Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/A1CE9D6AABB411EE9E75DABC775412E6.roa
File: A1CE9D6AABB411EE9E75DABC775412E6.roa (raw, json)
Hash identifier: EBBCziyOhQzoyDU1rTq7xlc5p83aeKY1q3xASwTKt2s=
Subject key identifier: 79:2C:6E:6A:1A:DE:AC:B8:EE:ED:2A:55:C1:78:5F:2E:E1:C5:47:CB
Certificate issuer: /CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Certificate serial: 12
Authority key identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/A1CE9D6AABB411EE9E75DABC775412E6.roa
Signing time: Fri 05 Jan 2024 10:24:39 +0000
ROA not before: Sat 05 Jan 2030 10:24:36 +0000
ROA not after: Sun 09 Jul 2034 10:24:36 +0000
asID: 329380
IP address blocks: 102.210.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 28 Mar 2024 14:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Validity
Not Before: Jan 5 10:24:36 2030 GMT
Not After : Jul 9 10:24:36 2034 GMT
Subject: CN=6597d8e7-3ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:15:74:54:97:13:9e:23:d2:9d:a8:97:e8:
f4:b0:d5:44:19:ca:15:4b:c3:8e:fb:e9:e0:70:ed:
e3:b1:d6:31:c9:f2:6f:84:e9:8b:16:9c:ce:0b:f8:
db:88:73:83:1b:22:69:b9:70:bc:64:c3:84:5d:d7:
3c:18:db:4e:8d:fc:99:c3:97:5a:ac:34:fa:62:32:
4c:66:5a:bc:07:cf:e7:8d:83:33:c7:29:07:e2:2c:
00:19:13:7c:cb:c0:79:80:20:fc:04:b8:ce:ba:58:
cb:ab:34:03:e3:b4:17:4c:d7:75:58:1b:f5:56:19:
8f:f4:d8:2f:ed:e6:97:db:57:24:ec:6f:72:33:29:
a3:37:b8:88:c1:20:f8:d1:13:cc:a0:78:f3:38:da:
a1:34:c2:5b:54:41:0c:c0:07:e6:8f:6e:e6:ea:ee:
48:84:f6:5a:b8:43:23:db:de:3e:04:9a:75:8d:f8:
06:b6:c2:79:99:c7:ce:88:4e:bf:81:27:5a:df:9f:
f3:72:76:74:c0:b7:a8:19:55:19:cf:e7:e2:f0:82:
ae:7f:16:37:79:c9:7b:98:b0:02:f3:a3:b4:6f:c1:
0a:07:8b:2b:3e:02:81:d0:a7:5c:9e:e7:73:12:80:
6b:85:5c:3f:f6:15:09:4a:2d:9c:0d:2c:11:41:76:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:6E:6A:1A:DE:AC:B8:EE:ED:2A:55:C1:78:5F:2E:E1:C5:47:CB
X509v3 Authority Key Identifier:
keyid:66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/A1CE9D6AABB411EE9E75DABC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.68.0/22
Signature Algorithm: sha256WithRSAEncryption
04:4b:e7:7d:a8:aa:ae:c2:0b:ee:14:d4:77:34:cc:44:af:6b:
fa:35:5a:a9:37:48:41:45:a0:74:be:b2:fa:8a:8f:f5:40:8c:
85:a4:64:40:1f:26:4a:8c:d4:f1:bc:8d:d4:cb:59:99:a1:f9:
7c:0c:eb:c6:a6:16:f8:f8:d8:c9:3c:7d:6b:be:e0:32:83:0f:
4e:92:8c:89:f6:fd:94:97:2f:27:06:ad:bf:70:3a:18:ac:12:
aa:ba:97:c4:85:00:19:19:2b:31:bc:73:5e:71:61:00:6f:ff:
0c:2d:a9:df:fd:c4:46:7d:6e:69:cf:c8:08:33:cf:84:fa:b3:
f1:31:b7:c3:d5:ef:29:90:b6:8a:fc:d9:20:ac:4e:6d:7f:7b:
5b:70:cd:e6:55:56:28:55:c4:2a:95:1c:97:3a:97:09:55:6f:
aa:5b:91:9e:72:0b:a8:35:28:9d:6d:3a:4f:c4:23:08:00:8c:
a8:71:18:23:fc:b3:e9:85:17:82:de:6e:8f:60:33:f7:0f:90:
18:57:42:08:cf:66:9f:98:61:cb:d3:b3:36:5f:16:bd:da:88:
04:17:13:15:6f:12:67:83:84:5a:cc:60:85:30:7e:dd:18:25:
3a:c2:00:a6:de:15:7c:03:8f:74:66:b8:62:23:88:a0:58:78:
e1:4d:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org