Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/CEE37E2E98F911EE92D01169D25BE465.roa
File: CEE37E2E98F911EE92D01169D25BE465.roa (raw, json)
Hash identifier: vk1NjKrPYjcJTg9PgzDMWJtyGbH1tgtZ8UZln9t/e5M=
Subject key identifier: FB:F6:59:1D:57:E5:64:AE:93:21:4F:AC:A2:89:F2:1A:F1:7B:4B:8F
Certificate issuer: /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial: 02
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/CEE37E2E98F911EE92D01169D25BE465.roa
Signing time: Tue 12 Dec 2023 14:21:58 +0000
ROA not before: Tue 12 Dec 2023 14:21:54 +0000
ROA not after: Sat 31 Dec 2033 14:21:54 +0000
asID: 329370
IP address blocks: 102.210.169.0/24 maxlen: 24
2c0f:6540::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 12 Dec 2023 15:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3692D98AF
Validity
Not Before: Dec 12 14:21:54 2023 GMT
Not After : Dec 31 14:21:54 2033 GMT
Subject: CN=65786c86-a097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:f1:d9:61:30:0b:32:c1:b8:45:cc:2a:ee:
e4:f2:5f:56:28:36:7d:4d:0c:93:50:03:d6:ce:9b:
31:6a:41:72:69:f2:7d:04:eb:bc:a5:d5:9a:33:b8:
1e:61:8b:17:d2:92:c5:c1:41:e1:3d:a8:a8:56:c2:
09:1f:f8:3f:8f:1e:43:5e:29:5c:68:7c:e0:87:bf:
35:af:fd:eb:7e:37:fa:a1:39:25:89:6a:64:ea:8a:
bf:7f:3e:c1:f1:4a:b6:13:a7:c8:d8:bb:e8:6d:6f:
2e:3a:b9:f0:51:70:50:90:f4:ab:57:20:87:fa:24:
28:6a:54:14:0f:dd:32:c7:18:88:fa:af:7d:4a:c6:
cb:6e:b8:8f:07:f9:30:0c:90:b9:df:e4:e2:15:3e:
a8:3e:bd:93:b0:3e:8f:d2:0f:a8:15:37:1c:9b:a8:
45:70:00:8b:d0:d9:05:d0:0a:84:78:21:38:a9:f1:
c5:ee:c3:70:26:95:2d:18:78:34:45:29:8b:da:e3:
65:72:db:00:ea:36:b3:27:03:5a:ef:a5:c6:ae:ff:
8e:91:36:79:e9:e2:bb:09:38:86:5d:12:c3:56:ed:
99:10:91:cc:e6:ae:7b:d2:17:e5:25:2b:58:38:8f:
37:73:03:fd:7b:fb:71:3f:1d:a1:87:3c:f8:e3:b7:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F6:59:1D:57:E5:64:AE:93:21:4F:AC:A2:89:F2:1A:F1:7B:4B:8F
X509v3 Authority Key Identifier:
keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/CEE37E2E98F911EE92D01169D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.169.0/24
IPv6:
2c0f:6540::/32
Signature Algorithm: sha256WithRSAEncryption
32:5e:06:3e:74:a6:c2:9e:bb:9c:db:50:a4:a5:75:76:e5:25:
79:3f:7a:93:e1:b4:0e:97:21:26:fb:82:7c:0d:24:82:3a:fa:
f3:ef:c8:db:97:da:c3:73:e9:20:0e:b1:c8:35:93:d3:5d:90:
52:f4:fb:10:e0:c3:2b:6c:10:2a:9a:19:f3:d6:86:b9:80:1a:
91:7b:c7:3b:97:4c:25:3d:b7:26:a6:a7:2d:38:b8:6d:f5:86:
4a:14:81:41:5c:8c:33:83:7e:13:b9:12:7d:9c:85:c3:36:59:
0f:8e:75:28:50:e3:8a:ea:12:f0:e2:02:58:72:a1:3c:88:84:
ce:10:f1:2c:d0:cc:d5:1d:cb:20:a6:5b:70:ef:59:c3:8b:b8:
79:63:82:37:1a:1d:d6:94:ea:fe:39:ce:be:cf:2d:99:1f:bb:
36:82:69:46:1b:b5:2d:d9:91:75:2a:52:90:ec:24:3d:15:8d:
f9:d0:0e:69:09:98:67:42:da:91:bb:21:6b:18:3b:c9:18:66:
bf:9e:66:67:de:77:e3:62:c8:07:c3:dc:2f:9c:0e:74:6b:e9:
64:0b:39:a3:df:2c:15:f5:90:17:46:c7:5e:0b:18:a8:b4:f4:
7b:9e:5f:6c:b2:a9:7e:51:52:ba:18:4c:5f:1e:43:fa:86:1e:
f0:77:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:51:49 2025 by rpki-client