Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/7B658F00092711EF96B68002017001B1.roa
File: 7B658F00092711EF96B68002017001B1.roa (raw, json)
Hash identifier: isUPJ0di/y05OVlt1VV4+CZunfbChi1Qwu0KbWpa6gM=
Subject key identifier: EF:41:39:71:04:33:06:28:67:4F:35:91:2B:0E:04:68:FD:E7:41:62
Certificate issuer: /CN=F36B86D4AF/serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Certificate serial: 05
Authority key identifier: BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/7B658F00092711EF96B68002017001B1.roa
Signing time: Fri 03 May 2024 08:31:05 +0000
ROA not before: Fri 03 May 2024 08:31:02 +0000
ROA not after: Sun 03 May 2026 08:31:02 +0000
asID: 329157
IP address blocks: 102.214.96.0/23 maxlen: 23
102.214.98.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 03 May 2024 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B86D4AF, serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Validity
Not Before: May 3 08:31:02 2024 GMT
Not After : May 3 08:31:02 2026 GMT
Subject: CN=6634a0c9-e810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:ed:01:24:95:e5:1d:08:91:27:8e:ab:f8:
01:d7:9b:41:00:0c:93:59:ee:4a:93:d7:ac:9a:1c:
e4:87:9a:91:d8:f9:7d:bd:b9:c4:1a:01:3b:44:51:
07:e9:62:f4:77:a0:f5:96:1a:cf:1f:d6:ee:0c:25:
a4:2f:f2:2c:ca:aa:87:af:b7:13:8a:6a:49:d8:02:
2d:c1:6c:0b:0f:fc:c6:c1:08:68:d1:a3:72:51:e6:
1c:49:c1:07:54:fa:e3:2e:16:2e:1b:51:ab:76:da:
14:71:1b:98:1e:dd:eb:fb:91:09:7d:1f:e6:ee:ef:
b0:e6:24:11:72:ed:5f:d1:f7:d6:01:23:82:66:dd:
73:c6:2d:f2:9c:b4:6d:2b:d6:4f:06:6a:69:74:40:
3d:41:20:8f:55:ea:e1:08:3f:2c:9b:e7:33:2a:ce:
b7:ec:a2:1a:36:ae:2e:74:be:43:dd:a3:d7:b8:67:
b5:40:72:e5:15:46:d1:77:63:e9:19:b1:16:50:c7:
94:7f:ec:d4:11:86:45:46:15:4f:5d:c2:fc:ca:17:
42:e0:2e:3e:d6:a5:e8:3e:b6:ec:cb:61:f4:f2:54:
55:ea:ec:45:40:3e:04:c1:b9:3c:a8:8c:51:28:59:
59:40:b7:71:d8:4a:74:d0:9e:dc:1a:03:f3:03:22:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:41:39:71:04:33:06:28:67:4F:35:91:2B:0E:04:68:FD:E7:41:62
X509v3 Authority Key Identifier:
keyid:BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/7B658F00092711EF96B68002017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:7c:3a:ba:e5:4f:9e:8d:3a:9a:f9:ff:94:77:c2:5f:97:8a:
ae:7b:76:4c:d6:88:41:ff:c5:4c:b0:1d:7a:d4:36:9f:1f:c9:
ae:45:35:31:5c:8f:74:54:6f:59:8c:a6:5d:39:3e:74:93:88:
d9:a8:52:6d:4b:95:38:5a:38:cd:ce:50:bb:4f:42:23:14:f1:
c1:73:9c:94:c9:0b:67:4a:93:ee:c8:8b:98:0a:9f:55:9b:81:
da:65:aa:f9:0e:13:a6:bf:72:bc:14:d9:7d:34:b6:36:79:5d:
8d:16:f8:b9:25:05:3a:d4:3d:98:c1:e2:29:00:0d:52:53:a5:
a3:81:02:4a:a0:6a:c0:95:83:22:c7:67:5c:28:d1:e4:da:dd:
3c:57:27:a3:30:22:92:e6:b9:7b:5f:f8:59:9e:18:97:8b:9c:
bc:a9:27:43:c1:4e:fa:4e:fe:d4:95:e8:b4:4d:53:44:6e:31:
a8:c4:d2:eb:0e:95:0d:ea:95:7c:61:07:fe:8a:00:49:96:d9:
b7:69:1e:9e:14:17:e7:2a:9a:0d:b6:9d:ff:b8:51:65:5c:c4:
48:79:b5:90:4c:06:90:05:a0:c8:bc:37:a1:2d:1c:7a:5b:31:
66:de:cb:28:89:ba:a4:61:9c:fb:e9:fc:eb:fe:b4:d9:93:90:
44:06:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:16:29 2025 by rpki-client