
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/4A972E34019711EFAF460355017001B1.roa
File: 4A972E34019711EFAF460355017001B1.roa (raw, json)
Hash identifier: txsvfJNL9LS5JEJupkUphMNVzGnP7Vpn24qNQta17e0=
Subject key identifier: BC:61:B9:04:43:45:4B:43:5C:17:DD:23:31:0B:27:FB:89:9D:E8:65
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 04
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/4A972E34019711EFAF460355017001B1.roa
Signing time: Tue 23 Apr 2024 17:31:17 +0000
ROA not before: Tue 23 Apr 2024 17:31:14 +0000
ROA not after: Sun 23 Apr 2028 17:31:14 +0000
asID: 328586
IP address blocks: 102.22.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 23 Apr 2024 18:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF
Validity
Not Before: Apr 23 17:31:14 2024 GMT
Not After : Apr 23 17:31:14 2028 GMT
Subject: CN=6627f065-8835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:67:52:11:7d:e2:ca:44:2b:d1:ec:08:c8:
61:33:d0:88:d9:95:22:da:23:d4:10:f2:9f:fd:70:
cb:ff:ce:00:aa:fc:3c:0e:bc:22:3e:2d:49:e6:95:
5f:6d:ae:8b:28:cf:bf:3f:fe:e0:09:73:e2:36:07:
6d:6e:9c:22:91:09:4b:5c:24:37:cd:e4:a0:40:1f:
7f:f2:83:53:d9:ff:3d:cd:84:2c:e5:5b:3f:1d:cc:
66:ab:74:ad:7c:c1:ad:9c:ca:59:f1:b6:f9:f0:db:
22:60:34:69:6e:26:50:95:86:43:62:47:9c:4d:db:
77:80:a4:88:5e:06:7a:d8:41:87:a5:96:13:1a:87:
f8:37:2c:81:ee:35:17:66:9b:72:68:8f:50:4e:ea:
27:c1:fa:83:e6:70:ee:92:50:c7:14:d1:86:e4:81:
b8:bb:12:38:e4:b9:b6:6b:53:2a:d3:01:e4:44:ee:
96:20:ed:8b:97:99:f7:72:43:7b:dd:c1:e6:e2:bf:
6c:a1:ca:ef:e2:a7:81:9a:71:77:30:ce:b2:cc:7a:
a0:c1:ad:bd:92:b9:7f:93:ce:44:bb:7f:6e:19:30:
32:90:7a:a8:db:8e:48:4a:cf:1e:f9:ad:89:b3:a3:
51:e7:ac:ab:58:c0:8e:e0:b2:98:ca:47:f7:43:9e:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:61:B9:04:43:45:4B:43:5C:17:DD:23:31:0B:27:FB:89:9D:E8:65
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/4A972E34019711EFAF460355017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.232.0/22
Signature Algorithm: sha256WithRSAEncryption
77:36:24:1c:48:94:ce:fa:07:45:1d:69:13:34:2d:18:6a:c0:
a7:b8:bb:45:1a:12:33:e4:81:47:c3:11:70:22:dd:aa:9c:5e:
f1:2c:95:3f:da:67:e7:08:ec:64:9e:7a:73:41:3c:a4:9c:53:
37:61:93:50:b6:41:d1:1b:63:5a:a1:5e:05:fb:8b:23:81:7c:
62:d5:46:5e:12:eb:0f:c4:ad:fb:79:a5:9b:37:1b:12:d5:1d:
35:31:3a:75:5e:d7:17:8b:34:e6:d9:2a:8f:6c:08:3c:9d:42:
6f:49:28:05:c3:82:28:87:ed:6d:b9:ed:11:28:73:23:0a:4d:
73:88:e1:a8:d3:79:6b:8b:c4:a8:d4:24:94:f4:e7:99:85:aa:
e7:c4:f4:8f:e3:1b:72:ec:ae:53:dc:20:1e:e8:ab:08:62:7f:
c7:23:64:e7:11:89:67:9d:e1:9d:82:8a:fd:81:3e:7c:13:a5:
61:c8:65:11:93:b7:d0:05:8e:b9:68:25:64:de:94:41:7a:f7:
1f:28:b7:a4:f7:54:3d:7b:c8:b6:72:bb:96:20:d1:f6:f9:9b:
9e:2b:a6:42:42:6e:e4:5e:0e:de:8c:62:85:a3:02:dc:b8:67:
b7:ba:2d:3e:48:2e:6f:32:8f:13:5f:41:85:34:b7:9a:5a:66:
ff:de:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:06 2025 by rpki-client