Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/BA8721A86E3011EF89FAB643762E951A.roa
File: BA8721A86E3011EF89FAB643762E951A.roa (raw, json)
Hash identifier: 06TUfmIwORIJ2Z8K7P7ZCd+PIzvojrtUk9bGsEZ8fiE=
Subject key identifier: 85:30:36:DF:53:D7:6D:83:8B:62:15:1B:EE:8D:1E:38:C3:A9:ED:D9
Certificate issuer: /CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Certificate serial: 030A
Authority key identifier: 1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/BA8721A86E3011EF89FAB643762E951A.roa
Signing time: Sun 08 Sep 2024 22:21:44 +0000
ROA not before: Mon 09 Sep 2024 22:21:40 +0000
ROA not after: Thu 09 Sep 2027 22:21:40 +0000
asID: 328334
IP address blocks: 102.134.88.0/22 maxlen: 22
102.134.88.0/24 maxlen: 24
102.134.89.0/24 maxlen: 24
102.134.90.0/24 maxlen: 24
102.134.91.0/24 maxlen: 24
2c0f:ef30::/32 maxlen: 32
2c0f:ef30:10::/44 maxlen: 44
2c0f:ef30:20::/44 maxlen: 44
2c0f:ef30:30::/44 maxlen: 44
2c0f:ef30:40::/44 maxlen: 44
2c0f:ef30:50::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 09 Sep 2024 13:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Validity
Not Before: Sep 9 22:21:40 2024 GMT
Not After : Sep 9 22:21:40 2027 GMT
Subject: CN=66de2378-4178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:88:64:11:39:d4:db:a2:fb:9e:7a:cc:34:
1a:af:ff:56:94:ff:78:98:1d:75:81:7c:11:6d:6b:
b5:5a:64:6d:6c:da:fd:f2:f6:53:b1:78:57:99:6f:
ac:e9:2a:a5:3c:5e:e8:c3:17:80:05:e7:06:01:e7:
75:34:6f:33:16:eb:d1:80:fa:ab:41:1a:8f:04:8e:
1a:4c:3d:21:82:be:51:c8:9a:20:aa:21:05:50:bd:
8f:36:cf:58:ba:5a:16:31:d2:3d:29:71:2d:9a:05:
1e:ba:8c:e5:8b:3f:bb:99:bc:5b:66:6b:5b:9b:91:
2c:2a:27:5c:06:2a:db:8a:bb:4d:63:e7:dd:52:6e:
26:17:9f:f5:22:ac:97:59:85:d4:5a:0f:a5:4a:2a:
37:de:f4:14:24:99:16:7a:c6:55:28:3c:a6:77:c0:
a1:bf:54:8f:51:01:8e:a9:31:dc:03:14:a6:ce:6e:
a3:8b:c6:d6:be:58:19:f8:c8:3a:6a:f0:e8:97:b6:
06:79:dd:48:eb:76:21:b0:20:bd:a5:3d:89:23:9f:
f8:71:3b:4b:ef:ce:11:9d:af:d7:32:36:2b:43:ef:
23:19:95:97:ea:9c:fa:2f:d3:8e:c0:1b:01:2f:51:
1f:27:70:0e:ed:87:dc:68:27:59:cf:5f:23:45:b5:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:36:DF:53:D7:6D:83:8B:62:15:1B:EE:8D:1E:38:C3:A9:ED:D9
X509v3 Authority Key Identifier:
keyid:1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/BA8721A86E3011EF89FAB643762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.88.0/22
IPv6:
2c0f:ef30::/32
Signature Algorithm: sha256WithRSAEncryption
92:ea:ea:0f:14:c4:3e:01:a1:fe:7a:8a:f1:8e:73:39:b0:c9:
0d:5f:1b:55:26:ee:23:be:4f:5c:b2:80:37:c4:06:a0:cb:27:
0d:9c:3a:cd:c2:93:3c:0a:e8:b8:5f:9a:b0:b2:02:11:22:69:
28:96:a1:0e:aa:81:eb:de:50:6b:3f:33:55:fb:56:ad:4d:74:
43:de:dd:85:35:40:bc:b5:43:75:9b:57:48:b7:11:52:6c:66:
6f:1b:c3:2c:00:21:fc:61:b2:a6:97:5d:e5:07:e0:42:e0:92:
87:e0:7c:52:d8:0a:35:bb:6d:e3:e4:47:f0:3c:69:8f:d5:d0:
92:a5:2e:65:1b:90:76:46:f5:08:79:35:65:87:90:01:74:e2:
48:a9:17:99:ea:b5:d7:87:8f:71:30:fb:30:78:85:7a:8d:8a:
fc:32:fa:c8:33:0a:07:72:42:8c:5a:6c:94:a2:d5:a7:e6:e8:
7e:0b:a9:4b:d9:77:e3:70:12:09:f0:00:11:84:d1:83:04:6e:
36:86:a1:91:c3:d1:b9:a1:42:37:1f:8f:7b:80:71:29:33:a7:
12:52:b2:ec:e3:ee:a3:92:68:bc:1d:4a:b2:f6:e3:c2:a6:70:
dc:cf:b2:3b:e1:a6:09:98:ef:d4:34:25:83:bf:28:4b:5a:f7:
7f:32:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org