Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/04149422D15611EE8DB7C688775412E6.roa
File: 04149422D15611EE8DB7C688775412E6.roa (raw, json)
Hash identifier: qYsUZP3rej+KXpHpNNAI5LfNVrXWVyEcZZsgC+DjK2M=
Subject key identifier: 99:A1:55:14:DD:45:CE:76:A0:39:06:EC:9A:FB:4C:AC:AF:43:F2:93
Certificate issuer: /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial: 18
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/04149422D15611EE8DB7C688775412E6.roa
Signing time: Thu 22 Feb 2024 07:43:06 +0000
ROA not before: Thu 22 Feb 2024 07:43:03 +0000
ROA not after: Tue 28 Feb 2034 07:43:03 +0000
asID: 329391
IP address blocks: 102.210.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 12:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Validity
Not Before: Feb 22 07:43:03 2024 GMT
Not After : Feb 28 07:43:03 2034 GMT
Subject: CN=65d6fb0a-f6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:7c:31:b4:52:50:d1:63:bf:90:b3:a1:18:
ea:a2:e2:73:c7:f5:88:1a:98:5d:b1:a9:45:4b:27:
45:68:fa:de:9e:3f:73:4c:61:d2:d0:7e:f2:b2:81:
ca:09:bc:d2:ee:67:17:01:aa:0f:93:37:3c:35:5b:
e4:15:3c:cd:9a:5d:4f:69:57:69:93:26:e6:39:82:
95:39:f3:87:75:39:47:56:5d:1f:44:5f:8f:45:ba:
93:65:fb:5f:71:b0:18:48:eb:bf:1c:8c:56:5a:14:
07:e2:4a:30:f8:db:5c:79:6d:81:01:ef:e1:c6:44:
bd:6a:44:8e:d6:7e:b1:0d:f5:c1:1c:40:50:d8:aa:
fd:78:15:34:11:b9:07:30:aa:07:3c:74:0d:53:6a:
a4:b1:71:d2:40:df:8d:7d:38:03:51:16:15:c3:71:
9b:12:bb:ae:7d:2d:d1:b0:5b:4a:18:8b:e5:48:cd:
a4:58:60:1f:47:4d:f4:73:20:5d:4f:49:5a:9c:58:
4f:0b:aa:27:42:ef:c3:28:98:61:98:82:10:52:fe:
ef:02:eb:b1:06:fe:26:69:28:59:2b:a1:77:a1:9a:
a5:be:af:3d:6c:df:54:c5:76:76:b1:0c:99:2d:fa:
3d:96:3f:9d:8c:05:be:3a:97:63:a9:7d:9a:d7:c5:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A1:55:14:DD:45:CE:76:A0:39:06:EC:9A:FB:4C:AC:AF:43:F2:93
X509v3 Authority Key Identifier:
keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/04149422D15611EE8DB7C688775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.8.0/22
Signature Algorithm: sha256WithRSAEncryption
34:46:9f:2b:71:47:6c:fe:94:c1:f6:e7:c3:60:6e:24:ed:ea:
16:58:d6:fa:c5:f8:ff:fe:88:cd:d0:61:18:72:31:9d:f2:eb:
75:d0:9c:00:35:aa:15:1e:40:83:76:18:63:55:81:f8:ce:57:
d1:96:a2:8f:97:e9:19:6c:a7:3c:d9:c8:34:e0:06:3a:14:5a:
7b:bb:80:0c:86:bc:52:9c:cf:8d:f2:5b:5a:e3:15:e1:6f:11:
01:f3:d9:15:f5:ed:fb:29:df:5b:07:58:94:06:6e:47:fa:f7:
2d:5d:6b:6c:f0:69:a0:b6:0c:b4:14:f9:c8:81:f7:fd:c0:e8:
8c:f5:50:68:e2:fc:be:ce:e0:d6:1f:c1:e4:48:af:73:2a:f6:
1f:3f:5a:05:7c:5e:a8:c4:80:49:53:e1:8e:d6:3f:8a:06:7c:
c4:0a:4a:9a:f9:e7:dd:60:a4:a6:67:42:30:8b:b9:aa:7b:cd:
69:c2:28:00:6c:40:fb:3f:40:1e:8b:b9:17:98:f1:0f:fb:8b:
6f:07:87:8d:fb:94:fb:e2:5e:bf:5f:bf:6d:b5:7c:51:82:eb:
b8:72:90:c8:a2:7d:b6:c9:1c:c4:86:e1:e6:8c:3f:19:28:09:
d8:5f:8e:e3:cf:0a:37:4a:95:4e:c8:6e:16:f2:6b:ef:77:cd:
a6:4a:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org