Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/BB9422B024DF11F0B78FBDABDAE4EC9C.roa
File: BB9422B024DF11F0B78FBDABDAE4EC9C.roa (raw, json)
Hash identifier: xgU4oL2Yut7B1A0Rdjk5Ia6Q9rPo9zxPAbrgrKOLhGM=
Subject key identifier: C5:D6:93:3B:C4:19:5E:C1:74:D6:66:D1:91:48:71:90:22:D5:EC:A9
Certificate issuer: /CN=F36C6D54AF/serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Certificate serial: 0D
Authority key identifier: 40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/BB9422B024DF11F0B78FBDABDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 09:52:59 +0000
ROA not before: Tue 29 Apr 2025 09:52:55 +0000
ROA not after: Thu 30 Apr 2026 09:52:55 +0000
asID: 60171
IP address blocks: 102.207.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 12:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6D54AF, serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Validity
Not Before: Apr 29 09:52:55 2025 GMT
Not After : Apr 30 09:52:55 2026 GMT
Subject: CN=6810a17b-9b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:1e:94:22:68:3b:49:54:02:82:af:e2:30:
fb:d7:8b:88:1a:74:6d:6a:e2:a6:f4:cd:db:77:b9:
3f:53:83:4f:1d:69:7f:e9:6a:44:ba:47:d0:29:c5:
2b:12:64:2c:83:ec:e3:25:72:8a:14:9f:d5:2e:78:
72:2c:5a:1a:c8:84:7d:af:ae:4c:5f:a8:e2:85:2c:
6e:44:f8:34:3f:0f:66:07:12:55:ed:b9:54:0b:66:
9f:65:01:60:a2:f2:dc:69:6d:e7:a2:1e:b8:22:ff:
0a:19:fb:93:a4:74:c8:62:18:b9:76:56:4a:78:ce:
4b:0c:b7:95:55:f0:f4:5e:c8:51:fd:78:b2:57:bc:
23:12:a0:88:32:a8:db:7b:4c:1c:82:9a:25:48:e4:
6f:a9:1d:d8:66:35:b8:c7:b4:61:88:97:fb:d1:4b:
cf:d1:9c:1b:23:2a:35:c4:62:ff:b8:c5:bf:48:f5:
35:5e:48:fc:78:59:b5:03:61:27:16:1b:2c:a2:73:
f9:ae:4b:bd:3e:37:0f:19:f1:92:56:32:79:f1:0a:
71:c3:31:c5:c0:7f:08:b5:77:17:f0:f6:eb:c2:71:
c6:f8:50:af:df:9b:b0:c3:4b:fe:7f:19:4c:bc:0c:
cd:c6:85:2c:6e:73:ea:15:bb:59:8c:98:e7:13:9b:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D6:93:3B:C4:19:5E:C1:74:D6:66:D1:91:48:71:90:22:D5:EC:A9
X509v3 Authority Key Identifier:
keyid:40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/BB9422B024DF11F0B78FBDABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.248.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f5:a0:60:e3:ab:89:45:99:b0:ec:e8:8c:14:a4:8d:b4:77:
91:81:90:b2:53:f9:f4:57:3b:68:cc:e5:20:8c:76:25:28:32:
2b:38:90:22:b2:83:14:66:6d:25:58:6a:a5:bb:db:9b:b5:66:
23:ed:67:6f:8b:24:27:b3:e8:09:56:1c:a5:dc:b6:a0:d0:0b:
ec:13:ff:45:b8:52:9c:0e:76:65:0c:5d:bb:3d:61:52:0a:d7:
2b:79:34:4e:f0:fb:ed:8a:5e:6e:49:5e:ab:39:b2:c0:46:35:
a3:09:49:aa:23:56:16:da:39:88:c2:b9:13:12:42:f3:dc:a6:
40:9d:ee:21:6a:d2:36:7f:f7:a3:06:56:92:b6:91:49:cc:d3:
36:8c:3a:77:a4:ee:08:79:66:ae:3b:d1:30:a2:99:eb:98:83:
30:a8:16:28:3c:9b:83:b2:1a:67:f4:6c:cf:ce:ab:55:27:af:
bc:49:21:6a:30:aa:3c:72:27:f1:db:f1:89:d3:4b:ab:59:49:
93:69:61:35:84:87:25:07:24:ca:22:29:42:25:ff:a0:f2:8e:
ef:c6:22:03:5e:ac:5e:0b:f3:c7:f2:aa:4c:1c:74:24:bd:15:
04:01:b2:66:b3:b6:6e:70:59:10:67:f6:97:a0:a7:9a:63:d6:
1b:c4:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:31:16 2025 by rpki-client