Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/F77C84B82E2511EF8CBE5B91762E951A.roa
File: F77C84B82E2511EF8CBE5B91762E951A.roa (raw, json)
Hash identifier: YeFWS/fxCSauUQ5aQWiqgfU4QkiG/Vdg9KK04gIlLd4=
Subject key identifier: 19:C1:B5:99:BF:82:2E:64:B5:0B:6A:F8:17:83:24:56:38:EC:6B:86
Certificate issuer: /CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
Certificate serial: 037E
Authority key identifier: F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/F77C84B82E2511EF8CBE5B91762E951A.roa
Signing time: Wed 19 Jun 2024 10:23:27 +0000
ROA not before: Wed 19 Jun 2024 10:23:24 +0000
ROA not after: Fri 31 Dec 2049 10:23:24 +0000
asID: 328964
IP address blocks: 102.217.253.0/24 maxlen: 24
2c0f:4880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 26 Jun 2024 11:24:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
Validity
Not Before: Jun 19 10:23:24 2024 GMT
Not After : Dec 31 10:23:24 2049 GMT
Subject: CN=6672b19f-af13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:fc:82:b4:1a:a1:4b:34:50:29:37:95:c4:
66:71:8d:43:d9:d8:41:02:27:7a:e8:34:92:d2:2f:
01:01:59:65:f0:70:a3:61:dd:c6:ea:66:5f:18:0d:
4e:cf:58:e5:e6:e5:45:ab:ad:9b:b8:1e:f0:00:2b:
81:0a:8f:53:59:cf:f9:21:65:9d:6f:b0:d8:86:f5:
57:63:d4:9d:cf:68:8e:03:3d:3b:4b:69:29:2f:d6:
e6:c8:41:a4:25:66:14:26:86:89:7c:59:ed:b7:a6:
ee:bb:72:01:b2:6d:08:5c:07:a5:f6:b2:1e:df:9b:
0d:9c:d5:e3:ec:ef:6d:b3:17:4d:b8:ac:e9:a5:b4:
76:f8:40:ed:fc:91:89:00:13:ce:1f:bf:49:54:87:
e7:f7:4c:dd:d5:77:56:b5:00:87:da:3e:60:5f:bd:
5f:6b:ec:04:00:0d:4f:c0:78:88:a9:56:db:ad:44:
28:d8:f5:86:c5:a5:26:16:70:fa:3b:9d:a9:37:01:
3c:1e:58:24:11:7a:75:6a:10:30:07:02:a9:69:46:
f1:d0:28:07:c2:01:a3:36:73:17:bd:b7:cc:62:45:
11:d9:22:c9:15:4b:6d:b0:58:71:d3:50:d3:72:47:
12:22:a4:89:3e:b1:c8:4e:f4:07:fb:be:75:e7:c5:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C1:B5:99:BF:82:2E:64:B5:0B:6A:F8:17:83:24:56:38:EC:6B:86
X509v3 Authority Key Identifier:
keyid:F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/F77C84B82E2511EF8CBE5B91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.253.0/24
IPv6:
2c0f:4880::/32
Signature Algorithm: sha256WithRSAEncryption
22:84:dc:b5:c0:93:18:c2:9a:03:c0:d3:2d:bf:07:9a:9c:2a:
87:60:39:ae:77:2d:76:00:b4:40:ff:4f:e2:ce:62:69:ed:1e:
91:20:84:5b:fe:16:ad:0e:e4:cf:55:35:84:17:83:2a:53:04:
66:f2:d6:27:92:e9:6b:e8:7e:65:b9:df:7c:f7:9e:ea:dc:01:
76:d2:34:61:99:92:46:23:77:db:8e:7d:50:b6:31:a7:91:d5:
45:2e:f7:ae:0e:a4:77:b2:b3:ae:27:48:b0:25:d9:be:15:05:
c4:58:a4:4e:d3:69:30:0d:3b:79:a8:3e:d3:c5:dd:a5:a7:d3:
b0:d7:6d:36:14:07:3c:bf:8a:52:ea:87:0c:94:3b:64:c1:73:
34:23:0c:71:27:e1:ce:33:f5:fe:62:79:b9:99:c1:b7:e5:df:
4c:2f:9e:59:85:13:ec:be:14:db:39:56:29:8e:db:aa:09:08:
20:da:d4:b4:f4:ad:03:6b:4f:33:fd:84:80:1b:8c:0f:cd:63:
5d:b7:8c:3a:e1:bd:99:f1:01:fb:32:d8:39:53:e1:85:ac:96:
de:ca:c7:85:85:6e:e1:0a:0e:20:25:cd:f5:c6:26:30:bf:15:
ce:d0:0d:60:cd:02:7b:2d:1e:de:d0:fb:a4:1d:2d:2b:f4:15:
90:e4:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 15:26:57 2024 by rpki-client on console-fra.rpki-client.org