Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/658A3E649CCB11EF9BBDC254762E951A.roa
File: 658A3E649CCB11EF9BBDC254762E951A.roa (raw, json)
Hash identifier: 1wqABalF3ZNp1cQZADujvAdiG9jd7DwzHQOdCvMyVzw=
Subject key identifier: 83:34:C4:C8:D8:16:A1:7E:49:11:FA:47:CA:72:52:10:E1:37:48:DD
Certificate issuer: /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial: 0547
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/658A3E649CCB11EF9BBDC254762E951A.roa
Signing time: Thu 07 Nov 2024 05:44:47 +0000
ROA not before: Thu 07 Nov 2024 05:44:43 +0000
ROA not after: Sun 31 Dec 2034 05:44:43 +0000
asID: 328528
IP address blocks: 102.218.100.0/24 maxlen: 24
102.218.101.0/24 maxlen: 24
102.218.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 05:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351 (0x547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Validity
Not Before: Nov 7 05:44:43 2024 GMT
Not After : Dec 31 05:44:43 2034 GMT
Subject: CN=672c53cf-4d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:b8:c5:5b:8b:05:5c:07:ae:3a:dd:af:32:
12:e8:48:2c:9a:5e:ef:57:37:20:3b:c3:9e:fc:0e:
cb:11:0e:a4:98:0e:cb:25:e3:9e:fc:a1:ca:cc:67:
ff:7d:89:70:bc:1d:7b:f1:89:de:f7:16:94:04:94:
55:69:58:65:82:6c:34:dd:08:89:26:88:f9:8b:77:
1b:c7:b5:64:fd:7e:3a:d2:86:de:aa:c5:09:94:92:
07:90:01:96:03:83:af:c0:f8:ce:62:1e:1a:5d:12:
ce:f8:b4:d8:67:bd:ae:4d:9b:31:bc:44:6f:8e:fd:
dd:23:f6:ab:4c:b3:7e:c8:37:4b:ac:d3:8a:6a:3d:
f6:26:6d:dc:93:6d:38:2d:20:6c:2a:72:b8:cf:b6:
81:1f:b0:42:db:6a:bc:a9:b1:a7:62:da:e3:e4:b9:
ba:91:a4:0e:1f:a8:74:8c:0f:2f:c1:c0:51:93:b6:
75:12:94:f9:8d:1c:3c:54:d3:92:a5:7f:b6:aa:ee:
d8:a7:04:b3:60:50:84:63:5d:8a:88:77:50:a9:80:
86:a5:28:aa:cf:93:04:56:15:5b:8f:49:2e:18:00:
1d:f3:41:b4:8f:a1:28:a6:54:62:26:e2:b5:35:9f:
8d:3d:73:f8:52:3d:27:0a:fe:58:18:9f:58:e9:b6:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:34:C4:C8:D8:16:A1:7E:49:11:FA:47:CA:72:52:10:E1:37:48:DD
X509v3 Authority Key Identifier:
keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/658A3E649CCB11EF9BBDC254762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.100.0-102.218.102.255
Signature Algorithm: sha256WithRSAEncryption
b4:f2:9b:82:d1:e7:87:ab:85:c3:af:cc:9d:d5:2e:25:5b:9b:
ca:e0:3d:9f:d0:b4:a7:ca:53:e4:91:1f:8c:9b:4e:2a:90:86:
a8:24:ad:8b:78:97:18:e7:c5:9e:69:37:e5:f2:43:a6:2d:18:
9c:c0:21:f0:70:53:a2:f3:9d:e8:5a:54:a8:05:fc:4b:58:a1:
dc:e3:55:11:42:46:8e:76:19:3f:ad:e4:b5:3e:02:2c:c1:84:
0b:a4:e2:45:92:de:42:2d:c0:79:65:c8:e0:c8:0f:bf:8b:fb:
c9:c9:f4:4a:4e:59:6e:3e:c2:6e:fb:86:b7:ca:4e:ea:3b:17:
a0:30:e9:78:f9:42:e7:84:d3:71:c5:a5:a7:b2:08:32:ec:53:
28:6f:d6:48:51:5a:72:03:be:93:e1:69:02:27:b2:71:a4:b8:
14:23:fa:9e:37:db:fd:80:59:91:13:e7:99:42:4a:48:d5:79:
ec:18:c2:81:b1:5a:75:04:f7:d2:64:85:54:b1:0d:7a:ec:cb:
38:17:6f:ab:39:ca:51:29:23:d5:db:31:c1:2a:c4:92:84:27:
7c:b1:81:fb:38:d9:d0:32:b8:37:97:85:ee:24:81:5a:b7:7b:
c3:fa:2d:5b:85:e6:6c:82:ab:81:db:09:cc:6e:98:dd:0d:99:
0d:9a:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 06:31:07 2024 by rpki-client on console-fra.rpki-client.org