Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/6EEF9550D53111EFBE8C9B6A762E951A.roa
File: 6EEF9550D53111EFBE8C9B6A762E951A.roa (raw, json)
Hash identifier: +Y/k2VM3Qf9FGCjFleJj/6XIBttzpbRmkpfzD44+fBU=
Subject key identifier: 0D:27:C2:C8:6A:DB:78:F6:FD:AC:C5:D5:18:B8:01:69:04:15:93:D6
Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial: 0104
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/6EEF9550D53111EFBE8C9B6A762E951A.roa
Signing time: Sat 18 Jan 2025 00:16:16 +0000
ROA not before: Sat 18 Jan 2025 00:00:13 +0000
ROA not after: Mon 01 Jan 2035 00:00:13 +0000
asID: 37721
IP address blocks: 102.222.56.0/24 maxlen: 24
102.222.57.0/24 maxlen: 24
102.222.58.0/24 maxlen: 24
102.222.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 09:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36877BBAF
Validity
Not Before: Jan 18 00:00:13 2025 GMT
Not After : Jan 1 00:00:13 2035 GMT
Subject: CN=678af2d0-f98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:66:22:e8:65:37:b0:e8:ad:cd:6a:d0:4d:
1e:58:ed:84:9e:61:64:44:fd:e9:55:cd:78:67:51:
6b:98:f7:94:9d:43:24:f6:44:46:2b:53:45:2f:e0:
5a:cb:d9:ca:9b:27:7a:aa:e8:a7:2d:48:a8:ec:e7:
6b:79:ae:18:cb:84:44:a3:3e:ff:1b:aa:d6:22:69:
ec:f2:7a:00:40:44:10:35:f4:94:fd:22:04:73:29:
80:72:1d:79:49:28:70:69:1c:73:27:e4:fc:69:e5:
fa:a3:ea:f4:c3:19:47:cd:b8:c1:63:e8:ab:c7:d7:
bd:5f:f6:26:98:e9:bc:9e:6b:9b:ad:fa:cc:3b:a0:
86:26:d4:f2:a8:8d:a1:f1:71:f8:dc:f4:32:5d:9e:
42:ad:4c:c9:ff:4d:c1:30:1b:64:06:5c:24:2f:a8:
81:7f:f9:2e:5c:73:70:d0:32:cd:0f:a7:7d:c2:6d:
3f:a4:43:e1:76:42:2e:09:63:bb:f7:bc:f5:38:66:
8f:1b:ab:fd:3d:bf:0a:60:09:ea:8f:08:e8:35:91:
d1:65:94:54:35:d1:65:54:f2:85:19:d9:83:4b:99:
90:62:e0:9b:d9:24:2f:00:a8:10:17:f2:47:7d:01:
11:b5:6a:43:3b:ec:0b:51:45:39:8a:6b:73:a2:c7:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:27:C2:C8:6A:DB:78:F6:FD:AC:C5:D5:18:B8:01:69:04:15:93:D6
X509v3 Authority Key Identifier:
keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/6EEF9550D53111EFBE8C9B6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:f1:16:ae:eb:81:17:32:ea:42:87:c8:38:c8:f7:a8:4f:b4:
a9:77:bf:e7:de:ea:38:b8:c3:62:4b:4f:fc:ce:0e:5c:f0:eb:
c9:be:3a:86:ac:3f:b5:78:57:b1:f2:34:8f:9b:eb:a7:c5:50:
a1:27:32:43:12:02:9e:2c:55:f6:7f:80:9f:59:45:c3:71:12:
bc:4f:8e:b9:7b:6e:d8:60:af:c8:84:dd:cb:ab:a9:f9:95:d7:
e3:3f:9b:14:1f:89:8b:28:34:cd:41:cf:46:52:7a:74:71:45:
ba:95:bb:94:55:d8:90:1a:f9:1d:83:a2:57:8f:16:0e:e7:a5:
20:de:52:bf:ce:61:2c:39:de:7d:ce:c1:74:9b:08:24:ab:c4:
60:d9:01:3c:50:38:45:47:7b:8b:b6:5a:ba:3b:7a:33:26:74:
bf:3d:43:df:d1:7d:7b:a2:c4:0f:14:49:24:07:57:7e:2f:e1:
a0:ae:64:33:5a:9d:bc:ee:d6:8c:3c:da:60:52:da:e1:fd:0f:
ee:ed:2c:99:23:ce:6e:00:0f:27:0e:9a:4e:23:54:f4:c3:ca:
70:b0:8f:da:7d:8b:d2:83:5c:a5:bb:2b:3a:20:d0:71:8d:f2:
34:f1:97:45:ff:ad:67:b0:84:58:54:34:7a:0e:18:09:b7:dc:
74:82:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:10 2025 by rpki-client