Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/6429AFF68BCC11EF8C7748A2762E951A.roa
File: 6429AFF68BCC11EF8C7748A2762E951A.roa (raw, json)
Hash identifier: vActvXbCreXG3PcBRjIUuGuvHf+05V2+Gm3KNAVqWl0=
Subject key identifier: 05:73:65:8E:0B:36:13:60:67:85:F7:76:F7:F1:D1:B0:FC:D7:4D:F9
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0540
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/6429AFF68BCC11EF8C7748A2762E951A.roa
Signing time: Wed 16 Oct 2024 14:39:04 +0000
ROA not before: Wed 16 Oct 2024 14:39:00 +0000
ROA not after: Wed 23 Oct 2030 14:39:00 +0000
asID: 834
IP address blocks: 102.217.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 18:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1344 (0x540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Oct 16 14:39:00 2024 GMT
Not After : Oct 23 14:39:00 2030 GMT
Subject: CN=670fd008-813a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:bb:3a:b7:bf:41:73:a9:6a:1a:24:fe:3a:
50:c4:3b:69:cf:bd:dc:f3:ec:06:30:33:fc:81:67:
12:af:18:5a:18:86:97:fb:ca:e2:fd:97:0f:e3:d2:
dc:51:a8:c2:17:56:ba:2b:b4:fc:7b:fa:36:31:05:
3c:ae:54:f1:12:e1:bf:9d:ee:31:2b:9a:d1:f6:04:
19:af:c6:9e:6b:1d:f2:67:9a:d2:04:0b:4f:21:63:
71:00:54:5d:7e:63:c9:f7:86:a6:7b:ae:83:70:24:
03:34:f1:33:74:9f:8d:0d:ce:89:f6:9a:7f:50:68:
6f:b8:f4:82:e9:fe:e1:94:9c:14:19:e1:cd:23:24:
54:95:dc:59:6b:93:a7:7d:e3:e8:ef:ba:3a:9f:d2:
4d:ab:42:e8:ff:05:3e:60:82:b0:47:02:28:34:40:
e0:8f:ee:d3:38:ff:cd:6a:f3:d3:f4:ad:93:c5:ad:
da:81:2d:16:22:d0:2d:32:7a:c8:a6:98:49:b7:df:
06:ef:28:a2:ed:4f:57:9f:67:56:f2:9a:77:00:c1:
72:bc:89:dd:d3:c6:27:a7:de:66:b1:ef:f1:24:23:
c6:a3:a1:dd:36:7e:f0:80:54:1c:08:fa:e1:a0:9d:
f1:ca:3e:72:f4:b8:93:f4:84:92:a7:6d:af:ac:ea:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:73:65:8E:0B:36:13:60:67:85:F7:76:F7:F1:D1:B0:FC:D7:4D:F9
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/6429AFF68BCC11EF8C7748A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5b:fc:a2:1e:90:3b:da:aa:66:e6:e7:56:82:c0:82:28:17:
90:6d:4d:be:a4:68:f3:5e:0f:b3:9b:68:ab:74:18:d6:82:c3:
df:88:e5:65:0b:6e:e5:61:60:0f:5a:76:3c:9d:c8:30:27:5f:
28:c8:4d:92:27:d0:ac:3b:57:a9:21:f0:18:79:61:35:e7:32:
07:22:9e:39:cf:bd:c7:a5:e7:83:7e:4c:53:14:2f:e1:a4:8a:
32:0e:27:c1:ce:3a:a0:7d:a8:ef:5f:b1:9c:34:84:73:01:c4:
91:7e:e0:d5:b4:b9:16:ad:9d:2b:84:79:3c:46:15:e2:48:66:
1b:44:0a:43:ea:b4:ab:e7:2d:04:d3:59:12:1a:ae:31:03:33:
b5:63:2b:89:19:45:4c:f9:7a:09:26:9b:b0:15:dc:02:03:4d:
50:c9:d8:fc:fc:8c:d1:ca:b5:00:40:bc:9b:88:66:04:ed:77:
08:6c:5e:8d:a3:02:f1:a2:7f:94:ac:79:76:66:f5:25:6d:02:
f8:58:88:d9:d8:fc:5a:a8:62:e1:80:47:1b:d3:69:d3:36:db:
9c:47:c5:c2:74:45:3f:4b:6e:29:3a:87:aa:25:69:f5:f1:ec:
bd:2a:8b:56:2f:ba:42:9e:89:ae:26:85:89:a2:c7:0b:93:5c:
53:6b:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 21:04:50 2024 by rpki-client on console-fra.rpki-client.org