Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A7E64B36535611EF96C93094762E951A.roa
File: A7E64B36535611EF96C93094762E951A.roa (raw, json)
Hash identifier: Z3zg4wFlaxq1Rj66ICJAFbYY0wfE0MqTiTTOYkhbjic=
Subject key identifier: B9:C3:56:6C:E2:89:46:41:45:FD:C1:1A:94:A9:BF:9A:39:93:29:A3
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 04E2
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A7E64B36535611EF96C93094762E951A.roa
Signing time: Mon 05 Aug 2024 18:15:12 +0000
ROA not before: Mon 05 Aug 2024 18:15:09 +0000
ROA not after: Mon 12 Aug 2030 18:15:09 +0000
asID: 327813
IP address blocks: 102.216.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 16:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Aug 5 18:15:09 2024 GMT
Not After : Aug 12 18:15:09 2030 GMT
Subject: CN=66b116b0-8fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:70:30:ce:e5:fe:f0:f2:e7:b2:34:40:eb:
e9:69:35:01:fd:d8:08:22:22:a2:7a:32:c3:bc:d2:
17:71:d2:9d:8c:d0:fd:fc:4e:4e:9e:0e:41:ae:c2:
d5:de:a9:9d:29:10:2c:d9:84:12:96:f6:e0:66:6e:
b4:78:fc:cb:eb:65:2b:6e:51:e1:0d:68:92:a4:5a:
06:e3:b4:77:57:00:c4:b5:5e:52:ca:c0:d7:62:e2:
6b:d2:18:16:2a:e6:32:e0:15:2e:a7:c0:09:99:d4:
15:10:07:52:aa:92:ba:1d:57:0f:4a:b0:4f:59:dd:
56:a6:b9:bd:0f:f8:50:19:f2:a6:29:ef:4b:08:60:
4e:82:af:4e:cc:b2:f5:50:e7:69:52:ac:6f:be:22:
33:7b:a5:cb:80:89:7c:cf:ec:5c:ab:e3:3f:02:d6:
cd:8e:20:b8:55:ab:4a:3b:8f:49:a5:5d:0c:9f:61:
ad:95:8d:17:88:73:23:f6:3b:c7:bc:6c:ec:5b:a7:
73:89:8a:81:4a:5b:d3:f8:ff:59:a2:61:63:1f:8a:
e4:df:73:ae:94:ac:5d:74:19:06:ba:a6:b6:23:29:
4e:79:a2:1f:a5:d2:ab:e1:33:33:68:db:3b:22:31:
93:90:96:4b:9e:cd:27:e0:1e:27:53:bb:23:ab:a7:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C3:56:6C:E2:89:46:41:45:FD:C1:1A:94:A9:BF:9A:39:93:29:A3
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A7E64B36535611EF96C93094762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.83.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1b:8f:43:d0:00:73:33:5c:fe:38:ed:be:71:e2:7a:40:19:
1b:23:36:e2:07:db:55:e4:51:20:c4:0b:4b:f6:c4:35:2e:22:
2b:d7:55:69:c6:f4:3f:c7:26:d6:68:a7:a3:2f:04:49:be:48:
b2:f1:67:3a:86:84:03:3a:b7:53:09:96:94:f6:8c:ac:5c:af:
65:22:04:c8:85:d6:4a:c5:48:ff:c4:c2:53:61:f5:68:36:99:
3c:a6:aa:13:75:82:c9:f8:57:bb:d1:f2:bc:37:e8:26:65:83:
6b:4b:bb:b7:a7:b0:e2:6b:1e:b6:0d:8f:99:fd:9f:c3:54:19:
80:4f:2a:05:ac:4e:57:54:5d:cd:f0:bc:29:f5:28:73:a6:e1:
eb:d2:1d:82:3b:98:94:0c:15:70:a6:05:14:d8:03:e8:81:8a:
78:81:e0:19:17:27:98:29:e1:cf:b6:55:e5:50:20:34:fb:e1:
2f:a7:21:2e:ee:6b:e0:ee:c1:81:32:32:e1:3d:a1:97:13:31:
5e:1a:ec:38:b1:45:71:e8:f7:84:78:a1:a2:f0:f0:aa:73:81:
4e:ec:0f:54:91:9b:cd:94:47:2b:4b:3d:44:89:52:0b:67:6b:
d5:9f:35:ec:8c:54:9d:25:6a:5e:a1:1a:38:49:06:4d:08:a9:
f9:9f:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 18:20:20 2024 by rpki-client on console-fra.rpki-client.org