Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/88C9B962E92011EFA46EAB61762E951A.roa
File: 88C9B962E92011EFA46EAB61762E951A.roa (raw, json)
Hash identifier: 5QxZUGmrBfYNUFjERAjof9ot8Qf2zrZoO5sft8f10c0=
Subject key identifier: 63:F1:7B:15:D1:CD:0B:68:37:28:37:BC:25:29:E3:05:03:44:66:E6
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 29
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/88C9B962E92011EFA46EAB61762E951A.roa
Signing time: Wed 12 Feb 2025 09:05:42 +0000
ROA not before: Wed 12 Feb 2025 09:05:37 +0000
ROA not after: Sun 31 Dec 2028 09:05:37 +0000
asID: 30985
IP address blocks: 102.212.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 12 09:05:37 2025 GMT
Not After : Dec 31 09:05:37 2028 GMT
Subject: CN=67ac6465-d801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:75:0c:0e:90:8b:64:bb:ba:d3:3a:90:25:
17:51:2a:51:12:60:ba:ce:19:4a:d4:cc:86:83:4f:
05:a1:ea:a5:24:5b:96:f3:4b:9a:47:9d:be:7e:4b:
cf:95:70:91:81:52:40:a5:de:a4:ec:58:e7:9a:36:
92:54:ce:2d:16:87:9c:ca:50:cf:e3:21:2b:58:a0:
22:c7:4b:28:97:e1:d2:00:d8:8f:a5:fc:e1:cd:a8:
58:c9:96:fb:98:62:b0:c5:8f:57:7e:43:fe:d8:27:
d7:fe:a7:9b:0d:24:6a:b9:ab:ed:3d:ef:ac:87:52:
6d:8a:9c:64:1e:1c:90:f1:a6:b1:57:74:6e:80:fb:
e4:d3:38:fb:f5:b3:23:25:76:e2:b6:ce:20:be:cd:
1e:7b:f2:d2:36:dd:d6:54:ae:0b:c4:2b:cf:52:4e:
e9:30:19:20:85:2f:cb:74:95:d7:bf:a8:75:ca:91:
3e:58:69:b2:aa:c6:28:76:73:98:f3:a4:c0:21:35:
45:77:98:96:92:90:89:77:ac:af:cc:cc:9d:38:41:
7b:5a:fd:ac:1b:0c:e9:ae:a0:63:13:3e:6c:c1:4d:
25:a7:aa:f2:01:9a:b0:51:5c:82:fb:2d:01:a2:ad:
7e:75:58:8a:a1:86:65:9a:8e:50:60:99:a4:a6:58:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F1:7B:15:D1:CD:0B:68:37:28:37:BC:25:29:E3:05:03:44:66:E6
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/88C9B962E92011EFA46EAB61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:f3:66:e8:94:d4:c3:9e:58:dc:68:44:71:bd:46:82:0e:e7:
a9:8c:db:aa:5d:8d:c7:be:e8:f7:f3:45:4c:a4:5f:0d:9b:cd:
53:f9:b6:5a:64:41:67:da:a3:b8:4b:20:6e:ca:5f:af:ab:91:
0d:f8:5d:72:76:d0:ad:be:64:50:a3:cf:e7:0b:35:85:aa:a3:
c1:c5:1c:91:84:6b:16:6e:dd:11:38:1f:2b:78:39:d5:c1:09:
22:51:3d:03:fb:a5:bf:28:20:6b:d1:0c:7b:55:af:c0:44:5f:
85:18:73:20:69:ea:70:0e:73:e5:4c:00:2c:f4:24:bd:28:b4:
7b:8e:53:5d:a3:cc:58:04:b1:a5:d6:10:2f:ba:7c:48:0f:e1:
8c:77:fd:35:c1:eb:dd:00:a0:b8:7e:5e:48:37:80:83:cf:55:
1c:4d:61:68:62:5d:44:41:91:cc:1a:4a:c6:d8:bf:20:a6:68:
6e:d0:83:04:98:77:82:8d:53:6e:b2:dd:19:40:c5:90:cc:da:
53:a5:8e:50:3f:8c:03:9d:fb:24:7e:5e:e8:a5:ff:16:69:d0:
b6:e1:f1:86:91:ad:fd:a7:1e:42:c0:af:ba:ab:55:88:47:21:
06:3a:87:11:49:8b:51:ff:64:1e:2c:53:e1:41:90:b3:98:1d:
c9:0b:6c:28
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBKTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
Q0Q3MkFGMTEwLwYDVQQFEyg3NzA4RTY2RjFDMDdDMUQ3NjcwQUVCREJBRTE4NkRB
NDJCQ0IzMEM3MB4XDTI1MDIxMjA5MDUzN1oXDTI4MTIzMTA5MDUzN1owGDEWMBQG
A1UEAxMNNjdhYzY0NjUtZDgwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkQdQwOkItku7rTOpAlF1EqURJgus4ZStTMhoNPBaHqpSRblvNLmkedvn5L
z5VwkYFSQKXepOxY55o2klTOLRaHnMpQz+MhK1igIsdLKJfh0gDYj6X84c2oWMmW
+5hisMWPV35D/tgn1/6nmw0karmr7T3vrIdSbYqcZB4ckPGmsVd0boD75NM4+/Wz
IyV24rbOIL7NHnvy0jbd1lSuC8Qrz1JO6TAZIIUvy3SV17+odcqRPlhpsqrGKHZz
mPOkwCE1RXeYlpKQiXesr8zMnThBe1r9rBsM6a6gYxM+bMFNJaeq8gGasFFcgvst
AaKtfnVYiqGGZZqOUGCZpKZYUN0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRj8XsV
0c0LaDcoN7wlKeMFA0Rm5jAfBgNVHSMEGDAWgBR3COZvHAfB12cK69uuGG2kK8sw
xzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYyRTk1MUEvZHdqbWJ4
d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZHdqbWJ4d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYy
RTk1MUEvODhDOUI5NjJFOTIwMTFFRkE0NkVBQjYxNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbUSDANBgkqhkiG9w0BAQsF
AAOCAQEAT/Nm6JTUw55Y3GhEcb1Ggg7nqYzbql2Nx77o9/NFTKRfDZvNU/m2WmRB
Z9qjuEsgbspfr6uRDfhdcnbQrb5kUKPP5ws1haqjwcUckYRrFm7dETgfK3g51cEJ
IlE9A/ulvygga9EMe1WvwERfhRhzIGnqcA5z5UwALPQkvSi0e45TXaPMWASxpdYQ
L7p8SA/hjHf9NcHr3QCguH5eSDeAg89VHE1haGJdREGRzBpKxti/IKZobtCDBJh3
go1TbrLdGUDFkMzaU6WOUD+MA537JH5e6KX/FmnQtuHxhpGt/aceQsCvuqtViEch
BjqHEUmLUf9kHixT4UGQs5gdyQtsKA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:21:44 2025 by rpki-client