Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DB40678E391E11EF8BFC285E762E951A.roa
File: DB40678E391E11EF8BFC285E762E951A.roa (raw, json)
Hash identifier: EwKmKtdQicB3YGGxtwFTI9lovNJzaT8J2xxs9zqurPQ=
Subject key identifier: 2A:85:4F:65:91:17:6B:86:E9:5D:70:25:21:0D:7C:54:27:39:39:74
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0559
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DB40678E391E11EF8BFC285E762E951A.roa
Signing time: Wed 03 Jul 2024 09:30:16 +0000
ROA not before: Wed 03 Jul 2024 09:30:13 +0000
ROA not after: Thu 01 Aug 2024 09:30:13 +0000
asID: 137897
IP address blocks: 102.177.186.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Jul 2024 06:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 3 09:30:13 2024 GMT
Not After : Aug 1 09:30:13 2024 GMT
Subject: CN=66851a28-0491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:76:52:d6:29:3e:b8:ad:4a:16:16:8e:4e:
1b:c4:85:8d:79:24:0e:63:24:f3:cb:43:38:a9:af:
fd:92:bd:09:11:22:32:a7:c7:6d:d0:f4:12:7f:a3:
0f:59:c5:c1:17:59:df:52:eb:14:d4:49:f5:a6:8c:
0f:b8:13:4f:94:ee:9b:84:33:64:75:dd:6d:53:5c:
17:68:28:dd:b7:45:bf:82:73:44:d5:8c:3e:40:ee:
c8:7a:8b:ca:7f:41:da:c7:6e:c2:2e:f2:be:3d:60:
dc:60:35:80:92:13:90:9b:e5:d0:db:dd:fe:75:3b:
80:5a:4b:e5:67:8b:f3:eb:d0:80:19:a6:29:28:f0:
aa:ba:77:a7:ce:34:87:31:eb:da:20:03:3d:55:a8:
5d:0b:9b:14:cc:50:cf:d4:af:fa:a7:21:de:8e:ee:
63:20:df:54:ee:2a:a6:d1:02:94:ae:55:ea:f5:64:
01:01:61:b7:74:fd:16:cf:7a:7c:9d:21:a8:8c:6f:
27:df:f8:fa:8e:23:96:49:7c:2e:5e:1a:39:de:f3:
eb:dc:62:a0:d5:3d:f5:1c:ec:65:d7:44:e1:b0:9c:
9b:35:93:7e:a1:94:3d:56:22:72:93:0d:67:57:59:
31:df:6f:d0:60:d1:ca:24:09:11:01:3d:5e:ef:2a:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:4F:65:91:17:6B:86:E9:5D:70:25:21:0D:7C:54:27:39:39:74
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DB40678E391E11EF8BFC285E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.186.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:7e:49:08:08:24:4d:52:47:46:c1:7d:1c:66:e7:86:cc:c1:
cb:57:c1:17:1e:31:d6:f2:e8:dd:2a:04:f2:a6:c7:be:a4:47:
d7:d3:c9:55:2b:03:db:a5:d2:fc:06:bf:95:ee:f1:2b:ce:6f:
ee:c2:bf:74:c0:d0:af:68:85:78:1c:77:67:4a:8c:de:0c:dd:
3c:e0:b0:14:a6:da:ec:1f:df:e6:00:29:04:32:30:89:1e:9d:
38:c0:50:55:90:31:64:74:f3:3b:96:8a:ae:cf:17:55:17:0b:
00:0b:62:63:7b:62:88:a3:e6:6b:20:54:5c:7b:82:3b:31:cb:
3b:9c:2d:df:10:d7:37:72:fc:bd:83:48:8e:e0:bd:94:60:e4:
34:65:64:a3:d3:38:f7:1c:85:1b:c8:0c:5d:7e:9d:99:e4:6d:
53:48:2f:5c:8f:51:18:0c:6a:96:5b:23:69:e3:e5:f9:d0:a6:
35:0c:de:71:3a:65:f7:a9:a6:0b:ee:04:a2:25:68:bb:50:ae:
a1:14:72:84:d1:fe:58:10:9d:11:cd:2e:02:5c:30:7e:68:1a:
21:c1:56:14:ae:78:11:07:0d:21:1a:19:3a:54:85:e8:fd:9b:
65:53:73:96:70:00:91:7b:1a:dd:84:17:b4:9f:76:f2:b1:7e:
13:a3:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 08:42:33 2024 by rpki-client on console-fra.rpki-client.org