Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4CC08D7848E011EFB5E5D559762E951A.roa
File: 4CC08D7848E011EFB5E5D559762E951A.roa (raw, json)
Hash identifier: d6NMUqgOZuYh7nmV22go6ci0mlNXCqMEuPL/93rg8fI=
Subject key identifier: E7:D4:2B:76:C2:1B:A1:D8:F0:86:9D:8E:FB:AD:4D:10:5E:77:5F:06
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 04C7
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4CC08D7848E011EFB5E5D559762E951A.roa
Signing time: Tue 23 Jul 2024 10:42:47 +0000
ROA not before: Tue 23 Jul 2024 10:42:42 +0000
ROA not after: Tue 23 Jul 2030 10:42:42 +0000
asID: 834
IP address blocks: 102.216.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 18:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1223 (0x4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jul 23 10:42:42 2024 GMT
Not After : Jul 23 10:42:42 2030 GMT
Subject: CN=669f8927-c545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:5d:67:25:ff:36:02:d4:30:0a:bd:35:88:
dc:f9:da:6f:74:11:f4:3a:86:b4:72:d8:d4:e2:62:
fc:3a:8b:14:ca:94:8b:0f:6a:d6:9b:36:c3:1c:7a:
6d:15:56:ae:c9:73:f0:04:f4:f6:93:a8:64:cc:8a:
0e:8b:2b:58:ab:0c:cc:97:ea:4c:d9:1e:37:4f:d3:
91:d4:93:7b:da:10:a7:43:68:21:a8:e0:2f:47:11:
b3:b4:42:58:ee:af:42:91:d7:7a:da:ea:8d:2a:f0:
f6:a7:ee:56:aa:c9:68:00:dc:7a:48:ae:1d:2a:7a:
13:88:58:fe:71:88:16:bd:33:f7:90:d9:27:a5:aa:
4f:fd:05:02:3b:9c:2d:b1:28:88:71:b7:3f:df:fa:
7a:d7:bd:2e:b3:d0:aa:ad:e0:ec:c7:26:6d:08:ca:
bb:b4:1c:5b:1f:55:ad:a4:bd:0d:42:d6:a8:d6:a5:
e0:c9:c6:ab:fe:28:32:f6:a9:d9:6d:6f:17:f4:3b:
13:f7:ed:80:1e:da:71:59:9e:a1:84:f3:3f:a0:f2:
33:07:76:3e:cc:23:a1:e2:fb:7f:2c:ba:3d:72:55:
af:09:8d:cc:86:4f:7b:28:73:d4:36:c0:a9:91:40:
bc:fe:e7:71:e8:42:3a:ef:e9:00:4b:05:77:a9:5d:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D4:2B:76:C2:1B:A1:D8:F0:86:9D:8E:FB:AD:4D:10:5E:77:5F:06
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4CC08D7848E011EFB5E5D559762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.82.0/24
Signature Algorithm: sha256WithRSAEncryption
26:bc:7d:87:b2:c5:c3:6e:ab:6e:5c:5b:42:66:58:ea:89:f8:
04:25:80:1a:d4:ca:b5:bc:64:70:a7:7c:5c:3a:24:b0:50:c0:
74:ed:93:45:24:51:07:ff:ef:0e:39:d5:30:03:ed:8d:d6:8a:
69:23:4e:50:c0:aa:50:b6:7d:fa:97:51:d7:54:97:05:5d:cc:
fc:a0:e1:c8:be:54:dc:ae:fa:a7:04:45:45:11:98:d1:c5:9d:
a7:1c:31:15:7e:39:b8:35:68:25:bd:13:44:58:52:34:b6:e8:
4a:76:65:b9:b7:0f:7b:30:34:3e:81:36:ca:c7:97:e6:ef:93:
4e:3c:5c:ea:78:22:4e:d5:fd:f5:a3:b1:c1:cb:20:c5:6b:24:
ab:42:f7:e3:94:d3:0e:2c:d0:82:f8:41:97:fd:5f:ee:dd:ea:
2a:b9:b4:75:ea:43:70:b4:52:ba:84:e0:5c:f2:ae:fa:09:7d:
fa:81:7b:c1:ac:64:82:eb:7a:3d:21:73:e2:3e:ef:e3:93:ee:
a8:52:17:a7:49:31:f3:c3:3c:61:3e:ee:04:52:79:61:44:91:
e3:83:dc:9d:19:db:6c:46:26:79:f3:ee:b0:9d:da:d8:6f:2a:
6b:33:ce:aa:7e:fa:c5:6b:cf:26:c1:85:3a:83:8d:a5:d1:b3:
db:95:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 20:22:07 2024 by rpki-client on console-fra.rpki-client.org