Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3E349F228E011F095BE89F5DAE4EC9C.roa
File: F3E349F228E011F095BE89F5DAE4EC9C.roa (raw, json)
Hash identifier: FxbSuu44g0U2yU2ezO+hKs4z7IeoanggrcTw+7lC6BE=
Subject key identifier: 4A:8F:B4:D4:61:48:E5:E1:40:D3:5D:DF:F4:AB:53:22:4D:2C:EB:CF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 148F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3E349F228E011F095BE89F5DAE4EC9C.roa
Signing time: Sun 04 May 2025 12:11:48 +0000
ROA not before: Sun 04 May 2025 12:11:43 +0000
ROA not after: Tue 04 May 2027 12:11:43 +0000
asID: 834
IP address blocks: 102.129.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5263 (0x148f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 4 12:11:43 2025 GMT
Not After : May 4 12:11:43 2027 GMT
Subject: CN=68175984-5573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:ef:48:a1:16:bc:07:1f:57:33:30:9a:46:
4d:89:7a:08:70:bf:a3:75:0d:ba:ef:d6:49:a6:1e:
e5:6f:62:e9:b9:bc:db:80:8f:38:cb:47:3f:59:aa:
6b:c6:f1:8b:af:9f:c0:23:63:9c:18:ba:e0:ac:41:
22:bf:42:03:42:73:70:01:34:ec:35:f5:cc:eb:c9:
3b:0c:b9:9f:b3:41:5a:56:ed:c9:d3:79:c7:9a:6f:
8f:f1:da:cb:51:b6:4a:85:03:e9:83:7a:95:d8:8d:
3f:54:8b:f9:7a:c9:f8:7e:f7:3a:77:f1:d8:b7:8b:
7a:79:52:21:7e:f1:da:d4:d8:7f:ff:35:43:61:a8:
4d:4d:dd:1f:be:a6:1d:5b:b7:95:40:1f:7f:34:21:
51:99:d9:d7:31:4c:6b:19:7c:0b:12:3a:98:74:5f:
21:44:92:f8:f8:55:a1:41:2f:0a:a4:82:9a:eb:ab:
c6:d1:9b:45:3a:44:b6:93:85:eb:19:21:46:30:0e:
30:60:b0:4b:8c:4a:2e:d2:c8:ea:1e:88:11:e9:d6:
b6:81:7a:4b:fb:8e:e5:eb:73:62:91:b4:3a:27:61:
6f:90:55:cd:88:b2:c3:5a:61:1e:3f:5e:39:25:19:
dd:81:b0:5a:bc:b3:a2:b3:cd:db:16:26:16:95:0e:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:B4:D4:61:48:E5:E1:40:D3:5D:DF:F4:AB:53:22:4D:2C:EB:CF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3E349F228E011F095BE89F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a3:e1:63:e6:5d:b4:6c:ca:51:0c:f2:ae:09:2a:a6:50:30:
70:0f:b0:58:65:1d:94:42:25:43:0a:eb:d9:da:e8:c6:5a:c1:
60:fa:81:a9:55:8c:64:66:9e:01:7d:1c:4e:ac:66:75:1e:93:
c6:bc:a7:e8:60:8b:c0:fd:f5:c5:b5:5c:0f:c9:fe:f5:a2:2c:
c5:03:e0:c2:21:2f:37:a8:d2:42:4d:eb:97:42:c3:6b:a4:2f:
ad:61:b5:17:63:f4:b1:13:ac:19:e6:ea:64:51:c3:b1:c9:59:
7c:31:99:11:bb:2f:fb:6e:1a:fb:25:a4:54:74:0a:df:76:58:
b8:07:a2:e9:32:00:d9:dd:39:f1:f0:79:cc:c1:38:e3:c4:e1:
d4:f3:0d:e8:ab:a0:69:14:c9:01:5d:de:aa:a7:7a:13:33:fa:
90:b2:17:d8:38:5b:9f:1f:ec:04:32:44:5a:28:9e:52:c2:99:
73:7b:89:95:dc:e2:e3:ac:28:d5:f0:87:cb:be:a8:52:22:1e:
19:03:a5:9b:53:17:8d:6f:1f:c0:05:b5:40:d8:8c:dd:b1:6f:
de:29:96:12:9c:ef:82:6b:8a:9c:4c:82:38:11:6d:8b:a4:2b:
f6:df:c7:45:d9:9a:0e:7e:39:78:9a:5f:bb:23:f0:0a:26:3e:
b0:42:39:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:25:03 2025 by rpki-client