JE8GnEHxNelciK
PuV6hjQ0VlvjWl5+/bgP63HiHsCk0OsCiGthvonfc0fUwKK8jhWAwaeW/YR4KxX4
dKDHgMTHoQLvupxslo4BTA285WzeWPPEa0eNn1Hrm7MpstvBwyYvt11Sv/YLGaUT
PFMxIWltDnEyW4Ctm3A5cEFDuj59t5O9Ardk5EnCT/MLuo3wRkwNqSXF7iX0TZ2w
TRToWDgBGiMUT187gUrnrmkErI+QkQ==
-----END CERTIFICATE-----
Generated at Sun May 11 04:28:53 2025 by rpki-client