Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/9CB684C4536A11EF90B39B9A762E951A.roa
File: 9CB684C4536A11EF90B39B9A762E951A.roa (raw, json)
Hash identifier: MjoibpQLNXVmoxMd2jkujiWx+KLl2/Fcg7Qqj0wZ8KE=
Subject key identifier: EC:14:B7:70:F4:9A:CD:00:8C:88:B6:13:D0:91:E6:32:D0:E7:FA:AD
Certificate issuer: /CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
Certificate serial: 09
Authority key identifier: 7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/9CB684C4536A11EF90B39B9A762E951A.roa
Signing time: Mon 05 Aug 2024 20:38:03 +0000
ROA not before: Mon 05 Aug 2024 20:38:00 +0000
ROA not after: Thu 31 Aug 2034 20:38:00 +0000
asID: 329455
IP address blocks: 102.208.140.0/24 maxlen: 24
102.208.141.0/24 maxlen: 24
102.208.142.0/24 maxlen: 24
102.208.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 11:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
Validity
Not Before: Aug 5 20:38:00 2024 GMT
Not After : Aug 31 20:38:00 2034 GMT
Subject: CN=66b1382b-d7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:b0:d4:5c:9d:92:87:67:82:f6:5c:3f:4e:
d8:a5:57:c0:99:6d:88:4c:09:03:f9:74:18:26:ba:
8d:74:ab:ee:3c:b2:15:59:4c:f6:a6:f7:9d:11:2d:
23:de:fc:95:f6:24:af:85:51:01:3a:89:f1:db:d7:
bd:2e:2a:1a:19:c7:1e:54:c4:1d:f6:c9:38:f9:1f:
2d:7a:f3:1b:62:56:42:b1:57:81:86:ec:d4:56:b9:
04:79:d8:10:9c:37:4c:2e:0f:bf:18:2c:90:d4:66:
84:f2:85:ec:7a:78:dc:3e:7b:e9:19:8c:b2:88:4c:
d4:12:58:62:7a:84:9e:63:99:64:54:a5:4f:1c:3c:
a2:6d:a6:5b:40:f6:32:53:b1:ad:f8:ff:2d:0a:b3:
2c:3a:2b:99:85:b0:d8:13:35:77:9a:a9:34:b7:5f:
39:6d:e3:31:e9:ef:a1:26:7e:40:89:92:39:da:5a:
03:53:c5:81:49:5d:fc:8c:57:63:f6:27:ba:79:df:
11:09:ce:21:57:4e:8a:8f:0d:b0:e3:bb:02:c2:dc:
9b:5d:26:27:38:55:68:1d:c9:6d:0f:85:31:fc:05:
ae:6a:67:e9:98:6c:d5:9d:1d:01:b1:43:83:84:17:
46:fe:c7:e7:43:6d:8c:06:9b:3c:3e:13:0d:7b:47:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:14:B7:70:F4:9A:CD:00:8C:88:B6:13:D0:91:E6:32:D0:E7:FA:AD
X509v3 Authority Key Identifier:
keyid:7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/9CB684C4536A11EF90B39B9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:63:4e:c0:57:c5:8b:ca:b2:00:42:fa:7d:11:fb:8a:b8:c3:
62:26:bb:4c:2f:96:8e:90:88:19:b7:3e:23:10:82:1e:0c:79:
cf:7f:94:da:25:6d:f3:75:70:70:78:6d:18:d9:d7:3b:42:bd:
