Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/C3D467D0E75711EEBAB13A4B775412E6.roa
File: C3D467D0E75711EEBAB13A4B775412E6.roa (raw, json)
Hash identifier: 774sJoEO8tcNbn6GrTvsYvZWkvKi5niC7Oa/7QPftac=
Subject key identifier: ED:B2:BF:E0:35:BC:5F:C1:AB:25:96:A7:F0:D2:4F:F2:48:DA:76:CD
Certificate issuer: /CN=F36251E0AF/serialNumber=EFB7AA8EF96C13AAADC8476FBDDE9F3277FCD56D
Certificate serial: 0B
Authority key identifier: EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/C3D467D0E75711EEBAB13A4B775412E6.roa
Signing time: Thu 21 Mar 2024 07:51:03 +0000
ROA not before: Thu 21 Mar 2024 07:50:56 +0000
ROA not after: Fri 31 Mar 2034 07:50:56 +0000
asID: 329411
IP address blocks: 102.209.136.0/23 maxlen: 23
102.209.138.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 21 Apr 2024 06:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36251E0AF
Validity
Not Before: Mar 21 07:50:56 2024 GMT
Not After : Mar 31 07:50:56 2034 GMT
Subject: CN=65fbe6e7-af41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:bd:63:64:87:44:d1:bc:d6:0c:1f:30:73:
19:eb:a8:08:f5:65:cf:97:40:9d:52:82:e1:99:3a:
1c:1a:c2:e9:f2:2c:1a:45:3e:a5:28:ab:0a:ca:dc:
88:28:1e:bd:fd:83:24:95:da:27:11:f6:a7:ba:32:
71:a0:3a:d6:ad:a1:98:5d:2d:32:d1:09:2b:7b:57:
59:2e:be:a7:9c:e0:ad:18:3f:8e:dd:49:41:0f:85:
fe:d7:fc:e3:93:46:89:21:ed:52:1e:79:fd:c0:57:
a9:e8:4f:9f:3e:5c:cd:de:b7:c1:4a:97:45:7b:71:
6c:85:f8:89:03:c7:40:0a:45:b5:87:aa:d6:81:ce:
ca:eb:08:89:7a:49:43:0d:cd:df:e9:24:3b:d1:06:
fa:f3:d6:37:f1:bd:bf:b1:32:a7:67:70:3d:3c:af:
ec:9e:93:77:2a:f6:2d:7f:07:47:e1:42:16:9e:da:
ff:61:13:8e:af:09:57:6d:7b:24:4d:77:94:0e:36:
0b:1a:d6:0b:bc:b7:55:78:62:50:4a:2b:9c:b9:e6:
8b:08:e8:2e:b5:c2:99:09:71:3c:33:95:f2:4d:99:
d3:ca:0b:a3:0e:d3:54:2e:18:84:07:0b:f5:a7:b8:
df:f0:bf:fe:9d:a8:06:08:d2:1a:83:58:2f:b6:e2:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B2:BF:E0:35:BC:5F:C1:AB:25:96:A7:F0:D2:4F:F2:48:DA:76:CD
X509v3 Authority Key Identifier:
keyid:EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/C3D467D0E75711EEBAB13A4B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.136.0/22
Signature Algorithm: sha256WithRSAEncryption
57:94:2a:f9:8b:af:5d:b6:a3:0f:46:1e:3e:e9:b9:34:2d:17:
24:2b:9d:f8:98:d3:72:a3:a2:83:c1:6f:04:3f:57:ff:79:54:
ad:69:c4:2e:65:c5:ca:cf:37:d5:2c:32:29:56:1f:48:96:fb:
6a:3e:d3:46:88:57:49:c7:4d:93:15:ec:e3:6e:0e:2f:f9:0b:
74:58:05:26:6a:83:2e:f5:00:80:50:1f:1b:51:37:95:e7:55:
a7:dc:cf:5a:10:35:76:97:ff:8f:5a:2e:ff:cd:ac:bf:82:02:
39:b3:6f:63:54:f3:57:dc:4c:ed:cb:5c:f6:aa:b0:49:cc:0c:
d4:92:e5:a3:55:80:ee:3c:50:0f:06:73:87:62:19:0b:57:45:
48:26:74:c4:d7:59:df:d7:07:77:b0:01:66:d5:b7:d5:84:95:
9a:b1:ad:cf:b3:cb:66:b1:1d:22:52:c2:b0:10:ff:c5:fa:62:
a2:8d:34:cb:9e:f6:8e:c0:1a:ed:bc:e9:92:ea:06:4a:f1:18:
42:cc:52:75:10:ef:ba:19:9b:e0:e5:da:39:3e:48:2a:ba:88:
b0:d5:3b:49:aa:fc:ce:70:69:3c:7a:68:49:5e:a4:9a:a8:25:
5b:6b:81:27:6f:d2:91:80:f1:6f:d9:a2:ed:43:09:0c:a1:0b:
44:6a:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:24 2025 by rpki-client