Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/F0A7F09024DE11F08C7B31A7DAE4EC9C.roa
File: F0A7F09024DE11F08C7B31A7DAE4EC9C.roa (raw, json)
Hash identifier: YyApb+sY9qX1h84QPe860x48eGQJynP29xsNdarTek4=
Subject key identifier: AC:89:6C:53:82:EA:CE:0D:8B:A0:9F:DD:67:C2:B4:AC:3B:39:E1:2B
Certificate issuer: /CN=F36C6D54AF/serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Certificate serial: 0A
Authority key identifier: 40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/F0A7F09024DE11F08C7B31A7DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 09:47:19 +0000
ROA not before: Tue 29 Apr 2025 09:47:14 +0000
ROA not after: Thu 30 Apr 2026 09:47:14 +0000
asID: 22690
IP address blocks: 102.207.249.0/26 maxlen: 26
Validation: Failed, certificate revoked on Tue 29 Apr 2025 12:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6D54AF, serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Validity
Not Before: Apr 29 09:47:14 2025 GMT
Not After : Apr 30 09:47:14 2026 GMT
Subject: CN=6810a027-8985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:5a:48:7e:1a:d9:c5:e4:98:b5:9f:c3:b0:
e4:6f:4f:8f:07:ef:ca:77:d9:31:44:c1:42:aa:01:
5e:6b:f0:1e:49:da:ac:59:87:03:a2:e0:e0:4b:dc:
b4:41:5e:7e:87:b9:40:eb:c1:c8:c2:7e:3c:dd:98:
ec:63:81:41:75:fe:19:4e:5c:d7:d8:82:cb:53:03:
67:09:ac:89:6c:c1:ad:c8:10:55:3a:66:bf:02:0b:
19:29:ac:f4:3c:63:e9:c9:85:74:e9:de:38:6a:1e:
17:4c:d0:d8:86:ec:b0:38:6c:e3:cc:b1:ec:10:64:
fc:81:6e:ad:ff:a3:79:a5:1c:26:13:2a:b4:4b:20:
37:47:b5:f2:5d:28:9c:0f:1e:e0:a9:9a:a2:a1:8b:
b3:4a:70:5b:a2:55:69:d5:19:b5:94:26:f3:28:d9:
ea:ab:3d:28:f8:29:c0:91:49:5e:fd:63:2a:51:94:
73:eb:dc:98:25:a4:47:aa:a0:41:72:bd:15:67:77:
4c:da:d4:a0:41:90:44:a8:cc:fb:83:3f:7e:bb:c2:
0e:80:e7:ae:9f:9b:92:be:39:f2:ca:03:56:55:3d:
70:c2:df:16:38:87:b0:d6:40:66:88:73:bc:c5:cc:
75:0c:bf:fc:57:1c:4d:fe:64:61:a8:23:bf:f0:29:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:89:6C:53:82:EA:CE:0D:8B:A0:9F:DD:67:C2:B4:AC:3B:39:E1:2B
X509v3 Authority Key Identifier:
keyid:40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/F0A7F09024DE11F08C7B31A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.249.0/26
Signature Algorithm: sha256WithRSAEncryption
2d:04:bf:63:c9:46:71:ad:41:96:3e:90:e5:16:cf:54:e5:b0:
a0:8d:8d:a2:58:a8:3a:bc:82:3c:34:21:d1:31:5d:94:f8:9e:
9f:98:c1:90:66:ad:72:3c:66:9d:90:6e:28:2e:b7:77:26:44:
78:e7:cd:13:f4:60:f6:49:f4:1c:f1:ce:0e:13:94:ef:cd:a6:
43:c5:75:33:09:79:cc:f1:82:63:ac:5a:37:10:65:e3:00:d0:
19:f0:03:1c:58:33:1e:b5:83:16:b9:1d:e5:a3:7a:27:56:d8:
77:9a:b8:c3:0b:d6:ca:91:db:ab:44:75:5d:90:28:16:41:e1:
5b:ee:31:af:eb:78:00:d7:cb:8d:c6:1f:ac:63:d7:b5:9d:7a:
e9:c1:6f:c5:25:b1:1f:a2:df:ae:93:02:08:8e:22:f4:e7:cb:
15:76:f1:b8:98:78:eb:05:00:b6:f7:95:4d:61:aa:fd:b6:4d:
88:f6:ab:a9:7e:99:97:5d:9b:3c:0a:88:47:93:da:cc:8b:68:
16:fb:8d:ea:bd:b7:93:b8:90:fc:b3:f8:99:a6:5f:a5:0d:a4:
eb:15:6c:82:d7:26:17:15:31:d7:dd:d2:3f:2c:fb:3d:55:ea:
a6:a2:d8:6c:e5:af:6a:e5:f7:8b:09:b9:55:80:4f:2e:f7:3b:
65:1f:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:21:18 2025 by rpki-client