df:ae:63:53:de:b3:d5:62:6c:87:e3:47:65:0d:1a:86:51:f7:
f1:6d:75:ff:3a:20:aa:37:40:80:c6:3a:e2:64:24:3f:8e:7c:
bc:2e:77:e1:8d:4d:ea:e1:e6:97:47:f5:cd:df:2b:52:9f:69:
8c:ea:ef:07:12:df:32:60:2c:0e:40:fa:9a:55:d2:3e:07:c5:
6a:66:02:09:f9:30:29:42:df:81:32:c1:e1:25:37:a5:82:39:
b6:74:29:57:18:48:24:ba:75:3d:1c:14:cf:69:4d:2d:9d:44:
05:58:bf:ed:80:b2:0e:6b:89:15:06:d7:b9:49:d8:57:04:1e:
5a:51:3b:96:80:b7:c1:17:fb:9a:f3:89:e3:1d:56:80:cf:a3:
76:c6:8f:ca:44:1c:8d:c7:65:50:89:fc:3b:0c:88:9a:86:a7:
2b:f5:3a:09:a1:a3:44:77:04:78:ab:c0:f5:27:47:3b:e5:99:
a1:37:e6:5e:fa:9d:d7:92:2a:2b:bb:1b:fb:d7:8b:96:5f:46:
76:35:e5:00
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
QzE1NEFGMTEwLwYDVQQFEyg3QzFGQkNCNTQ0NkIzRDQ0NTg3NEEwMjM3NDBFMjQ3
RDYyMzAyMzVEMB4XDTI0MDgwNTIwMzgwMFoXDTM0MDgzMTIwMzgwMFowGDEWMBQG
A1UEAxMNNjZiMTM4MmItZDdhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKqjsNRcnZKHZ4L2XD9O2KVXwJltiEwJA/l0GCa6jXSr7jyyFVlM9qb3nREt
I978lfYkr4VRATqJ8dvXvS4qGhnHHlTEHfbJOPkfLXrzG2JWQrFXgYbs1Fa5BHnY
EJw3TC4PvxgskNRmhPKF7Hp43D576RmMsohM1BJYYnqEnmOZZFSlTxw8om2mW0D2
MlOxrfj/LQqzLDormYWw2BM1d5qpNLdfOW3jMenvoSZ+QImSOdpaA1PFgUld/IxX
Y/YnunnfEQnOIVdOio8NsOO7AsLcm10mJzhVaB3JbQ+FMfwFrmpn6Zhs1Z0dAbFD
g4QXRv7H50NtjAabPD4TDXtHttMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTsFLdw
9JrNAIyIthPQkeYy0Of6rTAfBgNVHSMEGDAWgBR8H7y1RGs9RFh0oCN0DiR9YjAj
XTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0MxNTQvNUM0NDNGNjQ1MDFCMTFFRkIzMzAxRjlGNzYyRTk1MUEvZkItOHRV
UnJQVVJZZEtBamRBNGtmV0l3STEwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZkItOHRVUnJQVVJZZEtBamRBNGtmV0l3STEwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0MxNTQvNUM0NDNGNjQ1MDFCMTFFRkIzMzAxRjlGNzYy
RTk1MUEvOUNCNjg0QzQ1MzZBMTFFRjkwQjM5QjlBNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbQjDANBgkqhkiG9w0BAQsF
AAOCAQEAymNOwFfFi8qyAEL6fRH7irjDYia7TC+WjpCIGbc+IxCCHgx5z3+U2iVt
83VwcHhtGNnXO0K9365jU96z1WJsh+NHZQ0ahlH38W11/zogqjdAgMY64mQkP458
vC534Y1N6uHml0f1zd8rUp9pjOrvBxLfMmAsDkD6mlXSPgfFamYCCfkwKULfgTLB
4SU3pYI5tnQpVxhIJLp1PRwUz2lNLZ1EBVi/7YCyDmuJFQbXuUnYVwQeWlE7loC3
wRf7mvOJ4x1WgM+jdsaPykQcjcdlUIn8OwyImoanK/U6CaGjRHcEeKvA9SdHO+WZ
oTfmXvqd15IqK7sb+9eLll9GdjXlAA==
-----END CERTIFICATE-----
Generated at Wed Aug 7 15:00:15 2024 by rpki-client on console-ams.rpki-client.org