Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/999DDA363D6011F0AE55B0EBDAE4EC9C.roa
File: 999DDA363D6011F0AE55B0EBDAE4EC9C.roa (raw, json)
Hash identifier: GPX9nP6mkhCDQZOLsws6+S2ZO8EHLN6c0hX1b7eYLWw=
Subject key identifier: 35:00:5F:AD:24:25:FB:D2:BA:97:EF:8F:64:9A:60:1E:85:2B:79:3B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0AE5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/999DDA363D6011F0AE55B0EBDAE4EC9C.roa
Signing time: Fri 30 May 2025 14:15:56 +0000
ROA not before: Fri 30 May 2025 14:15:51 +0000
ROA not after: Fri 29 May 2026 14:15:51 +0000
asID: 208485
IP address blocks: 102.135.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 10:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 30 14:15:51 2025 GMT
Not After : May 29 14:15:51 2026 GMT
Subject: CN=6839bd9b-98ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:24:4f:d2:8c:2a:75:06:e7:35:1a:0e:6b:
63:18:b8:cc:b8:82:40:1b:ef:36:73:33:46:a6:28:
35:7e:b4:cd:64:cb:eb:d5:57:c5:0b:fa:99:13:83:
15:49:0f:08:3d:90:33:80:f7:f1:86:b1:a6:d5:a0:
81:22:2b:13:63:c5:ec:42:bf:7e:64:ab:5f:87:0f:
75:4f:54:33:c8:52:3e:45:76:5d:46:33:16:e0:95:
40:12:0b:81:f0:f2:c9:67:6b:c4:5b:77:5b:d6:46:
cd:d2:71:69:b5:10:65:06:6e:9e:d1:b1:40:4d:81:
68:db:45:89:3f:7c:f0:30:48:c2:0d:76:3a:7b:6f:
38:40:01:97:f4:e6:77:fe:99:b3:9e:d1:e6:97:fd:
4d:af:19:cc:d7:70:59:65:71:28:4f:b5:b2:26:75:
c1:8d:93:03:7a:41:f9:4b:c5:0d:e9:ef:3f:9f:9f:
4d:b5:db:6a:87:9a:ee:03:24:b6:7e:9e:1d:02:0f:
52:4e:ff:c3:dd:6a:78:bc:2b:df:80:72:69:cd:d7:
41:4d:dd:a3:64:ac:80:4d:34:97:b2:b2:31:43:dc:
36:6e:05:d5:3f:d3:d4:c4:18:64:f5:ba:1b:3c:7c:
15:24:29:67:4a:0d:f3:c1:25:02:d9:12:25:e1:49:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:00:5F:AD:24:25:FB:D2:BA:97:EF:8F:64:9A:60:1E:85:2B:79:3B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/999DDA363D6011F0AE55B0EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.39.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3b:af:46:73:a7:95:b2:90:b6:5b:41:94:54:ec:6a:e1:43:
c5:1b:bc:d0:03:e0:05:ac:77:7b:46:5c:99:4f:31:9b:ba:42:
e1:9e:70:17:06:eb:14:60:7c:15:da:08:a6:8c:a0:36:25:17:
0d:f9:19:11:86:e9:9d:4e:68:77:ee:53:80:06:28:8e:72:7c:
c0:22:32:bb:c3:22:1e:e2:d4:52:3b:e7:f5:9e:34:a4:fe:98:
76:7c:ce:95:73:a1:83:04:28:46:08:f0:67:d4:4a:b3:c5:6a:
db:17:57:d2:9e:b1:46:69:b8:59:57:f3:c1:56:21:27:b8:11:
73:c0:4e:55:41:54:47:bc:5d:cb:41:fe:e6:3a:af:b0:ea:fc:
9e:4f:ff:55:b6:1f:b1:57:3f:d6:6f:53:bc:af:2a:98:bd:da:
ec:01:f9:24:1a:1c:18:b5:7a:b9:89:6a:c9:b1:38:3b:79:55:
89:98:c9:30:83:e8:90:b4:09:e6:ef:e8:88:7c:99:55:17:85:
be:2d:3b:de:76:5f:58:e2:a7:45:f8:64:82:e3:5e:ad:e9:7b:
f6:a0:b7:13:20:91:96:ac:3e:0d:11:f2:ed:c4:5a:c7:d8:b3:
50:18:dc:e9:23:c8:be:e1:e9:96:81:14:e1:e0:f2:e8:32:56:
47:82:8b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:16:21 2025 by rpki-client