Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/FBCCBA4C1D1D11EFACCE230F7DDC24C2.roa
File: FBCCBA4C1D1D11EFACCE230F7DDC24C2.roa (raw, json)
Hash identifier: C081Sz2lUK+U5MTCOifSBfETxqx/cFO3EJWw+ZlAnik=
Subject key identifier: 93:1F:35:0D:44:30:71:3E:A2:3A:F8:D3:CA:F3:F9:AC:DE:21:0B:F9
Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial: 09
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/FBCCBA4C1D1D11EFACCE230F7DDC24C2.roa
Signing time: Tue 28 May 2024 18:13:29 +0000
ROA not before: Tue 28 May 2024 18:13:25 +0000
ROA not after: Tue 01 Jun 2027 18:13:25 +0000
asID: 37008
IP address blocks: 102.222.56.0/24 maxlen: 24
102.222.57.0/24 maxlen: 24
102.222.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 18:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Validity
Not Before: May 28 18:13:25 2024 GMT
Not After : Jun 1 18:13:25 2027 GMT
Subject: CN=66561ec9-ca16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:9a:be:2e:a5:44:8a:ea:39:ec:92:01:bf:
59:b7:71:0f:bc:cd:b5:05:ad:f2:d3:bf:cc:93:45:
0b:0d:47:48:1d:50:84:8f:69:a3:c4:dc:30:d1:c7:
b6:d6:ef:9f:9e:f9:5f:cb:1b:e4:df:39:6e:c5:2a:
45:2e:f2:b8:70:b5:e4:67:c1:fe:cd:8b:62:10:9e:
69:4f:c5:91:58:5b:12:13:42:17:49:c7:a2:b8:b2:
77:a9:ae:6a:cf:c7:c1:1c:12:c8:7c:f2:f0:a8:71:
f9:05:e1:ad:5f:93:03:9e:72:b8:ec:0f:82:45:ae:
04:bf:16:ca:f7:11:a2:64:8d:c5:2e:83:8f:b3:9e:
47:bb:8f:5f:cf:fc:30:0b:9f:15:e2:15:53:22:89:
36:02:d0:80:80:14:d6:28:57:4f:de:5d:95:bc:78:
5e:e5:70:7a:54:17:e8:ef:84:eb:97:1f:27:98:43:
bb:d4:23:58:ce:56:ed:af:18:d2:40:36:07:58:d3:
28:3c:fc:59:1a:75:57:66:2c:b5:5f:49:8c:8a:1d:
60:18:16:20:85:f6:7a:41:88:d7:0a:3e:0d:dc:f5:
26:5f:9a:5e:66:ab:f7:f2:8f:31:1f:33:d8:86:e1:
50:e3:96:3a:51:be:53:18:5a:2b:f2:c0:5f:c5:dc:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1F:35:0D:44:30:71:3E:A2:3A:F8:D3:CA:F3:F9:AC:DE:21:0B:F9
X509v3 Authority Key Identifier:
keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/FBCCBA4C1D1D11EFACCE230F7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.56.0-102.222.58.255
Signature Algorithm: sha256WithRSAEncryption
63:a9:45:b1:2f:c0:3e:70:c5:2c:eb:4c:29:94:57:79:31:b2:
c6:a7:33:ce:30:74:f2:a5:e8:30:f1:90:de:45:9d:9a:8b:51:
1d:1a:5f:a3:53:5b:32:f1:36:86:1b:c2:47:bf:91:85:86:8d:
64:e8:cd:29:ca:fc:30:d3:6e:62:a7:6b:4f:f8:ee:7f:75:ac:
c1:ae:3c:84:b1:4d:45:e7:61:be:ad:54:9b:47:01:e6:c3:93:
0b:b3:4d:1a:05:81:32:92:71:cd:f0:c4:22:ac:ec:6f:72:57:
1f:90:11:6a:74:4f:28:f2:4a:54:da:d8:a3:2c:fb:bd:ef:ea:
f5:db:23:ba:e8:8e:58:d0:b4:0c:9c:76:c5:46:10:40:5c:70:
a2:f2:8e:b5:e9:32:69:25:1e:8a:fe:03:dd:57:13:79:ea:1f:
b7:73:e6:7b:f2:b9:ab:e0:0f:0c:4c:9a:1b:3c:8a:e3:69:3f:
26:a6:0a:0b:2c:20:50:ac:cb:23:15:82:a9:6d:f9:8d:9d:59:
8e:ad:d7:2e:3a:9d:e5:28:17:4b:d8:ab:58:e2:bc:70:27:77:
13:27:03:19:a8:af:f6:5c:8b:5a:3d:fc:35:ce:ff:47:2a:ad:
81:f8:2b:66:ef:ab:0f:f5:80:14:f7:d0:a2:ce:c5:83:8e:42:
1a:d6:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:42 2024 by rpki-client on console-ams.rpki-client.org