Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/67EEDE2011E811F0AD16B27E762E951A.roa
File: 67EEDE2011E811F0AD16B27E762E951A.roa (raw, json)
Hash identifier: uzAE2/no9fgfGg2Q7u1s321tO3C4lIkhG/rMLM21uPQ=
Subject key identifier: 6B:92:01:D8:14:24:04:3A:47:94:E9:F1:55:AE:CF:E3:CC:E8:0D:32
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 0587
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/67EEDE2011E811F0AD16B27E762E951A.roa
Signing time: Sat 05 Apr 2025 06:37:12 +0000
ROA not before: Sat 05 Apr 2025 06:37:07 +0000
ROA not after: Wed 04 Apr 2035 06:37:07 +0000
asID: 5536
IP address blocks: 102.218.128.0/24 maxlen: 32
102.218.130.0/24 maxlen: 32
102.219.22.0/24 maxlen: 32
102.220.125.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Apr 2025 14:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1415 (0x587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Apr 5 06:37:07 2025 GMT
Not After : Apr 4 06:37:07 2035 GMT
Subject: CN=67f0cf98-8c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:62:8c:28:0c:27:82:2b:60:06:b0:4c:b5:
38:03:53:ac:b0:bd:db:6e:1a:e5:c3:34:c7:8a:55:
f7:2c:17:73:cb:4e:3e:8c:d5:19:8a:dd:13:20:58:
59:68:b4:36:27:25:cb:9c:e4:fd:8b:19:ed:9b:9e:
e1:7f:2b:35:5a:39:62:db:2e:1d:51:12:41:54:92:
cb:e9:5a:a0:b8:cc:a2:e0:58:a3:87:df:00:30:5e:
38:52:a2:57:f6:7e:0d:29:e2:8a:56:8d:5c:4d:2a:
23:92:d3:54:4d:06:0a:1e:17:34:06:fe:aa:3a:53:
94:bf:71:0f:0a:74:1c:bf:b1:9b:d5:cd:a9:16:c2:
56:14:d7:b6:0b:24:4b:d4:f8:8d:86:a8:4f:1a:fb:
f1:20:68:2b:72:e0:6e:e7:8a:ae:0d:95:ff:77:21:
55:1d:ab:0a:17:a7:99:7a:0b:b5:fb:45:68:8d:43:
93:f4:5d:b0:dd:46:7f:64:54:ea:ab:8f:e5:01:3d:
56:02:8d:dc:8d:26:f6:03:6c:40:0c:05:3a:cc:0b:
ef:30:b2:90:e5:9f:09:3d:7c:51:bf:f4:d3:39:c4:
e5:e8:53:10:84:6d:61:40:62:28:b9:51:53:d5:7d:
c5:ef:cf:d6:0d:d4:81:1d:16:d4:d8:af:3f:6d:5d:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:92:01:D8:14:24:04:3A:47:94:E9:F1:55:AE:CF:E3:CC:E8:0D:32
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/67EEDE2011E811F0AD16B27E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
102.218.130.0/24
102.219.22.0/24
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d0:e8:b9:52:47:00:9f:3a:a5:f7:e7:5a:85:ba:ed:ca:0b:
22:1c:01:b8:01:b7:da:bf:5b:b6:c7:48:bc:3a:8d:ca:b8:22:
ce:e4:2a:96:07:08:a2:d1:eb:35:6f:d3:39:6d:71:ff:94:62:
46:8c:25:84:0f:ed:f8:1d:c7:a8:56:7e:a4:97:23:1f:5b:90:
67:ab:88:93:c7:a7:26:60:34:5b:96:aa:db:c9:50:fd:b5:a6:
09:c2:ed:03:1e:1c:89:c5:3f:37:7f:c7:0e:ee:35:f2:b5:26:
31:04:fd:62:a8:77:80:db:42:4f:24:5d:a3:a6:0d:40:d8:03:
70:0b:8d:04:31:bb:8d:f6:32:63:61:cd:d7:ae:1d:f3:3c:c4:
90:37:df:77:bd:9c:21:ce:21:69:22:f0:fc:f2:98:a8:59:80:
3b:ed:74:9e:47:76:9c:6e:37:8d:39:b5:6b:f4:2b:40:e9:0f:
86:d8:c6:4b:8d:17:35:b1:93:e3:cb:21:86:c8:58:bb:c2:0e:
63:8c:2f:db:c7:cd:91:bf:f3:5a:c4:1f:e9:98:0e:20:1f:e2:
be:b8:1e:45:a5:4f:08:e7:2a:7e:90:a6:30:49:28:71:4a:f0:
c9:3e:b9:b4:5a:ab:43:92:c3:82:c9:a4:3d:44:df:5d:a6:de:
f0:d6:69:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:18:06 2025 by rpki-client