Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/2F3D551024F911F09BB339D4DAE4EC9C.roa
File: 2F3D551024F911F09BB339D4DAE4EC9C.roa (raw, json)
Hash identifier: T5EPONyGku9SJnozgBgbzF/9KQOwMkX+WT4w61q7z3c=
Subject key identifier: 9E:72:81:AE:8A:7B:08:83:13:BD:FE:94:93:7B:0F:54:48:2C:5D:30
Certificate issuer: /CN=F36C6D54AF/serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Certificate serial: 16
Authority key identifier: 40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/2F3D551024F911F09BB339D4DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 12:55:11 +0000
ROA not before: Tue 29 Apr 2025 12:55:06 +0000
ROA not after: Thu 30 Apr 2026 12:55:06 +0000
asID: 329489
IP address blocks: 102.207.249.0/26 maxlen: 26
Validation: Failed, certificate revoked on Wed 30 Apr 2025 09:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6D54AF, serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Validity
Not Before: Apr 29 12:55:06 2025 GMT
Not After : Apr 30 12:55:06 2026 GMT
Subject: CN=6810cc2f-be7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:0d:6e:52:69:15:17:30:70:a9:84:49:01:
f8:26:67:33:fc:91:4d:96:d8:fa:0f:2a:67:5f:1c:
13:d6:e6:db:99:de:b2:2c:ea:fd:d3:e5:b9:53:94:
66:ca:6b:72:6d:0b:67:2b:e5:d9:f7:40:c6:32:21:
8a:5d:56:15:5b:fd:3f:12:34:57:0c:5f:8a:4d:1e:
83:38:9e:3a:62:20:dd:c2:8f:98:ea:3c:40:91:8f:
79:54:25:36:cf:31:61:fc:08:5b:44:74:60:cc:d8:
37:d1:48:1d:81:e5:1e:c4:56:22:12:62:f1:c1:3c:
b5:4a:0f:e5:82:3c:37:7d:af:50:c5:d9:dc:8d:82:
16:c9:2e:fb:f0:4d:59:73:96:f9:63:f7:03:f9:e4:
c5:55:8d:97:bd:b7:49:d5:2a:ed:ea:63:e9:7b:c6:
02:6d:ba:ff:bc:aa:cd:76:d3:4f:b5:e2:8b:eb:32:
4a:01:92:23:a9:f1:f9:16:d1:50:ce:f3:b8:f2:57:
7a:f7:d0:e9:00:db:db:b1:b7:8e:07:fe:f9:9b:28:
88:91:83:0e:ba:7f:90:ac:46:69:7f:66:e5:bb:61:
ed:87:84:1d:de:7e:09:ca:18:9e:29:22:78:b8:89:
34:ab:85:6d:1d:b7:22:34:ed:4c:be:e6:c3:24:eb:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:72:81:AE:8A:7B:08:83:13:BD:FE:94:93:7B:0F:54:48:2C:5D:30
X509v3 Authority Key Identifier:
keyid:40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/2F3D551024F911F09BB339D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.249.0/26
Signature Algorithm: sha256WithRSAEncryption
35:2b:a7:11:ce:43:a4:d4:cb:47:2d:cd:a4:df:e8:9e:91:60:
ac:69:e2:e0:75:f9:ad:14:14:5e:e6:77:7c:1f:ea:73:bb:d3:
e9:67:e5:ee:16:fb:cc:3e:85:dc:a0:60:61:53:e1:bb:dd:47:
a1:2b:7a:87:bb:fe:47:59:93:b2:c8:f4:d0:33:32:60:cf:d7:
2e:76:14:ae:a2:9c:a5:78:3d:1f:79:5b:62:4b:93:47:31:83:
f5:7f:fe:4d:f6:85:0e:5c:46:2a:b8:aa:08:91:bc:b8:13:09:
07:c2:70:24:6d:ba:24:9a:d1:aa:cd:0d:57:d5:72:8c:82:a0:
d7:0d:be:8e:ad:ba:61:59:0e:be:0b:6e:a1:ea:b8:a5:bd:5c:
49:d5:89:4f:a9:1f:ba:a0:1f:2f:f6:f6:5f:ff:98:2d:64:25:
b8:d9:1d:f3:eb:38:75:fb:18:7b:4e:ba:37:6e:c0:55:6b:40:
3f:d7:75:91:81:ae:17:41:1e:55:19:71:e2:10:b2:ff:69:db:
00:f0:e2:d1:db:59:9e:cf:be:77:a5:72:dd:fc:6c:10:bf:54:
d2:7b:b4:30:d6:0b:02:c3:ba:e1:0b:b8:71:ab:1c:1f:78:ae:
93:c8:99:50:ee:3c:ec:d7:52:5e:7e:e5:9c:5c:9e:23:ed:98:
bf:88:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:21:11 2025 by rpki-client