Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/27C54F6E378D11EEA196F6184AD9E6FC.roa
File: 27C54F6E378D11EEA196F6184AD9E6FC.roa (raw, json)
Hash identifier: 6rsmM3u1bCGkLgqUsPiU+VQOABr9lFRNI8AOBRMYgDQ=
Subject key identifier: 98:0E:17:CA:8D:4C:64:02:BB:17:56:22:6D:1A:CD:07:5D:D2:69:A3
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 0438
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/27C54F6E378D11EEA196F6184AD9E6FC.roa
Signing time: Thu 10 Aug 2023 14:49:49 +0000
ROA not before: Thu 10 Aug 2023 14:49:46 +0000
ROA not after: Sat 10 Aug 2024 14:49:46 +0000
asID: 60528
IP address blocks: 102.216.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 04:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Validity
Not Before: Aug 10 14:49:46 2023 GMT
Not After : Aug 10 14:49:46 2024 GMT
Subject: CN=64d4f90d-5303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:a0:2a:48:eb:dc:58:60:86:30:ed:43:89:
7e:6e:52:ad:08:8f:0d:33:cb:cb:c9:8b:86:59:82:
c7:a9:0c:73:ce:bf:48:34:f6:0b:e3:ad:b8:c0:c1:
ac:7a:d8:60:24:ac:71:80:5a:ef:58:f3:fa:84:df:
ca:ee:71:67:71:9f:57:f6:ee:de:77:4c:34:11:64:
38:ae:ed:0f:3e:72:d9:43:05:59:33:00:69:75:2e:
2e:5a:3e:53:9b:72:fc:23:78:81:42:88:ce:22:db:
ca:4a:fc:df:c6:bc:dd:f1:0b:76:cc:73:8d:2b:00:
5c:ef:e2:61:a5:52:1d:dd:71:c5:82:04:d0:be:d5:
a6:a9:d0:bd:d7:23:7e:a3:dd:97:0e:41:14:3e:f1:
5d:0f:ba:37:47:de:0c:25:34:8c:be:90:9a:ee:ca:
56:ed:ed:e3:62:72:0b:c5:7f:f0:9e:1f:5a:a7:58:
55:bb:16:40:12:1d:66:c2:60:b0:9b:5d:47:3b:64:
fa:52:2b:7d:47:e0:d0:67:a2:6a:66:41:aa:5f:7b:
d0:66:5e:52:51:f3:2e:5a:a3:a4:94:68:51:ef:32:
4b:56:a4:d2:8b:f9:d5:42:b4:e7:d4:2f:41:74:29:
e8:9a:82:c2:3d:73:97:00:4b:2f:e7:3d:84:db:45:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:17:CA:8D:4C:64:02:BB:17:56:22:6D:1A:CD:07:5D:D2:69:A3
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/27C54F6E378D11EEA196F6184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.159.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c1:df:3c:f9:96:ab:9d:b2:c6:57:0a:ae:89:a8:16:1f:75:
b2:84:51:58:f7:1c:cc:02:2d:ed:ca:c3:c6:56:c6:d3:76:fe:
25:d9:bd:fd:f6:d2:30:1a:93:7f:c7:ad:a5:e0:a4:6b:35:0b:
0f:7a:27:e1:91:2c:a3:10:a3:ef:b7:9e:ce:10:1f:08:35:44:
76:e8:a1:91:b2:ac:6a:7e:90:1e:dd:65:92:51:c0:47:95:ef:
a5:81:15:98:ee:ba:cf:19:41:f1:8d:38:63:bf:42:06:c7:24:
5e:54:05:47:0b:0d:0e:7e:6e:6b:a9:39:1f:3d:99:ad:0b:b0:
f5:ac:8d:e1:1e:93:3a:5b:90:60:8f:84:30:64:73:0c:59:d9:
08:61:8a:e1:13:6f:e0:2e:16:5d:ee:e1:e2:39:78:a4:49:54:
c7:8c:85:d1:8b:03:7f:6d:d4:e0:44:99:67:b5:ef:8b:b8:7e:
09:ae:4e:96:62:5e:b3:ca:77:30:9f:55:dd:fd:a2:49:68:9b:
b5:25:bc:b2:65:72:42:af:94:a5:8f:b6:60:07:c1:e6:97:0f:
f2:b2:33:ff:26:bf:d9:83:3f:8e:0f:6f:68:31:39:df:bf:0e:
13:a9:ff:b4:2e:88:f3:03:21:aa:8f:bd:1d:e0:5b:97:97:10:
3a:f0:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org