Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CBE1FF6CBE011EF92608A89762E951A.roa
File: 4CBE1FF6CBE011EF92608A89762E951A.roa (raw, json)
Hash identifier: vo76UlcqhYE9vY7YKvRzmX1ml0B6vUoK6ZdT1sf8VD4=
Subject key identifier: 7E:30:5A:54:E8:4C:2F:BD:59:90:D1:A7:DE:9C:6C:93:4D:A6:86:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F802
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CBE1FF6CBE011EF92608A89762E951A.roa
Signing time: Mon 06 Jan 2025 03:42:49 +0000
ROA not before: Mon 06 Jan 2025 03:42:45 +0000
ROA not after: Thu 06 Feb 2025 03:42:45 +0000
asID: 46573
IP address blocks: 156.236.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 10:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63490 (0xf802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 03:42:45 2025 GMT
Not After : Feb 6 03:42:45 2025 GMT
Subject: CN=677b5139-97c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:97:e9:7c:22:ed:c6:5c:e0:35:a2:d4:59:ed:
39:7f:22:7e:e3:a4:5d:bd:2b:00:d5:39:58:31:c1:
57:f2:98:17:20:76:85:10:ca:75:cf:eb:68:bf:bf:
55:89:39:79:1c:7b:28:8d:a1:8f:8d:7d:fa:a3:b1:
cd:91:71:92:4b:d0:8d:a0:9f:92:52:6d:67:9d:c5:
26:44:97:0c:34:1c:ad:ba:c3:50:6e:16:b1:fd:e2:
1c:68:e2:d7:33:02:0c:a7:8c:4a:5e:65:87:45:15:
f7:97:b6:2a:fc:fb:c7:35:c4:c4:62:e8:7f:27:53:
b1:40:6a:62:d5:40:01:84:ec:f2:e6:58:0b:71:47:
1c:f4:cd:83:82:f9:15:f5:ae:2b:8a:2a:a7:07:ad:
bf:24:7c:28:ed:a2:04:3a:c8:8b:a9:5f:7c:28:77:
fa:50:20:f4:2c:dc:8b:d4:74:f0:fb:73:66:3c:49:
8d:e4:c1:a7:ab:3c:57:cf:0f:d9:2b:56:a9:40:f0:
92:f9:85:3c:dc:2a:89:91:52:b7:a5:a7:ac:14:2a:
4c:4e:a8:78:d1:6a:1a:d2:d0:c7:be:3e:5d:42:80:
ab:41:f1:14:f7:94:a0:28:ae:4d:ee:12:c5:a2:46:
56:d7:b6:11:23:37:9b:4b:25:69:1f:90:01:88:b8:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:30:5A:54:E8:4C:2F:BD:59:90:D1:A7:DE:9C:6C:93:4D:A6:86:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CBE1FF6CBE011EF92608A89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:bb:2b:00:d8:a2:1e:0a:e1:a4:bf:74:59:34:69:79:2d:18:
3f:58:95:14:5b:62:51:1c:27:1b:01:cc:27:0d:12:37:dd:5f:
27:ea:4a:a5:65:41:61:67:73:e8:e8:49:81:88:4e:d3:9c:ae:
a5:88:df:1e:5a:ad:73:03:b2:75:15:81:f5:2f:aa:0f:e8:24:
4e:94:18:8d:26:d7:66:6c:74:44:88:14:32:62:d7:73:ec:5b:
53:e4:a0:dc:97:10:97:2f:4e:cd:20:73:8a:77:b9:f0:7f:db:
80:9d:83:b3:3d:66:30:a1:99:d6:45:11:1d:61:10:82:3d:3f:
fe:b1:80:83:f5:8d:b5:cc:08:0a:f4:c2:ca:6f:67:35:9c:2d:
a2:70:53:ec:c0:76:af:a3:0c:18:65:81:68:99:7e:ce:e5:8c:
d2:1d:f5:2c:41:f1:5f:02:e9:e4:07:67:20:15:95:07:6f:98:
a1:1b:69:30:9a:a0:76:b5:e5:fc:8a:56:4c:1d:b2:44:08:06:
3a:49:01:54:8e:5f:4d:6f:2d:73:22:a2:1e:f9:87:38:35:db:
fc:e0:60:ec:f5:a5:a0:fb:8f:b4:5a:0a:ce:5b:bf:58:ca:e9:
33:cd:02:e6:03:16:ff:77:9a:94:ad:b1:75:70:b6:2f:0c:6f:
9d:5a:ae:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:54 2025 by rpki-client