Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0073401E104A11F0A9FC34B1762E951A.roa
File: 0073401E104A11F0A9FC34B1762E951A.roa (raw, json)
Hash identifier: Rugb/mo7If/F33sApXWokt1Cl5BvbbXlH1rTsaH3D3I=
Subject key identifier: 86:55:A0:4A:18:78:44:AF:1A:75:AD:BE:4F:AC:F6:6F:A1:43:65:F3
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08B7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0073401E104A11F0A9FC34B1762E951A.roa
Signing time: Thu 03 Apr 2025 05:10:47 +0000
ROA not before: Thu 03 Apr 2025 05:10:43 +0000
ROA not after: Thu 01 Jan 2026 05:10:43 +0000
asID: 63025
IP address blocks: 102.135.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 06:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231 (0x8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Apr 3 05:10:43 2025 GMT
Not After : Jan 1 05:10:43 2026 GMT
Subject: CN=67ee1857-2786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:36:67:03:2f:b5:91:80:06:df:fd:92:2c:
fd:c0:51:af:59:ce:0b:6c:56:f2:e8:68:ce:7c:8e:
d7:b3:09:b2:b2:75:96:ce:4e:ac:39:b1:ff:0e:9f:
2b:0a:62:61:84:fe:c9:33:11:1e:2f:cc:c2:e9:ca:
86:b4:80:1e:2e:41:0a:27:93:0d:02:3f:11:43:64:
27:be:cf:55:25:57:a8:1f:59:1e:20:b9:5f:e5:23:
cf:8d:f9:a2:57:8f:d9:b6:49:fe:0a:5d:e7:97:f5:
41:5f:8d:4b:98:f5:ba:46:93:cb:50:35:c0:56:7c:
79:69:e9:eb:d7:80:80:79:53:f6:19:8d:3f:0e:08:
06:f4:27:ac:27:ee:3c:28:90:18:91:61:d8:e6:58:
5e:62:83:d2:65:57:39:9d:e7:fa:c7:ff:b5:4e:39:
29:a8:63:18:2d:67:cc:0e:ec:25:55:ee:8b:7b:9d:
b2:fe:fb:ab:d5:00:6c:37:fb:f8:16:09:08:36:1d:
ba:ff:c9:5e:85:b5:df:97:b7:dc:ef:e5:8a:21:c5:
cd:1a:74:c0:a7:3b:4f:db:b5:a4:8f:54:89:e3:3b:
b7:c7:25:8f:3b:28:f0:73:3b:1d:74:88:69:3e:fe:
5c:32:71:f6:ac:08:34:7b:83:e9:f5:4a:d8:cb:e7:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:A0:4A:18:78:44:AF:1A:75:AD:BE:4F:AC:F6:6F:A1:43:65:F3
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0073401E104A11F0A9FC34B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:4c:17:b6:a3:7e:78:ec:37:c7:47:4c:1f:c6:6b:3b:05:d5:
58:c0:2b:0a:4b:16:e2:79:6a:30:54:ad:92:ee:d8:a0:6f:e4:
b8:58:b3:53:7c:99:84:1d:c1:aa:2b:14:ee:06:af:42:6e:da:
c1:4d:39:2b:7f:68:0c:85:9c:8c:0c:78:4a:ca:18:7a:f1:52:
44:f6:84:a1:27:7f:53:bb:43:f0:38:77:01:70:73:42:3f:fb:
fe:2c:2f:d1:0b:0a:41:2d:10:9c:ec:4f:e7:56:0f:b4:7c:14:
06:9e:73:02:88:36:d6:1a:49:84:bf:e9:6e:04:fa:e9:82:df:
0f:8a:a1:57:2d:52:4e:3f:23:04:41:e3:b6:c4:b6:ab:56:b6:
82:13:20:30:ad:71:f7:d8:ce:5e:cf:7a:8f:e6:0c:2d:fc:c2:
76:f0:5f:28:ea:de:a2:f6:ec:6a:c1:19:c7:bc:aa:3a:ac:e0:
27:33:f0:a4:6a:97:ce:64:f1:88:12:7f:a0:d2:dd:ce:44:01:
df:f9:03:a7:85:69:ff:67:fd:db:50:e8:4d:4b:a0:8a:38:40:
fa:22:39:8c:b0:c0:62:fc:e3:70:08:ae:90:3b:87:70:00:d1:
9a:9e:f2:e9:f9:67:46:15:87:df:cd:be:a6:e1:43:ef:d2:27:
62:53:3e:d0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA0MDMwNTEwNDNaFw0yNjAxMDEwNTEwNDNaMBgxFjAU
BgNVBAMTDTY3ZWUxODU3LTI3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/ITZnAy+1kYAG3/2SLP3AUa9ZzgtsVvLoaM58jtezCbKydZbOTqw5sf8O
nysKYmGE/skzER4vzMLpyoa0gB4uQQonkw0CPxFDZCe+z1UlV6gfWR4guV/lI8+N
+aJXj9m2Sf4KXeeX9UFfjUuY9bpGk8tQNcBWfHlp6evXgIB5U/YZjT8OCAb0J6wn
7jwokBiRYdjmWF5ig9JlVzmd5/rH/7VOOSmoYxgtZ8wO7CVV7ot7nbL++6vVAGw3
+/gWCQg2Hbr/yV6Ftd+Xt9zv5Yohxc0adMCnO0/btaSPVInjO7fHJY87KPBzOx10
iGk+/lwycfasCDR7g+n1StjL59b9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhlWg
Shh4RK8ada2+T6z2b6FDZfMwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzAwNzM0MDFFMTA0QTExRjBBOUZDMzRCMTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwAwDQYJKoZIhvcNAQEL
BQADggEBAMdMF7ajfnjsN8dHTB/GazsF1VjAKwpLFuJ5ajBUrZLu2KBv5LhYs1N8
mYQdwaorFO4Gr0Ju2sFNOSt/aAyFnIwMeErKGHrxUkT2hKEnf1O7Q/A4dwFwc0I/
+/4sL9ELCkEtEJzsT+dWD7R8FAaecwKINtYaSYS/6W4E+umC3w+KoVctUk4/IwRB
47bEtqtWtoITIDCtcffYzl7Peo/mDC38wnbwXyjq3qL27GrBGce8qjqs4Ccz8KRq
l85k8YgSf6DS3c5EAd/5A6eFaf9n/dtQ6E1LoIo4QPoiOYywwGL843AIrpA7h3AA
0Zqe8un5Z0YVh9/NvqbhQ+/SJ2JTPtA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 09:51:59 2025 by rpki-client on console.sobornost.net