Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/C7D74F54BEBD11EE932AE661775412E6.roa
File: C7D74F54BEBD11EE932AE661775412E6.roa (raw, json)
Hash identifier: SoZvaXFdDrCuQK7+jR16dNm1alnS7nvRY212Wzi91Ac=
Subject key identifier: F9:0E:FF:52:1A:C1:9F:9D:7C:DD:94:C1:7E:F8:C5:91:0C:E7:2F:A9
Certificate issuer: /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial: 02
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/C7D74F54BEBD11EE932AE661775412E6.roa
Signing time: Mon 29 Jan 2024 15:48:01 +0000
ROA not before: Mon 29 Jan 2024 15:47:57 +0000
ROA not after: Tue 31 Dec 2030 15:47:57 +0000
asID: 329007
IP address blocks: 102.216.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 11 Feb 2024 12:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Validity
Not Before: Jan 29 15:47:57 2024 GMT
Not After : Dec 31 15:47:57 2030 GMT
Subject: CN=65b7c8b0-8a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:84:10:dd:e9:f1:a1:5e:ca:64:85:6d:26:
ab:e7:a6:27:46:16:0a:5c:47:66:99:b1:73:46:11:
76:32:98:97:1d:dc:46:92:6f:bd:ee:6c:80:2d:e9:
ea:47:d7:ca:6f:4e:0a:8d:8e:35:5e:ec:e3:c8:f5:
8e:05:74:52:d5:2c:7d:84:2e:18:c1:a0:4b:48:72:
ad:d7:cf:e3:ed:eb:f0:7a:d3:09:79:c3:7e:17:2a:
8a:14:6d:72:10:51:16:a3:5a:63:d9:da:78:24:db:
82:b9:6d:6c:27:23:97:79:f5:26:36:2b:f9:03:42:
fc:2c:48:e0:95:4d:d3:73:79:a4:08:9c:eb:56:32:
14:87:2b:e0:08:58:e1:24:29:eb:c7:28:e5:3f:64:
af:59:19:ef:48:d3:a5:e3:c2:6c:ba:1e:df:77:b6:
9a:e9:5e:65:70:52:a9:45:7e:b8:06:fe:01:72:a7:
c3:16:61:0d:34:04:13:e1:e1:00:0a:66:0b:0b:9d:
f5:2f:16:63:aa:28:82:72:f0:90:b9:4b:33:84:dd:
86:d7:46:3d:a5:3d:67:83:78:0f:9c:78:89:13:a4:
3a:33:10:db:8f:b0:bc:c5:88:c9:c4:4f:b0:75:7d:
0d:14:10:5c:7b:ea:79:bd:cb:ba:2e:33:84:89:26:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:FF:52:1A:C1:9F:9D:7C:DD:94:C1:7E:F8:C5:91:0C:E7:2F:A9
X509v3 Authority Key Identifier:
keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/C7D74F54BEBD11EE932AE661775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
93:ca:8d:73:84:78:3f:ea:25:20:d6:ec:80:04:5a:d3:9e:35:
95:a6:8d:f5:64:c3:87:d3:a3:6d:b5:fc:a9:fb:6d:9f:cf:5c:
e2:66:7e:b3:0d:7e:cc:16:95:61:3c:b4:c0:16:c9:54:df:5c:
a7:b9:83:44:74:9a:4c:e9:21:af:b9:41:c7:3d:c5:38:5e:3a:
ce:89:09:2a:32:47:ee:92:8f:6d:09:bc:39:7f:d0:c5:3f:01:
84:eb:3a:ce:7b:fa:38:ce:a6:62:5b:37:4c:70:fa:a0:a2:b6:
d1:55:ed:c0:30:03:db:1f:cb:08:55:45:1c:f3:81:f3:06:8a:
0b:f8:51:0e:62:58:9d:02:4d:fa:62:fe:b2:37:44:23:40:fb:
53:67:01:1b:f9:79:f7:9d:51:f3:ad:90:c4:73:3c:47:cf:bd:
66:82:80:28:96:cd:5d:11:33:98:64:f9:c9:8f:d8:2f:14:da:
97:b5:91:d5:7b:74:4c:88:d4:b7:fb:14:8c:81:e0:e2:08:b8:
ad:00:3c:22:04:af:85:1d:43:01:37:47:e7:29:ec:fa:1b:16:
e9:b8:6d:e0:39:4a:e6:7c:05:61:21:80:5a:6f:e1:60:c3:bc:
e7:77:2e:d9:2a:35:d6:99:6a:62:4c:3a:e9:44:f2:d3:a4:a7:
4c:2d:64:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org