Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/299B07080B8A11EF91775368017001B1.roa
File: 299B07080B8A11EF91775368017001B1.roa (raw, json)
Hash identifier: m7B5bdFL4TgNishfMN2Kx+MB1CQiyCU+V+aym+86yws=
Subject key identifier: EA:B2:83:D3:AA:98:00:75:45:7D:62:A0:D3:0C:10:2D:AD:23:A8:C7
Certificate issuer: /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial: 0123
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/299B07080B8A11EF91775368017001B1.roa
Signing time: Mon 06 May 2024 09:22:30 +0000
ROA not before: Mon 06 May 2024 09:22:27 +0000
ROA not after: Wed 31 May 2034 09:22:27 +0000
asID: 329206
IP address blocks: 102.213.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 11:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Validity
Not Before: May 6 09:22:27 2024 GMT
Not After : May 31 09:22:27 2034 GMT
Subject: CN=6638a156-fe98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:2f:3d:67:a5:d4:63:67:44:22:25:c6:77:
01:a6:22:e3:96:a6:67:0c:d6:5f:d0:ba:b8:23:75:
1d:28:b8:dc:bf:c9:2f:b6:cb:91:a2:40:b5:9c:2b:
07:95:10:7b:cb:f1:17:ee:ab:63:9c:30:2c:0f:b5:
6d:15:00:25:a8:fa:f3:7e:54:1c:af:8f:f8:85:6a:
9e:36:ae:22:7e:6a:41:d6:61:45:19:78:9e:2d:0e:
29:16:cf:96:77:a4:13:a7:64:8b:f7:93:42:8f:cf:
d9:f5:71:f4:79:0b:9c:c9:d2:8b:75:2b:39:4b:99:
0d:b5:1a:68:2c:6b:63:32:ed:c0:32:e7:5e:dc:86:
84:fe:d9:eb:49:79:5a:64:1f:55:9f:06:46:aa:03:
11:d1:ae:70:c7:ef:32:a1:d1:67:7d:eb:16:45:75:
52:ac:75:eb:5b:e3:69:70:52:04:61:10:49:ac:9c:
ee:85:fc:d9:9b:c4:02:e2:73:63:b6:16:a7:ee:03:
0a:a5:8a:9c:bb:16:9c:f4:2e:d1:ec:c4:ec:dd:10:
f5:41:c9:79:ee:2c:1e:1a:37:17:0f:55:25:07:bf:
06:d2:33:c6:4b:f9:8a:60:08:01:29:35:60:7d:12:
0d:69:92:9e:44:ca:2c:d0:35:07:ea:90:2f:10:b1:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:83:D3:AA:98:00:75:45:7D:62:A0:D3:0C:10:2D:AD:23:A8:C7
X509v3 Authority Key Identifier:
keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/299B07080B8A11EF91775368017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.4.0/22
Signature Algorithm: sha256WithRSAEncryption
06:61:0d:45:10:84:38:44:9c:3d:77:69:f2:1a:12:a5:21:04:
af:26:bf:47:64:f5:a8:d8:0f:6f:3c:f6:0d:0a:6a:0b:b3:17:
05:ca:9e:53:e1:fe:d4:b2:42:d2:9f:10:da:90:ce:7c:bf:d6:
3b:a7:5b:45:18:e0:af:04:c5:cd:4a:72:c4:ba:bc:87:84:e8:
e9:a9:8e:5f:88:3c:86:de:35:61:51:4b:2a:5c:c6:28:69:d9:
80:49:b3:39:dd:b0:25:96:2a:6b:15:a0:1a:0d:62:18:6b:49:
c1:88:1c:53:d6:7b:22:70:28:cf:11:3e:d2:43:25:d4:08:02:
b3:ec:23:cc:9f:99:69:2d:17:1b:51:80:89:e6:f4:f2:c4:fe:
66:c7:b1:75:9c:0f:c4:a0:45:a8:b9:78:46:6a:29:df:b6:69:
19:c3:4c:21:91:13:9b:6d:05:01:5e:86:f7:34:6a:95:55:64:
bd:d0:0e:f5:f3:6f:d5:47:39:75:3e:c0:f3:d7:27:cf:51:2a:
85:50:a9:e1:be:15:25:7d:f0:c0:71:55:33:3d:45:9e:61:43:
96:00:95:ae:c6:e4:fa:cb:b3:5e:b3:7e:d0:22:58:8f:3e:18:
ce:c1:53:2f:6c:71:d8:e9:91:29:6e:1e:4f:17:10:1d:5f:57:
92:a4:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org