Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F42EEC9A077A11F0A7F1525F762E951A.roa
File: F42EEC9A077A11F0A7F1525F762E951A.roa (raw, json)
Hash identifier: 7J3/1o/GcuGEHemAx4DwQ/hPBU+9DDhy3eu4SqAjZZc=
Subject key identifier: D7:44:71:C5:2C:93:CF:66:2E:B9:71:91:F2:54:BA:4C:91:57:14:A0
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 030B
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F42EEC9A077A11F0A7F1525F762E951A.roa
Signing time: Sun 23 Mar 2025 00:08:31 +0000
ROA not before: Sun 23 Mar 2025 00:00:27 +0000
ROA not after: Mon 18 Mar 2030 00:00:27 +0000
asID: 213762
IP address blocks: 102.211.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 12:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Mar 23 00:00:27 2025 GMT
Not After : Mar 18 00:00:27 2030 GMT
Subject: CN=67df50ff-d54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:61:2f:36:2b:1d:d9:a4:97:98:7d:31:f4:
a1:c5:6e:78:56:82:fe:f2:c2:71:1b:93:8f:e9:71:
32:eb:f0:71:88:31:e9:3c:a6:8d:aa:9f:53:c5:ea:
8f:60:0d:ad:ed:f1:da:f1:3f:26:35:92:73:d7:2f:
d0:03:3a:a6:11:37:dd:49:de:be:8f:ad:69:c5:99:
d4:df:7a:ef:fa:67:60:7c:93:90:c3:a2:4a:50:3c:
83:f9:9c:40:3f:93:df:ad:55:01:61:87:ea:95:f0:
50:37:a2:27:a1:eb:97:4a:c9:51:20:30:8f:00:86:
47:b3:ce:ac:18:4e:0d:6f:09:d5:1e:2f:aa:26:6b:
db:ed:53:81:db:57:6e:3a:a3:f0:80:37:76:9b:53:
08:bb:8a:34:f5:df:bb:f5:56:af:a0:c0:41:fa:53:
21:7b:7a:58:9d:8f:9c:85:53:87:29:f0:ec:51:91:
79:ed:38:a0:b4:43:86:5e:3a:cd:8b:16:89:77:38:
22:80:26:63:3a:e6:95:da:4b:96:ce:0a:e8:9a:45:
aa:43:60:e3:57:93:2b:1c:f1:66:0d:c1:be:a8:50:
9c:6a:ad:16:c2:b3:f9:ff:5b:69:35:25:5d:20:0f:
67:ed:a0:53:80:8b:69:73:79:8a:cf:ab:80:e9:b0:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:71:C5:2C:93:CF:66:2E:B9:71:91:F2:54:BA:4C:91:57:14:A0
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F42EEC9A077A11F0A7F1525F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a0:20:47:e6:cb:1f:e2:df:18:ab:23:f8:cf:ce:f8:66:00:
9b:4b:5d:7d:c2:7e:44:78:89:f2:68:86:1b:57:f3:ec:0d:d9:
b5:fc:15:0a:ea:da:e0:15:3a:9c:bd:4e:41:54:86:a3:be:a5:
90:5d:46:53:35:90:b0:f3:3a:52:18:1c:f4:9f:25:79:4a:60:
c3:0d:24:69:a5:c8:b0:ed:6a:f4:66:92:2a:f1:03:2c:14:ca:
25:a8:b8:99:4a:db:35:36:54:54:49:ec:09:48:fb:62:ad:96:
75:1d:81:84:04:53:49:2c:7a:14:8c:42:d9:0d:81:d2:d7:9c:
21:f2:9f:e0:2f:f0:f4:43:7f:3f:65:bc:56:9b:2b:0d:b0:e4:
6c:3d:7c:68:a7:c4:77:da:88:23:11:16:4b:e6:2c:78:6f:7e:
0d:7e:57:6e:65:8d:74:6c:b5:89:57:69:7c:65:f3:da:25:58:
ee:77:a3:bd:1c:de:f8:02:ab:a5:2d:e4:5f:23:6f:de:64:76:
70:39:ce:99:7d:99:9b:94:fe:24:62:01:ff:0e:2c:43:2a:6a:
17:e7:ae:98:70:b5:d2:19:c0:ac:a3:91:48:e5:a8:63:46:bd:
bb:24:24:dd:30:de:60:01:67:ce:0b:18:26:59:70:72:0e:cc:
5c:0e:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:55:06 2025 by rpki-client on console.sobornost.net