Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/23D0FB9E613D11EF962D8A6E762E951A.roa
File: 23D0FB9E613D11EF962D8A6E762E951A.roa (raw, json)
Hash identifier: 3oV6LY1/kpoXS09nAp7mxXM0LbJkvkfQ0+QUx81nedY=
Subject key identifier: C0:7E:DA:3D:D0:83:6C:A5:2F:D8:C0:4F:BE:D4:16:78:57:24:56:F0
Certificate issuer: /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial: F3
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/23D0FB9E613D11EF962D8A6E762E951A.roa
Signing time: Fri 23 Aug 2024 10:47:49 +0000
ROA not before: Fri 23 Aug 2024 10:47:46 +0000
ROA not after: Sun 31 Aug 2025 10:47:46 +0000
asID: 43260
IP address blocks: 102.216.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 15:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Validity
Not Before: Aug 23 10:47:46 2024 GMT
Not After : Aug 31 10:47:46 2025 GMT
Subject: CN=66c868d5-c04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:a6:57:3b:31:ea:eb:82:59:61:be:ac:71:
16:48:f6:ba:55:64:e0:a7:ee:13:26:2d:69:98:f8:
69:8f:a2:5f:0d:74:e0:7a:d9:24:e6:34:49:c5:90:
45:5b:7f:ad:53:73:fc:65:75:b7:db:ef:75:7b:62:
47:7e:35:f3:d6:b4:e4:80:92:86:31:75:5f:05:2f:
48:d5:c8:5f:ab:8d:1a:96:21:4d:87:b3:a8:77:f5:
1e:9e:a2:46:07:35:cb:56:da:62:77:1c:9c:b7:e3:
29:15:fa:3f:8c:5a:f4:96:96:2e:b9:06:f1:2b:6a:
32:00:39:57:47:58:ef:e9:6f:bf:b4:32:e7:d0:28:
b0:5c:c6:5b:2f:a4:94:ae:09:af:f4:bd:d5:fa:eb:
75:39:c8:ea:ae:fe:6c:66:53:86:fe:40:f4:47:18:
91:73:1c:60:b3:b6:72:56:af:ca:f6:24:72:b0:6d:
8c:60:08:0a:1e:49:27:fd:2b:8e:b1:20:82:7c:26:
fe:66:79:3d:f9:15:dd:4b:4a:29:59:54:ec:09:c4:
a9:21:70:06:9e:84:fd:f2:43:4c:33:ac:38:ec:03:
e1:03:f0:26:4d:0a:51:b6:b7:1e:45:1c:13:10:11:
67:52:8d:0a:ec:19:84:b3:37:c6:1e:fb:f2:d1:e0:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7E:DA:3D:D0:83:6C:A5:2F:D8:C0:4F:BE:D4:16:78:57:24:56:F0
X509v3 Authority Key Identifier:
keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/23D0FB9E613D11EF962D8A6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bd:e3:74:66:dc:39:8c:38:5e:50:6f:0b:1d:14:ed:ed:bb:
f6:0b:aa:07:f8:c0:41:fd:05:ce:2d:e2:92:6d:a9:a3:60:b2:
f5:d0:07:02:4b:30:3e:d6:e5:ed:5a:07:76:28:c5:87:1f:99:
db:d5:48:16:2d:32:c7:81:80:96:ba:9a:dc:69:eb:4b:ba:09:
95:ef:d5:eb:f6:44:2c:ed:f3:dc:39:9a:19:85:9f:89:71:9a:
5e:cf:85:c6:cf:5b:f2:9e:9e:ab:90:0f:55:a1:56:39:88:b6:
34:90:25:3a:b8:4f:15:aa:83:7e:55:23:15:51:df:64:90:e7:
ac:ee:ef:42:53:3c:8a:b9:d7:3f:c9:ed:29:60:1d:ce:0e:06:
0b:44:fd:e8:16:06:78:da:46:27:49:13:dc:2c:e0:70:26:94:
6a:98:bc:6f:b7:5a:8c:93:82:fb:bd:52:16:fd:97:08:5b:d8:
2c:13:19:ed:65:c4:71:d3:9c:26:8b:78:ec:c5:b0:21:a8:86:
6a:cf:69:ef:45:58:70:f8:5c:d7:81:b6:d3:d4:ea:4f:5f:b7:
4a:bc:ae:ea:44:e5:f5:22:fe:7c:9b:b4:70:e4:57:af:4e:20:
4b:b9:26:be:9d:63:70:dc:68:fb:88:63:39:87:03:2c:68:c3:
07:66:d1:52
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUJFODlBRjExMC8GA1UEBRMoQzNCNEEzRERCMkRBQ0ZDNTM4OEVFRUM3MzU5RDIx
NDY2NDQ5NkEwMTAeFw0yNDA4MjMxMDQ3NDZaFw0yNTA4MzExMDQ3NDZaMBgxFjAU
BgNVBAMTDTY2Yzg2OGQ1LWMwNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzuKZXOzHq64JZYb6scRZI9rpVZOCn7hMmLWmY+GmPol8NdOB62STmNEnF
kEVbf61Tc/xldbfb73V7Ykd+NfPWtOSAkoYxdV8FL0jVyF+rjRqWIU2Hs6h39R6e
okYHNctW2mJ3HJy34ykV+j+MWvSWli65BvErajIAOVdHWO/pb7+0MufQKLBcxlsv
pJSuCa/0vdX663U5yOqu/mxmU4b+QPRHGJFzHGCztnJWr8r2JHKwbYxgCAoeSSf9
K46xIIJ8Jv5meT35Fd1LSilZVOwJxKkhcAaehP3yQ0wzrDjsA+ED8CZNClG2tx5F
HBMQEWdSjQrsGYSzN8Ye+/LR4PhlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUwH7a
PdCDbKUv2MBPvtQWeFckVvAwHwYDVR0jBBgwFoAUw7Sj3bLaz8U4ju7HNZ0hRmRJ
agEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCRTg5LzA5OUI0ODNBQkU4RTExRUVCMTk1QTk4RTc3NTQxMkU2L3c3U2oz
YkxhejhVNGp1N0hOWjBoUm1SSmFnRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3c3U2ozYkxhejhVNGp1N0hOWjBoUm1SSmFnRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjVCRTg5LzA5OUI0ODNBQkU4RTExRUVCMTk1QTk4RTc3
NTQxMkU2LzIzRDBGQjlFNjEzRDExRUY5NjJEOEE2RTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2P8wDQYJKoZIhvcNAQEL
BQADggEBACq943Rm3DmMOF5QbwsdFO3tu/YLqgf4wEH9Bc4t4pJtqaNgsvXQBwJL
MD7W5e1aB3YoxYcfmdvVSBYtMseBgJa6mtxp60u6CZXv1ev2RCzt89w5mhmFn4lx
ml7PhcbPW/KenquQD1WhVjmItjSQJTq4TxWqg35VIxVR32SQ56zu70JTPIq51z/J
7SlgHc4OBgtE/egWBnjaRidJE9ws4HAmlGqYvG+3WoyTgvu9Uhb9lwhb2CwTGe1l
xHHTnCaLeOzFsCGohmrPae9FWHD4XNeBttPU6k9ft0q8rupE5fUi/nybtHDkV69O
IEu5Jr6dY3DcaPuIYzmHAyxowwdm0VI=
-----END CERTIFICATE-----
Generated at Mon Sep 9 18:03:29 2024 by rpki-client on console-fra.rpki-client.org