Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/9BB70638D0DA11EE8EC36AB4775412E6.roa
File: 9BB70638D0DA11EE8EC36AB4775412E6.roa (raw, json)
Hash identifier: SxENBdxzIwlqYHAnzsHCuV7PlNIandEuw+BLR/UKwGE=
Subject key identifier: 4A:B2:24:3C:3A:6B:FD:D9:DF:65:4C:BC:BA:15:BF:CB:72:01:5F:B0
Certificate issuer: /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial: 10
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/9BB70638D0DA11EE8EC36AB4775412E6.roa
Signing time: Wed 21 Feb 2024 16:59:43 +0000
ROA not before: Wed 21 Feb 2024 16:59:39 +0000
ROA not after: Tue 28 Feb 2034 16:59:39 +0000
asID: 329391
IP address blocks: 102.210.8.0/24 maxlen: 24
102.210.9.0/24 maxlen: 24
102.210.10.0/24 maxlen: 24
102.210.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 07:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Validity
Not Before: Feb 21 16:59:39 2024 GMT
Not After : Feb 28 16:59:39 2034 GMT
Subject: CN=65d62bff-8183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:c1:1b:40:09:a2:7c:d0:9a:08:ad:e9:47:
86:6a:81:a1:bb:8e:65:67:23:8d:20:5b:14:f3:4c:
29:b3:91:5e:05:4c:ff:4d:81:5d:11:e9:75:d6:ed:
02:e2:3c:aa:0b:67:91:72:66:42:23:3d:55:fa:ef:
7e:ee:51:7e:d5:3a:8f:8c:e8:e2:b3:d5:9c:f0:6f:
55:24:60:e7:bc:b6:dd:55:39:e8:14:04:4b:32:5d:
09:79:6b:58:b4:48:45:84:c9:5f:6f:a7:39:55:6c:
15:56:80:c9:ef:b4:c1:51:56:74:d3:d0:58:71:1c:
bb:6b:40:1f:26:1a:20:0a:f1:7d:83:ae:cb:5c:c7:
0a:a7:c5:6c:31:51:80:58:f7:50:03:0e:c7:b0:a6:
ed:9a:e0:99:84:e0:7a:97:ef:36:0d:c0:c7:6b:57:
1a:f6:d3:67:02:b4:b2:14:e2:26:ef:ea:53:aa:82:
c8:88:e8:39:e5:60:d5:a1:2b:7f:56:b6:06:cd:b8:
87:2f:d4:6f:29:bc:cc:4c:0a:a9:33:1a:a1:d8:b1:
a1:a2:f3:4a:04:cb:e6:bc:66:0f:b5:8a:2b:a6:f1:
bb:c4:fe:98:46:2b:33:5f:3a:73:41:4e:cb:cc:2f:
d9:b2:a6:25:aa:8b:06:bc:5e:08:23:aa:f8:20:66:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B2:24:3C:3A:6B:FD:D9:DF:65:4C:BC:BA:15:BF:CB:72:01:5F:B0
X509v3 Authority Key Identifier:
keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/9BB70638D0DA11EE8EC36AB4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:75:4d:03:f2:be:2a:bb:3a:5d:be:ec:d0:27:91:9a:88:99:
2e:7c:ea:9d:e1:1f:a1:d8:62:8a:37:2a:e5:22:7c:c1:e0:11:
1a:00:5d:36:b2:d9:b7:91:ef:85:9c:7a:95:ed:08:4b:99:5b:
1e:43:11:6e:04:4a:5b:61:ee:97:5e:e4:b6:33:41:17:42:8f:
14:16:bd:39:fe:f1:f0:6b:47:7a:67:34:fd:fe:e2:9a:9e:67:
d1:87:87:5d:9d:eb:a6:be:fc:70:d3:8c:70:13:b9:72:94:7f:
18:5f:98:7e:2a:ed:ef:6c:b1:29:f1:ba:e8:90:a0:23:33:55:
ab:2c:3e:38:2b:7f:e2:78:22:ad:d4:44:78:64:3a:0c:2a:2d:
08:78:16:da:48:87:3b:66:fc:31:01:77:56:65:26:fc:6e:da:
c7:dc:ec:6d:78:36:24:83:34:e8:e5:8f:3b:c1:4b:91:8b:51:
88:e8:86:c9:7b:38:7b:2f:ae:38:bc:48:26:cc:18:96:fa:a8:
8b:ec:87:c7:b5:bb:80:2c:f7:f5:01:a3:28:ee:6e:a9:5e:2c:
fa:56:b9:a9:f3:a7:9d:7f:ba:d2:a6:07:d3:e0:9c:ad:41:ee:
3c:85:76:46:81:64:71:72:fd:8c:3a:b9:4f:f7:64:ba:d0:0e:
1e:91:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org