Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/61844A22E53211EE9FD7FCC7775412E6.roa
File: 61844A22E53211EE9FD7FCC7775412E6.roa (raw, json)
Hash identifier: pT166sHoqTydoMxqldlkaXCuggb5WnV5oCknE07yrS4=
Subject key identifier: A4:17:E7:F0:73:EC:19:D8:E1:A4:BC:5A:5B:D9:75:3C:DE:01:69:36
Certificate issuer: /CN=F36251E0AF/serialNumber=EFB7AA8EF96C13AAADC8476FBDDE9F3277FCD56D
Certificate serial: 04
Authority key identifier: EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/61844A22E53211EE9FD7FCC7775412E6.roa
Signing time: Mon 18 Mar 2024 14:18:24 +0000
ROA not before: Mon 18 Mar 2024 14:18:21 +0000
ROA not after: Fri 31 Mar 2034 14:18:21 +0000
asID: 329411
IP address blocks: 102.209.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Apr 2024 06:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36251E0AF
Validity
Not Before: Mar 18 14:18:21 2024 GMT
Not After : Mar 31 14:18:21 2034 GMT
Subject: CN=65f84d30-83ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:91:66:b4:60:59:92:48:6c:b6:9b:4f:96:
11:dd:b9:7c:82:e9:94:5c:b3:e4:65:c8:99:35:38:
bf:01:49:83:e2:2e:57:50:98:66:c2:a5:f1:3f:a5:
93:69:67:51:2d:e3:fe:15:91:4c:e6:84:a2:56:30:
95:6d:6f:f6:15:be:89:b4:91:99:cd:66:4d:43:0c:
d9:b3:be:2d:f4:72:ab:c8:53:96:3d:da:55:0f:06:
2e:df:d0:dd:3b:67:e9:8f:34:95:b7:60:3f:06:b6:
aa:09:72:3b:ad:f7:4a:43:4a:80:51:94:7a:aa:a0:
09:7f:9c:61:44:12:be:67:af:11:ba:cc:71:18:05:
d9:c6:a3:18:d3:22:58:b1:8d:a2:e1:4c:5b:3d:e4:
04:a2:92:80:de:c3:a1:8b:3e:1a:89:db:e4:f1:49:
c3:31:22:e7:f1:87:7d:a2:96:11:f5:2b:b9:91:2a:
92:53:78:68:c5:af:b8:2f:69:a1:45:16:2e:e7:8f:
a1:fe:6a:83:04:66:e5:c8:a8:24:83:c4:ae:e9:70:
0f:0b:56:16:94:57:88:1d:d0:f1:9e:0e:ed:65:0b:
07:3e:72:44:72:3d:10:07:51:ef:6f:77:9c:a8:71:
48:96:64:05:9e:14:d0:6d:09:46:ce:16:b0:32:28:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:17:E7:F0:73:EC:19:D8:E1:A4:BC:5A:5B:D9:75:3C:DE:01:69:36
X509v3 Authority Key Identifier:
keyid:EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/61844A22E53211EE9FD7FCC7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e9:8c:4e:d6:64:d4:8a:f6:e2:8b:a1:45:fd:58:af:7d:72:
6a:b9:e6:dd:6a:0f:09:1d:86:5e:3a:eb:58:ce:2e:a7:ac:d6:
a8:27:f5:c7:6e:05:5a:48:f3:13:57:49:58:c3:9b:1f:9c:fa:
0e:b8:32:5d:ab:0a:db:49:5a:98:12:9f:ac:e9:22:a1:1b:22:
94:60:c5:e6:4c:c7:cd:fb:52:35:68:e3:10:21:9d:9b:ed:d5:
f5:0e:12:5b:52:c7:d0:bc:35:41:e1:5f:ff:d6:f9:6f:a2:a4:
53:5b:18:3a:02:11:d3:6e:80:85:83:d1:f2:f0:41:2b:f2:3b:
ff:ee:ad:f1:b8:56:b8:76:f5:78:81:4d:e8:6e:40:51:89:2e:
a6:74:97:4b:a0:9e:d5:9a:71:32:86:55:9d:36:78:b6:cd:40:
a5:fa:4f:98:bc:2b:45:29:9c:77:2d:7d:ff:fa:2e:fd:51:ce:
c0:4d:aa:81:13:e8:19:15:69:88:2a:11:6e:29:4d:16:7f:fa:
f8:91:b6:d5:4a:06:0b:f2:48:3f:21:84:d1:b5:74:cf:9c:fa:
8f:4e:00:d5:6d:2b:82:af:84:36:cc:d4:98:9b:b5:b1:84:80:
d2:68:aa:54:10:6e:ad:c0:07:bc:98:80:b0:a3:c7:19:e5:00:
2c:cc:e5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:15 2025 by rpki-client