Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/749DC8C8D58111EFA3536787762E951A.roa
File: 749DC8C8D58111EFA3536787762E951A.roa (raw, json)
Hash identifier: QeqVOCNRRdEk0CSlnw5nL+pHuIo6x4zvb8bDRP9/Bog=
Subject key identifier: 1D:F6:A2:E6:20:FE:E1:CE:DB:DB:3B:E0:23:88:44:D5:48:19:40:1F
Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial: 0110
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/749DC8C8D58111EFA3536787762E951A.roa
Signing time: Sat 18 Jan 2025 09:49:06 +0000
ROA not before: Sat 18 Jan 2025 09:49:02 +0000
ROA not after: Thu 18 Jan 2035 09:49:02 +0000
asID: 328721
IP address blocks: 102.222.56.0/24 maxlen: 32
102.222.57.0/24 maxlen: 32
102.222.58.0/24 maxlen: 32
2c0f:7840::/32 maxlen: 128
Validation: Failed, certificate revoked on Sat 18 Jan 2025 14:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36877BBAF
Validity
Not Before: Jan 18 09:49:02 2025 GMT
Not After : Jan 18 09:49:02 2035 GMT
Subject: CN=678b7911-944d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:4a:1a:42:bc:5b:d8:6e:a0:0a:c6:23:6b:
ea:84:c8:7a:57:76:e1:a4:f6:80:12:31:16:19:b7:
2e:d3:e2:f7:5f:bd:7e:89:d2:f6:22:4d:ea:6d:09:
9e:ab:ed:37:f8:d2:f2:d6:08:4b:9c:25:a8:bf:8e:
7f:ef:71:76:68:db:05:4b:a4:db:dc:16:79:6c:60:
50:7a:fd:b9:01:2e:ab:40:92:31:52:f1:27:38:2b:
d3:24:68:db:52:50:3b:2a:70:2f:82:1d:5e:92:3d:
97:1c:4e:31:3e:06:f1:27:ad:37:6c:c9:c5:85:02:
b4:75:f4:2b:89:cc:b4:14:e2:87:1a:85:28:7c:1a:
a3:5e:e5:c8:13:b8:70:b6:0c:f5:98:bc:c7:8d:e0:
e7:33:a5:30:f6:97:4c:41:fb:2a:36:03:d1:df:05:
21:e8:82:63:9f:18:68:ee:93:85:6c:1d:ce:86:5f:
af:a9:a0:f2:69:71:af:80:1a:04:fe:d9:2c:16:68:
b3:4d:f0:19:c0:c3:8e:75:9a:15:2e:36:64:09:eb:
dd:f0:5c:f6:47:de:89:6e:3b:c1:65:ab:fc:10:3a:
21:8f:44:b8:70:00:f3:55:9f:2f:0a:37:fa:e0:dd:
84:7d:e6:cf:cd:b4:d6:8a:e3:7d:86:b0:1e:3d:6a:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F6:A2:E6:20:FE:E1:CE:DB:DB:3B:E0:23:88:44:D5:48:19:40:1F
X509v3 Authority Key Identifier:
keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/749DC8C8D58111EFA3536787762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.56.0-102.222.58.255
IPv6:
2c0f:7840::/32
Signature Algorithm: sha256WithRSAEncryption
1e:81:4e:44:1e:dd:ab:b9:94:fe:4d:fa:13:fc:36:d5:21:25:
37:5c:52:89:7e:ed:bc:6e:04:1e:e7:b0:42:6d:8f:69:7e:c7:
9f:0c:18:d4:86:f8:a4:b0:bc:8a:0b:06:48:b9:e0:78:99:67:
70:f6:ae:58:6a:e5:4b:89:71:9c:d0:2f:2d:ba:4c:14:82:f4:
13:3c:21:0f:e6:e3:68:5a:36:8f:40:95:e8:6b:59:7b:9c:23:
e5:e1:46:27:fb:64:a8:e1:dd:61:35:92:c1:d5:f2:64:31:71:
f6:d3:71:1a:49:72:02:a2:0c:f0:2d:c3:13:a3:a1:5a:1a:b6:
15:5f:f8:6f:10:21:ef:7d:18:cb:97:ce:a6:4c:85:5e:57:fc:
ca:c7:d9:6c:16:c1:b9:c2:26:8a:4f:cc:6a:6f:6b:85:56:4c:
d0:66:e0:cc:97:35:b3:e3:ef:7e:1b:4f:ec:23:d8:00:bf:89:
3c:87:8b:69:3d:a0:af:f3:65:54:69:68:de:07:fe:66:52:a1:
30:32:6c:8d:af:b8:ac:d5:0a:91:05:1f:df:ba:19:75:78:dd:
c9:44:51:f5:48:c9:dc:e2:54:e2:b8:95:b0:d2:41:a1:98:40:
01:24:94:96:b1:1d:f8:2b:e4:67:f2:d5:c1:91:4a:8d:44:01:
4b:32:60:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:34 2025 by rpki-client