Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1496F22CA9B411EFB535D3AC762E951A.roa
File: 1496F22CA9B411EFB535D3AC762E951A.roa (raw, json)
Hash identifier: VsLfmH1UX5coX9txWyz2kKvUcKrDLGLtLLB/lyKao1E=
Subject key identifier: 52:54:B4:A9:C7:4A:86:19:3A:5E:01:3F:6D:40:21:3A:ED:62:2C:D5
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0572
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1496F22CA9B411EFB535D3AC762E951A.roa
Signing time: Sat 23 Nov 2024 16:00:38 +0000
ROA not before: Sat 23 Nov 2024 16:00:34 +0000
ROA not after: Sat 23 Nov 2030 16:00:34 +0000
asID: 834
IP address blocks: 102.216.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 16:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Nov 23 16:00:34 2024 GMT
Not After : Nov 23 16:00:34 2030 GMT
Subject: CN=6741fc26-93f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:6c:c3:d2:4e:72:40:9b:11:e6:ae:a2:9f:
29:cb:03:89:13:3d:b7:96:38:5f:38:db:c4:c4:99:
b2:82:8d:67:3b:ca:44:bd:40:1e:d2:23:06:78:e4:
bf:ff:23:70:34:6c:99:d2:3d:09:3c:1a:c9:34:32:
f8:a1:f4:a9:7e:97:13:8d:bd:d8:da:0d:cf:48:21:
fd:d6:e6:46:15:40:76:80:86:fc:b5:d8:70:98:d7:
62:05:85:80:87:40:6a:23:b6:9f:53:1a:24:bc:75:
26:d9:52:48:d1:59:bd:59:49:93:47:c7:d7:5c:ab:
00:75:43:bc:38:42:81:14:79:f7:b1:86:8f:b3:4f:
39:79:a2:9c:89:17:ae:43:d1:00:b9:d8:e7:4a:3e:
23:d0:b7:69:7b:aa:48:2c:3c:9f:01:99:ff:16:c0:
ac:28:5e:01:51:5f:b2:a4:0c:81:ec:46:12:e4:06:
28:60:21:1b:3b:61:26:75:31:c6:7a:db:e9:de:7f:
5c:6b:89:ad:f6:70:db:24:33:b5:56:8f:64:4c:26:
b6:21:80:33:9b:fb:10:83:ce:cd:82:f6:b3:14:4a:
a6:fb:26:b0:8a:e3:8b:57:eb:34:d4:d4:e7:99:5c:
55:4c:9b:2b:ed:c6:a0:d2:01:c6:f3:e5:f1:88:b4:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:54:B4:A9:C7:4A:86:19:3A:5E:01:3F:6D:40:21:3A:ED:62:2C:D5
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1496F22CA9B411EFB535D3AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3d:c0:0d:14:96:04:c8:35:58:82:90:21:f0:87:e6:fe:b1:
eb:9c:b7:0f:ac:d8:89:e5:2f:49:48:48:64:5c:09:63:ee:6a:
1c:1e:c7:ce:86:e9:6a:c4:91:6f:87:30:37:0f:96:8e:1d:0c:
35:18:55:c8:41:1a:ab:91:cc:22:3a:a7:33:ae:32:be:f9:e9:
fb:99:f7:c5:98:c5:30:d0:41:10:fb:77:6e:42:b4:cb:a0:23:
47:52:b1:cf:f2:96:8e:99:f4:ac:8f:be:3e:c2:65:ac:72:3c:
1f:1d:af:b8:ff:a8:46:26:e6:09:e4:91:a5:d3:db:58:db:66:
47:4f:02:cd:c0:11:f4:53:de:8f:30:bb:10:69:f8:fb:81:6f:
11:43:ba:6a:f0:a1:8f:69:e1:24:d5:17:c5:b7:ee:84:fe:80:
86:c6:f7:aa:73:17:6a:6d:06:af:66:34:12:28:a0:96:69:12:
ca:4f:a9:a3:ad:36:a3:3b:1d:e4:f8:24:bd:63:29:6e:92:69:
92:a7:30:2d:72:b8:65:9e:ae:4c:b2:a0:49:60:a1:54:c3:dc:
11:3e:a1:a9:63:30:48:54:93:b4:1b:da:01:53:88:e1:2f:a5:
66:a8:6b:e7:81:5e:ae:18:00:a5:02:06:43:ea:d0:a7:f0:76:
b9:3c:45:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:38 2025 by rpki-client