Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/B565D38C24FA11F0AEEC42DDDAE4EC9C.roa
File: B565D38C24FA11F0AEEC42DDDAE4EC9C.roa (raw, json)
Hash identifier: 4EiqIpjDLG8Moz42+LNlGYFX0CRQovRzvJeo8QN4uQ0=
Subject key identifier: C9:2D:08:2E:16:CF:E4:CA:AC:93:C9:40:B0:79:11:06:87:87:35:5E
Certificate issuer: /CN=F36C6D54AF/serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Certificate serial: 18
Authority key identifier: 40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/B565D38C24FA11F0AEEC42DDDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 13:06:06 +0000
ROA not before: Tue 29 Apr 2025 13:06:01 +0000
ROA not after: Thu 30 Apr 2026 13:06:01 +0000
asID: 329489
IP address blocks: 102.207.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 29 Apr 2025 18:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6D54AF, serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Validity
Not Before: Apr 29 13:06:01 2025 GMT
Not After : Apr 30 13:06:01 2026 GMT
Subject: CN=6810cebd-d9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:b1:ea:e5:ff:8a:50:58:f5:01:87:37:57:
9a:18:2b:f3:9f:3a:c3:c6:72:19:b4:93:ab:3e:c2:
96:d5:f4:3b:4d:9f:11:97:42:c5:88:eb:fd:36:6e:
9a:73:f7:57:03:c4:64:db:38:72:6b:ba:7c:ca:cb:
dd:56:c9:10:98:9e:3b:97:b6:8e:c7:12:cc:1c:98:
c9:0a:f6:f8:db:f3:33:0d:f1:77:cb:77:43:4d:9c:
84:e0:3a:ed:06:74:fc:50:ad:9e:36:34:db:6d:c1:
34:65:8b:9f:b7:10:04:12:90:6e:96:8c:57:48:b1:
00:d1:66:00:f6:2b:64:76:bc:b9:90:f8:66:ff:d9:
e5:17:13:9c:ef:16:13:f4:cd:4c:87:99:0c:b1:42:
66:70:4a:4d:02:ff:1f:ae:18:33:1f:a2:c9:c1:9c:
9a:3a:f2:81:1b:de:86:3d:3c:3e:66:3c:f4:7d:cb:
22:9a:b6:5b:a5:a9:a9:07:4d:e1:51:8f:a4:ee:73:
34:81:54:d8:ea:42:be:15:d5:55:1c:73:54:f1:87:
e8:8a:c5:8b:b9:0a:8a:3b:bb:49:24:bc:15:40:52:
f9:b1:52:8a:41:c8:83:71:f7:14:0a:db:32:5f:ad:
60:e7:39:0b:0f:e3:5c:56:9d:51:db:8f:27:e9:56:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:08:2E:16:CF:E4:CA:AC:93:C9:40:B0:79:11:06:87:87:35:5E
X509v3 Authority Key Identifier:
keyid:40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/B565D38C24FA11F0AEEC42DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.248.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:0a:37:64:81:83:a1:b3:1c:c0:74:4a:ce:68:0a:1f:87:9a:
57:4f:76:fa:00:a8:4a:c2:73:b0:36:9a:d1:2c:9c:4f:49:d9:
8f:7b:bd:44:9a:3b:77:f8:47:83:93:3d:5a:7d:d2:89:58:91:
ef:b4:9d:a0:fd:94:96:08:a3:86:db:83:24:18:ce:25:43:01:
f8:43:f8:95:f5:14:01:88:3d:02:db:8b:31:91:f9:d8:48:ef:
0f:9d:25:d9:21:b8:25:ca:bc:1b:dd:dd:53:fc:2e:62:96:d3:
5e:f8:71:2e:c8:56:b7:3e:17:8e:75:82:23:ed:6d:ad:ed:24:
1c:da:82:10:ff:8e:2a:fa:35:68:93:af:2a:2a:05:2a:a4:ba:
60:3d:0a:02:b7:10:e8:ee:47:a9:66:23:fa:17:4a:35:ab:f5:
f9:87:02:d9:6f:78:30:0f:9b:62:a3:94:3f:7c:7a:87:5c:03:
15:e9:87:59:c9:90:11:ec:5c:ff:4b:a0:38:4b:0b:e5:63:4a:
bf:26:4e:2f:ad:ff:41:30:f7:31:65:a8:6e:48:13:dd:63:10:
36:96:21:96:0c:37:87:5e:0a:38:08:69:08:d0:5a:61:68:cc:
cf:6b:09:0c:92:8d:98:4d:ce:ed:3f:e8:21:00:a8:72:70:34:
60:fb:8e:95
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBGDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NkQ1NEFGMTEwLwYDVQQFEyg0MDg5NTg4ODFCOTRFMzU2ODFFREMxRDFERjA4NTlG
NzcxMzZBMEE1MB4XDTI1MDQyOTEzMDYwMVoXDTI2MDQzMDEzMDYwMVowGDEWMBQG
A1UEAxMNNjgxMGNlYmQtZDlhMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMHuserl/4pQWPUBhzdXmhgr8586w8ZyGbSTqz7CltX0O02fEZdCxYjr/TZu
mnP3VwPEZNs4cmu6fMrL3VbJEJieO5e2jscSzByYyQr2+NvzMw3xd8t3Q02chOA6
7QZ0/FCtnjY0223BNGWLn7cQBBKQbpaMV0ixANFmAPYrZHa8uZD4Zv/Z5RcTnO8W
E/TNTIeZDLFCZnBKTQL/H64YMx+iycGcmjrygRvehj08PmY89H3LIpq2W6WpqQdN
4VGPpO5zNIFU2OpCvhXVVRxzVPGH6IrFi7kKiju7SSS8FUBS+bFSikHIg3H3FArb
Ml+tYOc5Cw/jXFadUduPJ+lWypcCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTJLQgu
Fs/kyqyTyUCweREGh4c1XjAfBgNVHSMEGDAWgBRAiViIG5TjVoHtwdHfCFn3cTag
pTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzZENTQvRjQ2RDExODYyMjc0MTFGMEEwRkRGMjdFREFFNEVDOUMvUUlsWWlC
dVU0MWFCN2NIUjN3aFo5M0Uyb0tVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUUlsWWlCdVU0MWFCN2NIUjN3aFo5M0Uyb0tVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZENTQvRjQ2RDExODYyMjc0MTFGMEEwRkRGMjdFREFF
NEVDOUMvQjU2NUQzOEMyNEZBMTFGMEFFRUM0MkREREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWbP+DANBgkqhkiG9w0BAQsF
AAOCAQEAygo3ZIGDobMcwHRKzmgKH4eaV092+gCoSsJzsDaa0SycT0nZj3u9RJo7
d/hHg5M9Wn3SiViR77SdoP2UlgijhtuDJBjOJUMB+EP4lfUUAYg9AtuLMZH52Ejv
D50l2SG4Jcq8G93dU/wuYpbTXvhxLshWtz4XjnWCI+1tre0kHNqCEP+OKvo1aJOv
KioFKqS6YD0KArcQ6O5HqWYj+hdKNav1+YcC2W94MA+bYqOUP3x6h1wDFemHWcmQ
Eexc/0ugOEsL5WNKvyZOL63/QTD3MWWobkgT3WMQNpYhlgw3h14KOAhpCNBaYWjM
z2sJDJKNmE3O7T/oIQCocnA0YPuOlQ==
-----END CERTIFICATE-----
Generated at Fri May 2 12:05:26 2025 by rpki-client