Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/FA82C812E46811EF835AEC7A762E951A.roa
File: FA82C812E46811EF835AEC7A762E951A.roa (raw, json)
Hash identifier: nLToROvNFjmoSkhUpEDSs2Quc9621QyYK8XzfxmKTcM=
Subject key identifier: 4D:37:2B:A7:BE:6F:D5:1A:0E:97:BA:CA:70:3E:20:90:B3:1A:13:5F
Certificate issuer: /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial: 01B1
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/FA82C812E46811EF835AEC7A762E951A.roa
Signing time: Thu 06 Feb 2025 09:01:40 +0000
ROA not before: Thu 06 Feb 2025 09:01:37 +0000
ROA not after: Wed 28 Feb 2035 09:01:37 +0000
asID: 329007
IP address blocks: 102.216.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 17 Feb 2025 08:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BE89AF
Validity
Not Before: Feb 6 09:01:37 2025 GMT
Not After : Feb 28 09:01:37 2035 GMT
Subject: CN=67a47a74-92bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:09:35:1e:ed:d0:07:51:12:77:82:bf:42:
d7:21:ef:7e:2f:12:17:a4:74:00:ef:44:d4:58:00:
33:d6:a5:15:75:57:78:ce:9c:be:1d:49:d2:e8:5d:
57:f0:b3:8a:3b:94:d1:6d:f2:ba:90:6b:85:9c:30:
43:fa:25:cd:89:b4:86:a0:41:db:f2:d0:9b:77:67:
84:93:af:92:71:80:21:67:60:d8:40:57:06:f1:a7:
81:16:bf:9b:3c:e6:ef:6e:67:61:e8:ad:a6:49:e4:
95:8d:6d:a0:ad:1a:48:3f:f4:df:72:e7:04:97:c4:
11:a9:40:b4:64:06:ec:07:9b:8d:dc:86:93:cc:fe:
02:5a:29:d9:2a:c5:71:e9:53:1d:b2:1a:bd:e6:fb:
21:ff:b2:59:9e:5f:26:2e:76:3e:e1:bf:23:9c:94:
16:a5:07:88:da:98:56:ea:0a:43:21:89:62:f2:d7:
db:72:fa:59:ff:a1:be:c0:83:63:e5:0a:5c:39:96:
2d:c3:c9:71:93:60:d0:fc:66:74:c2:df:b5:ee:6e:
dd:c5:e6:9d:2b:4d:f2:38:58:6f:1e:36:88:dc:23:
fd:8a:bb:db:b2:c8:dc:6c:5f:49:e3:83:69:88:49:
c0:5a:0b:a3:03:14:50:72:a4:9d:2d:c3:e2:74:04:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:2B:A7:BE:6F:D5:1A:0E:97:BA:CA:70:3E:20:90:B3:1A:13:5F
X509v3 Authority Key Identifier:
keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/FA82C812E46811EF835AEC7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
83:f8:ea:93:e6:4c:94:63:84:58:4d:7b:d3:0e:11:3f:31:88:
46:86:81:57:44:28:69:6e:11:73:a5:4f:c5:f8:a0:92:8e:2c:
97:aa:fd:3a:91:23:f6:8e:ec:ee:ed:18:e6:88:a8:ac:81:d2:
13:18:41:ec:15:31:45:17:5e:5a:c2:26:9e:54:b1:dc:b5:f3:
2a:37:75:6b:ed:40:80:27:9c:c9:e6:f5:3c:83:de:d1:f4:14:
7f:1f:8b:d9:e9:d9:50:39:38:af:cb:74:a7:92:59:fa:6d:db:
9c:8c:b8:ad:f6:8c:28:9d:8d:d5:13:83:2a:9a:01:7c:fe:03:
21:c6:19:4d:8e:a2:1e:4f:ec:86:b3:b2:87:e4:70:3c:75:5b:
23:20:90:f6:0e:3f:0a:ce:55:8d:e3:4d:c3:72:0c:b4:c6:94:
ec:7d:a7:69:b4:12:a1:33:e3:8a:44:37:4f:85:cc:65:e3:fd:
58:b0:c3:54:bf:12:4d:f2:75:3c:9c:90:6a:df:87:2b:6e:e8:
73:d8:1c:cc:1b:f3:01:4c:81:69:41:12:80:52:d8:96:9d:ed:
18:cf:03:e3:3b:04:75:6b:b7:41:b8:5d:05:fd:e5:c8:f2:fc:
75:e1:c5:70:d4:ed:cd:47:29:f6:7a:a0:9f:56:fb:3e:ad:92:
74:47:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:03 2025 by rpki-client