Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/A8566B1CC8D911EEA72EC5A9775412E6.roa
File: A8566B1CC8D911EEA72EC5A9775412E6.roa (raw, json)
Hash identifier: O6XpRA1jX7i5vsl0QdfrSOhWUI91prX7GLv04sbvl2Q=
Subject key identifier: 52:FE:2D:39:C1:6C:86:30:04:B6:1B:AD:78:AF:16:4A:4E:C7:46:B4
Certificate issuer: /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial: 1D
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/A8566B1CC8D911EEA72EC5A9775412E6.roa
Signing time: Sun 11 Feb 2024 12:32:45 +0000
ROA not before: Sun 11 Feb 2024 12:32:42 +0000
ROA not after: Tue 11 Feb 2025 12:32:42 +0000
asID: 329007
IP address blocks: 102.216.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 10:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Validity
Not Before: Feb 11 12:32:42 2024 GMT
Not After : Feb 11 12:32:42 2025 GMT
Subject: CN=65c8be6d-9157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:24:73:15:5c:9d:92:7e:0e:a2:da:8b:0f:
fd:a9:6e:65:89:d4:a7:7a:39:22:3b:ea:56:bc:e2:
be:d5:ba:86:a1:2d:fe:59:04:af:d3:bc:c7:7c:bb:
9b:67:8c:75:df:98:c5:9d:f8:b0:85:71:f9:a8:e6:
b4:42:cc:f7:69:c0:3f:ca:a8:c6:8f:d2:9e:6f:82:
7b:4c:68:71:7b:f8:34:ed:b6:8f:39:32:a9:37:b3:
01:d5:26:91:57:14:32:04:84:0c:ed:15:dc:9e:11:
fb:42:cc:3c:aa:48:79:c1:e0:53:0e:ad:9d:63:35:
6d:b2:50:05:6b:f5:b7:ca:a5:e9:d8:1b:53:7e:f6:
8c:c5:00:74:14:65:07:1b:7b:71:c4:ea:34:1f:f9:
a9:e8:ca:e0:96:be:d8:4f:44:30:ad:7f:af:ba:cc:
f4:39:df:0a:ea:1a:8b:dd:f4:8e:9a:bc:34:26:ec:
3f:e6:9f:f3:7d:df:f0:fb:3c:33:52:7e:9a:bd:a9:
04:a1:b1:68:fc:90:3d:22:be:eb:39:e6:8f:65:7a:
02:df:a1:3f:98:b1:0c:b0:ec:d5:23:41:56:10:d5:
78:5a:c7:6a:73:51:bf:29:90:ff:04:50:1e:d8:48:
a6:e7:fa:d5:05:fd:18:a0:e3:68:85:a9:31:64:c2:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FE:2D:39:C1:6C:86:30:04:B6:1B:AD:78:AF:16:4A:4E:C7:46:B4
X509v3 Authority Key Identifier:
keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/A8566B1CC8D911EEA72EC5A9775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ae:d9:d5:07:f8:61:95:4f:3c:3a:4e:b9:94:aa:55:81:52:
5b:84:7d:3a:2e:6e:92:f3:f8:2c:8d:ee:d2:72:90:48:5d:55:
6c:4c:fb:cc:02:b4:01:59:f9:92:2a:72:01:f1:b0:7f:35:5f:
68:48:46:b0:2c:75:a8:02:74:e4:e1:bb:2f:37:b9:82:77:53:
19:e9:c6:55:9c:e1:c7:1c:9f:f0:cd:8b:cc:18:70:39:88:b1:
4a:91:2c:74:41:e6:00:f6:79:e3:76:06:fa:16:9d:24:0f:d9:
37:a4:5a:f6:22:53:93:20:24:07:a0:3b:35:02:64:df:49:52:
1c:ff:73:c9:a9:59:db:d6:59:0d:d6:3b:92:38:ab:e0:ad:3c:
b1:f3:e7:65:b3:27:f0:bc:84:05:29:5f:e9:0b:8b:48:e8:31:
24:7b:63:a1:6a:e3:f8:eb:e0:fc:ec:60:20:1d:4e:11:70:32:
c9:f9:43:49:10:8b:7d:f3:75:25:42:3b:b3:b1:c6:26:b7:19:
44:ed:8d:eb:32:c4:3b:5a:75:98:b8:17:21:a8:d4:d0:de:ca:
1d:24:ef:bd:0e:d7:0b:22:2d:96:2c:9c:dd:7e:01:2c:c2:42:
a2:c4:9e:af:be:28:05:b5:01:ec:d5:92:7e:d0:cd:9b:d8:84:
b3:69:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 14:18:49 2024 by rpki-client on console-fra.rpki-client.org