Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/A922ED70190C11F084C6CFB76DB8BCC6.roa
File: A922ED70190C11F084C6CFB76DB8BCC6.roa (raw, json)
Hash identifier: qCCwRRP2+DpavDCvlomMG2t+0oUgG43NsgVX84l4xOw=
Subject key identifier: 2D:11:02:94:B3:48:18:4F:EE:41:DE:95:9C:C2:66:77:74:E2:42:AC
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0326
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/A922ED70190C11F084C6CFB76DB8BCC6.roa
Signing time: Mon 14 Apr 2025 08:44:22 +0000
ROA not before: Mon 14 Apr 2025 08:44:18 +0000
ROA not after: Mon 15 Apr 2030 08:44:18 +0000
asID: 834
IP address blocks: 102.212.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 06:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806 (0x326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Apr 14 08:44:18 2025 GMT
Not After : Apr 15 08:44:18 2030 GMT
Subject: CN=67fccae6-2d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:99:f3:ab:db:4b:88:19:18:de:f6:dc:93:
f4:83:31:29:7d:4b:c2:e4:da:d2:7b:dd:f4:82:0d:
81:8d:a4:cc:d3:06:11:fa:1c:5e:56:ae:cc:ae:64:
ff:f9:4a:65:7b:b3:c1:e4:57:c1:b9:45:55:b0:f1:
da:e6:97:6d:fe:6f:cb:1a:43:25:de:b6:34:ee:7d:
85:02:c4:01:1b:1c:27:a6:0f:ad:05:51:aa:56:2f:
8e:47:93:5c:c3:1d:b6:bc:7c:ab:fa:22:ca:6e:4f:
ad:40:23:dc:d4:9b:cd:c9:39:ad:fc:99:90:ca:b6:
fc:fb:22:20:85:73:f2:12:1e:8b:1c:f2:4b:75:2a:
f9:bf:fe:7c:2e:f4:9f:34:67:b7:c6:86:8d:d6:9e:
9b:10:62:73:db:c8:89:c6:cb:25:a5:e6:ca:1d:bd:
c4:48:b1:5c:52:f9:c1:71:9b:63:34:51:1f:28:d7:
25:b1:0f:47:5b:d4:d0:d6:ec:51:e1:67:41:a6:49:
66:29:7a:5c:58:05:08:97:f0:b3:16:15:14:f6:4e:
88:57:21:a0:b5:14:50:8d:41:42:f2:c2:4a:7e:43:
c3:8b:0b:e5:21:e0:ed:b0:42:2e:5f:31:90:41:1b:
c6:38:10:64:d2:13:3e:f2:b8:e9:72:d5:3d:e4:c0:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:11:02:94:B3:48:18:4F:EE:41:DE:95:9C:C2:66:77:74:E2:42:AC
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/A922ED70190C11F084C6CFB76DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0e:d5:37:37:f2:1a:21:7f:2e:70:73:5d:b8:f7:fc:5c:24:
e1:76:e7:b7:67:01:7b:e6:ce:d5:db:ba:b6:0f:78:67:ba:72:
85:87:9e:f0:f1:d8:c5:db:67:80:ef:95:c5:18:b9:a7:55:b5:
0b:19:e7:9f:15:01:4b:62:46:17:cd:4c:bd:c4:fe:58:4c:9e:
f4:4f:17:cf:22:f2:df:a0:aa:df:cf:33:19:26:d9:b2:47:ca:
38:9b:48:9b:54:97:74:1f:36:c3:ee:8d:92:be:8d:bb:c4:28:
9d:75:6a:ba:b0:e8:38:15:b6:06:3f:ff:c2:ae:fd:a0:0b:d6:
65:9d:55:56:c1:b9:23:14:d0:5e:a0:16:b2:f1:ac:8a:73:49:
f8:00:19:fd:fd:b6:73:45:45:c2:1e:5e:b5:f4:2d:b2:89:69:
16:5d:78:36:25:d5:46:61:2f:8c:6c:6a:b0:c9:c3:2d:dd:40:
18:75:f8:7e:ec:4e:7d:f0:6e:55:bb:59:d3:2d:c9:99:2f:5a:
fd:64:6c:94:15:43:a4:1c:de:d6:fe:c0:86:36:1c:34:7a:08:
a7:a7:31:8b:70:07:36:82:e0:a1:97:b0:1c:b4:96:d4:85:81:
27:c7:3d:9d:9b:dd:9d:17:25:3d:47:cc:5a:78:2f:3a:3f:27:
2f:bd:be:f0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy
MTlBOEM0MTIxQjAeFw0yNTA0MTQwODQ0MThaFw0zMDA0MTUwODQ0MThaMBgxFjAU
BgNVBAMTDTY3ZmNjYWU2LTJkMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDX85nzq9tLiBkY3vbck/SDMSl9S8Lk2tJ73fSCDYGNpMzTBhH6HF5Wrsyu
ZP/5SmV7s8HkV8G5RVWw8drml23+b8saQyXetjTufYUCxAEbHCemD60FUapWL45H
k1zDHba8fKv6IspuT61AI9zUm83JOa38mZDKtvz7IiCFc/ISHosc8kt1Kvm//nwu
9J80Z7fGho3WnpsQYnPbyInGyyWl5sodvcRIsVxS+cFxm2M0UR8o1yWxD0db1NDW
7FHhZ0GmSWYpelxYBQiX8LMWFRT2TohXIaC1FFCNQULywkp+Q8OLC+Uh4O2wQi5f
MZBBG8Y4EGTSEz7yuOly1T3kwKljAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULREC
lLNIGE/uQd6VnMJmd3TiQqwwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE
EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi
dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRB
RDlFNkZDL0E5MjJFRDcwMTkwQzExRjA4NEM2Q0ZCNzZEQjhCQ0M2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1AcwDQYJKoZIhvcNAQEL
BQADggEBAFwO1Tc38hohfy5wc1249/xcJOF257dnAXvmztXburYPeGe6coWHnvDx
2MXbZ4DvlcUYuadVtQsZ558VAUtiRhfNTL3E/lhMnvRPF88i8t+gqt/PMxkm2bJH
yjibSJtUl3QfNsPujZK+jbvEKJ11arqw6DgVtgY//8Ku/aAL1mWdVVbBuSMU0F6g
FrLxrIpzSfgAGf39tnNFRcIeXrX0LbKJaRZdeDYl1UZhL4xsarDJwy3dQBh1+H7s
Tn3wblW7WdMtyZkvWv1kbJQVQ6Qc3tb+wIY2HDR6CKenMYtwBzaC4KGXsBy0ltSF
gSfHPZ2b3Z0XJT1HzFp4Lzo/Jy+9vvA=
-----END CERTIFICATE-----
Generated at Tue Apr 15 08:08:49 2025 by rpki-client on console.sobornost.net