Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/C8062A18B7BE11EFBBAEE5A6762E951A.roa
File: C8062A18B7BE11EFBBAEE5A6762E951A.roa (raw, json)
Hash identifier: oXlYg+D7AXJAisLhU0Uk2f2X8x4i3YhcnZmgnQ1+rlc=
Subject key identifier: E4:5E:21:12:70:C5:E7:F2:C1:5D:0E:70:A3:67:5F:5F:9E:92:06:06
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 1F
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/C8062A18B7BE11EFBBAEE5A6762E951A.roa
Signing time: Wed 11 Dec 2024 12:52:30 +0000
ROA not before: Wed 11 Dec 2024 12:52:21 +0000
ROA not after: Fri 01 Dec 2034 12:52:21 +0000
asID: 328467
IP address blocks: 102.67.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 08:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF
Validity
Not Before: Dec 11 12:52:21 2024 GMT
Not After : Dec 1 12:52:21 2034 GMT
Subject: CN=67598b0e-79ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:2b:d3:90:5b:99:33:43:b3:0e:ae:2e:d2:
79:84:ba:06:84:22:f0:51:4b:76:62:5f:01:4e:c8:
05:8c:1b:7e:18:68:60:3e:38:14:94:fe:0c:5a:7c:
55:cc:1e:d3:a5:9c:2a:45:71:6b:ac:4e:13:c5:40:
49:c8:37:34:f2:b0:5b:d2:08:2a:05:b8:e7:f7:49:
b1:58:dd:c0:8b:d3:c0:b9:0f:d2:d6:e6:52:fd:28:
f8:d5:25:78:6a:45:4e:26:bb:29:c1:8f:bc:3a:d2:
de:4b:64:e0:58:78:85:3f:a2:59:04:be:a3:9b:90:
e4:e1:de:db:de:1a:ae:a1:48:da:bc:f7:b8:69:a5:
34:22:1f:f3:21:f3:37:0f:45:8e:e2:78:93:6c:d7:
39:ac:95:be:92:6f:46:f6:2f:63:5a:59:03:fe:95:
c0:35:6c:02:df:c0:62:60:c9:fe:98:c8:95:33:99:
77:2e:0f:cd:fc:0b:ac:2a:99:4f:50:9b:c4:52:f5:
4f:04:42:b4:19:ec:5d:48:11:f9:f8:24:7b:52:39:
12:29:34:57:f3:c8:5f:1a:06:3f:d6:b7:47:29:3d:
d9:1f:03:86:eb:b6:47:c7:92:04:b1:cb:6b:52:6c:
4f:39:c9:08:67:e5:90:d6:ba:89:b3:90:04:76:a1:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5E:21:12:70:C5:E7:F2:C1:5D:0E:70:A3:67:5F:5F:9E:92:06:06
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/C8062A18B7BE11EFBBAEE5A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.129.0/24
Signature Algorithm: sha256WithRSAEncryption
88:52:93:6e:19:1c:be:a2:27:bb:4e:50:ab:04:68:d8:79:76:
7a:37:5c:dd:64:e6:a2:aa:12:5e:0e:03:a6:44:c5:a0:93:10:
5c:01:57:eb:d0:59:be:00:f9:67:41:c3:48:5a:fb:c5:c6:83:
7e:84:01:7c:6f:e9:84:47:74:8e:74:04:cc:2b:ae:6a:79:f6:
0d:cc:a4:2e:7e:78:d3:03:b2:62:fc:3a:da:1c:58:85:1d:b2:
cb:e2:a9:3a:75:e4:db:36:90:dd:14:ca:14:ee:e0:11:31:6d:
29:97:f9:6a:59:28:2d:c1:67:e7:53:71:c3:f1:e6:87:76:bc:
da:c0:2e:72:f1:df:d1:92:ba:d8:12:d6:e4:76:7b:3b:36:df:
ee:88:05:de:6e:53:9f:dd:da:6d:33:1e:c2:bb:61:50:6a:5d:
36:6a:f7:8c:c7:b5:3c:a9:b5:19:07:a2:40:f8:b3:0b:98:0c:
f1:52:e9:1d:d5:bc:8c:ee:27:52:6f:41:69:04:12:8b:6e:b7:
d5:3c:53:17:51:bd:1f:8a:a5:d6:92:ae:eb:8f:c3:ad:62:02:
a2:db:8c:92:07:1f:07:61:7e:a1:9a:ae:ca:d1:d5:ac:71:0b:
d1:4c:96:32:23:6a:f0:f1:15:92:88:3f:2e:2d:80:58:bf:78:
0b:fc:2f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:46 2025 by rpki-client