Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/7E98FA82092611EF8641FDFB007001B1.roa
File: 7E98FA82092611EF8641FDFB007001B1.roa (raw, json)
Hash identifier: gzQC+KV0ILJmlKY9a9OWV+QNABBJxUzacIWZHD0VuZk=
Subject key identifier: D2:97:E7:1E:AE:C8:EE:F8:F0:BC:E1:8E:2F:BE:DC:10:FC:B2:E8:68
Certificate issuer: /CN=F36B86D4AF/serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Certificate serial: 02
Authority key identifier: BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/7E98FA82092611EF8641FDFB007001B1.roa
Signing time: Fri 03 May 2024 08:24:01 +0000
ROA not before: Fri 03 May 2024 08:23:57 +0000
ROA not after: Sat 02 May 2026 08:23:57 +0000
asID: 329157
IP address blocks: 102.214.96.0/22 maxlen: 23
102.214.98.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 03 May 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B86D4AF, serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Validity
Not Before: May 3 08:23:57 2024 GMT
Not After : May 2 08:23:57 2026 GMT
Subject: CN=66349f21-9e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:41:3f:93:4e:80:13:0c:a5:38:c2:2e:cb:
69:03:4b:75:d4:d9:da:06:aa:62:35:71:3d:0c:ee:
97:f2:e3:a8:ea:be:05:f7:28:5e:f8:08:20:d6:f7:
7d:38:8d:88:d7:01:66:dc:ad:4a:b8:12:67:a7:f9:
e7:56:07:b6:c3:fe:53:08:0b:6c:68:6a:d9:84:ba:
44:fc:71:6b:9a:6b:d1:b3:9c:13:8e:ad:b5:d6:dc:
72:c3:b6:35:71:85:cb:aa:e9:5a:8a:48:e5:b2:26:
74:2c:e3:41:84:d6:58:f4:c1:21:9a:a7:ef:dd:19:
31:e9:e6:4c:52:0d:d5:5d:2f:81:54:1e:97:2c:6d:
15:74:9b:8e:5d:da:20:55:aa:4c:2b:6c:d7:97:65:
59:da:fb:f9:1a:e0:9e:41:7f:43:4f:43:5c:1c:cf:
52:03:91:00:d8:07:82:1b:48:f3:f5:cd:d8:a7:a6:
eb:40:cd:18:fa:95:f6:f0:50:a6:b2:d6:24:56:65:
1f:db:36:b7:f8:f7:ef:42:bf:fc:9e:b2:c2:16:5d:
56:d9:1d:19:20:c9:f5:f7:8d:2c:ed:e9:b3:57:3e:
06:e6:9d:75:d4:3e:48:46:d2:c2:07:8d:25:ac:dc:
ef:24:70:b6:a2:4a:1c:d1:fa:f6:b7:12:55:ee:3b:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:97:E7:1E:AE:C8:EE:F8:F0:BC:E1:8E:2F:BE:DC:10:FC:B2:E8:68
X509v3 Authority Key Identifier:
keyid:BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/7E98FA82092611EF8641FDFB007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:3f:0c:5f:10:ee:fd:b3:26:db:16:41:60:f3:00:0f:1e:20:
c7:7f:75:bb:3f:97:b7:4a:a3:0d:e9:bd:33:b8:ed:da:6e:d2:
86:7b:8b:76:89:ed:11:dd:68:33:aa:af:36:17:95:03:11:49:
cc:38:76:24:1f:7c:11:6c:ba:13:41:13:6f:d6:a5:b9:2d:b9:
b6:98:f7:0f:f8:03:f7:c0:f5:46:8e:8d:f1:be:e8:6e:1f:90:
6b:72:51:b0:e1:d3:d3:85:51:7f:c2:7f:d0:4c:97:2f:36:88:
a2:20:91:0d:1d:95:36:d0:d1:03:aa:9b:dc:44:25:c4:b7:07:
bc:97:af:fb:ce:5a:8a:68:55:41:b5:d3:aa:0c:8c:14:97:04:
0c:45:63:3a:63:9e:82:fc:d0:be:24:6c:b7:4f:a1:4f:98:01:
ca:12:98:58:e6:1c:21:c5:64:1a:6a:55:09:58:65:5c:2f:21:
6a:f2:54:9a:af:46:21:61:13:a9:8f:fe:aa:38:1e:8e:12:8b:
b8:ce:52:9c:d8:18:1c:ab:a8:2e:03:d4:73:8b:8a:4e:8d:a4:
11:5a:51:79:65:4b:fb:45:c4:73:35:f3:b7:14:66:80:0b:81:
4f:32:78:93:67:2e:d7:91:96:d3:c8:ab:80:5a:dc:77:58:bf:
e9:7f:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:39:29 2025 by rpki-client