Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/D54724D0F5B811EDA6B9CF524AD9E6FC.roa
File: D54724D0F5B811EDA6B9CF524AD9E6FC.roa (raw, json)
Hash identifier: c1iO7Q8TALCBphOG+qKuLN4VFute9DvOP1fIjMhX5MM=
Subject key identifier: A8:59:9D:17:4C:C7:A6:28:A4:C1:AB:83:8B:09:95:DF:B3:E4:BF:79
Certificate issuer: /CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Certificate serial: 03
Authority key identifier: CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/D54724D0F5B811EDA6B9CF524AD9E6FC.roa
Signing time: Thu 18 May 2023 20:16:12 +0000
ROA not before: Thu 18 May 2023 20:16:05 +0000
ROA not after: Sat 31 Dec 2033 20:16:05 +0000
asID: 329095
IP address blocks: 102.215.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 11:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Validity
Not Before: May 18 20:16:05 2023 GMT
Not After : Dec 31 20:16:05 2033 GMT
Subject: CN=6466878c-7afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:1f:54:b1:3f:37:0b:e4:bb:c5:32:28:da:
c3:b4:ab:07:93:99:2d:c6:46:ca:98:c9:da:73:86:
1e:68:cb:be:74:75:4a:2e:60:70:c7:58:f8:76:1b:
77:aa:af:11:4d:ec:90:af:19:12:b4:19:a3:64:3f:
63:1e:f7:4b:91:4b:a1:bc:b6:0a:45:51:5e:79:3b:
59:b3:ae:c6:41:a3:70:36:0c:7d:f9:72:41:09:ec:
a5:d8:d4:23:5d:af:52:be:f4:ad:f6:46:b8:14:57:
e4:95:cf:d4:e9:6d:46:bd:e4:9b:61:21:5d:33:8e:
86:cf:57:e3:b7:d9:91:f6:2c:20:31:df:5b:e4:84:
5a:e8:50:98:66:54:66:79:d5:d3:91:4f:45:bb:88:
4e:eb:fd:ca:fe:46:29:60:a9:de:0e:98:f9:17:90:
fc:b6:02:5f:04:a7:59:67:51:bf:d2:2b:95:9e:29:
38:00:d5:1d:81:19:5a:1e:7f:54:0d:67:ac:be:32:
f3:b9:ef:24:d8:e2:03:66:9e:dc:36:56:fd:21:3f:
34:44:db:8f:13:29:76:c7:6d:fd:c2:10:11:45:a3:
e6:76:87:89:8c:5f:07:eb:99:d5:18:f9:6e:ae:09:
e7:df:bc:40:d1:9d:67:85:c4:0f:3a:92:c8:60:62:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:59:9D:17:4C:C7:A6:28:A4:C1:AB:83:8B:09:95:DF:B3:E4:BF:79
X509v3 Authority Key Identifier:
keyid:CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/D54724D0F5B811EDA6B9CF524AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.99.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6c:9d:c4:35:aa:82:3d:a9:52:15:9d:48:09:f7:6f:88:3d:
b4:c4:70:12:1a:3f:61:a0:5f:2f:30:6f:cd:9b:3e:6a:d5:ba:
f0:02:e1:9b:0f:38:83:1a:0e:a6:5c:6b:86:46:d3:16:f2:23:
0f:f9:5d:70:42:8e:ca:e8:42:1c:4a:6b:ff:d4:eb:b3:9c:99:
af:84:a7:27:6d:68:b1:9b:c4:15:8b:dc:cc:06:06:47:5c:e4:
f3:71:9b:1a:36:c7:26:7f:f6:08:ed:95:03:b6:3f:07:69:f1:
23:e9:4d:24:43:e5:2f:ea:a4:05:05:f7:13:ca:ec:72:45:2a:
2a:57:21:59:72:36:f5:8b:8b:8c:b0:fc:4e:18:43:dc:c8:5d:
33:64:0d:4b:df:1f:0a:82:db:54:4b:45:eb:47:1d:ae:d2:72:
17:77:a4:43:b6:ca:d1:96:91:54:7c:40:7c:d6:29:ed:42:27:
c6:d0:2e:14:19:16:c9:c2:a1:04:27:93:d6:65:61:e9:6c:d3:
6a:ed:24:e6:e3:20:92:d4:33:09:49:15:42:fc:67:64:5a:54:
72:24:43:c2:67:3b:1f:72:b2:72:37:a4:d3:cc:e3:51:a8:01:
0e:0f:b4:fd:fd:78:e7:85:a5:cf:95:a5:07:ad:d7:2e:ed:02:
3a:03:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org