Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/5C420834C51411EFAF9DB852762E951A.roa
File: 5C420834C51411EFAF9DB852762E951A.roa (raw, json)
Hash identifier: CaS/5nyEYiXtHrON46PiIN4uu++xe7Mh3Vuvp+v+TG0=
Subject key identifier: 7D:9B:3A:FB:81:D6:7D:22:44:B2:8A:77:12:64:94:1C:8B:85:3E:AB
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 05B6
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/5C420834C51411EFAF9DB852762E951A.roa
Signing time: Sat 28 Dec 2024 12:07:51 +0000
ROA not before: Sat 28 Dec 2024 12:07:47 +0000
ROA not after: Sat 28 Dec 2030 12:07:47 +0000
asID: 834
IP address blocks: 102.216.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Dec 2024 18:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1462 (0x5b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Dec 28 12:07:47 2024 GMT
Not After : Dec 28 12:07:47 2030 GMT
Subject: CN=676fea17-2a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:d7:4f:33:31:e2:cd:ec:b8:50:05:93:55:
7c:0d:0f:6c:be:bc:5a:2e:2c:20:6e:cc:33:65:94:
ca:9f:14:98:48:1b:61:c2:c0:f3:c1:3f:39:dc:6c:
d7:2a:f1:7f:03:92:96:1d:fb:b5:de:e7:6e:70:12:
2d:c4:d3:74:34:0e:cf:06:ab:7e:0c:42:e9:8b:94:
f1:6d:95:ed:34:0d:61:9d:90:d9:f7:1e:b3:09:db:
a8:dc:74:c6:8b:0c:a3:09:40:52:8e:f4:7b:15:12:
cd:c3:a3:38:cf:4f:cc:a1:41:8a:17:39:93:60:6d:
33:73:5f:0c:d1:fc:f3:3b:ef:f7:d6:48:a8:53:e1:
d0:ac:d7:5d:2b:2b:f1:38:3f:9a:5a:4f:9b:30:78:
fe:df:2f:98:73:ca:4e:53:fa:15:2f:f5:6c:47:ba:
f6:05:e9:bf:91:67:39:fb:95:88:de:ad:3f:9a:85:
72:09:df:52:22:b7:37:61:43:b3:f1:51:4d:8a:ba:
a3:c8:24:56:02:78:f6:07:c5:35:c1:12:5a:72:47:
34:46:ac:4b:5b:b1:72:71:3d:8d:b7:0f:10:9d:47:
c6:d8:b4:9b:77:82:b9:73:2b:11:a3:bd:00:c7:74:
2a:df:78:ad:2b:95:e0:16:47:34:b3:70:65:70:76:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9B:3A:FB:81:D6:7D:22:44:B2:8A:77:12:64:94:1C:8B:85:3E:AB
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/5C420834C51411EFAF9DB852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:bf:51:88:50:63:26:ee:03:12:21:dc:b3:e6:01:e3:4b:f2:
a6:a1:47:2b:dc:74:25:4a:21:63:58:45:0e:c6:13:06:b8:fb:
60:f4:32:02:d2:ef:b5:16:6b:76:53:17:c6:83:9f:c6:8f:66:
43:43:64:90:b8:c0:48:00:ae:16:73:98:bf:3a:48:65:5a:09:
8d:89:4a:1a:f0:b9:8a:af:73:40:95:c0:92:d3:c4:9a:72:d4:
4a:54:c0:6d:4b:64:5a:b0:0a:45:d0:f4:fb:53:07:60:d0:c4:
d0:20:aa:c7:1f:77:18:2f:6d:1b:16:35:99:aa:8c:24:46:1a:
da:8b:ba:31:15:ad:59:4a:19:3c:34:71:40:ee:2e:49:90:db:
c7:41:a6:45:92:1b:3e:0e:7d:43:3d:d9:97:3b:2e:1a:dd:12:
1d:9f:1e:9c:a1:ea:ea:a1:19:f9:e9:ad:a7:4e:bf:0c:a4:15:
74:63:79:7a:45:a2:7f:35:bf:0b:75:97:33:12:1b:ad:9a:96:
a4:06:dc:d1:d7:0b:1f:a1:4a:a2:f0:eb:f9:b0:eb:f4:c2:0c:
c7:de:25:97:14:20:57:9d:b1:a5:8a:0d:00:68:ec:22:24:a6:
b2:c5:00:a4:95:c2:e9:3b:f9:66:34:98:c5:35:35:73:7e:71:
1a:d2:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:44:24 2025 by rpki-client