Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/DA930020EA3611EFB256326E762E951A.roa
File: DA930020EA3611EFB256326E762E951A.roa (raw, json)
Hash identifier: k+avecvxwgzoVGtLTx63Lue0QuaqdJX1JEG1y4fpW7Q=
Subject key identifier: C0:6D:EB:78:FB:56:2C:49:BD:E4:46:63:AB:75:F8:88:C2:BA:20:CA
Certificate issuer: /CN=F36952BDAF/serialNumber=F3E24E5A9B76FE4D25D3175C3A5F7C29C6FB0488
Certificate serial: 02D3
Authority key identifier: F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/DA930020EA3611EFB256326E762E951A.roa
Signing time: Thu 13 Feb 2025 18:17:59 +0000
ROA not before: Thu 13 Feb 2025 18:17:55 +0000
ROA not after: Wed 28 Feb 2035 18:17:55 +0000
asID: 329211
IP address blocks: 102.212.236.0/22 maxlen: 22
102.212.236.0/23 maxlen: 23
102.212.236.0/24 maxlen: 24
102.212.237.0/24 maxlen: 24
102.212.238.0/23 maxlen: 23
102.212.238.0/24 maxlen: 24
102.212.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 21:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36952BDAF
Validity
Not Before: Feb 13 18:17:55 2025 GMT
Not After : Feb 28 18:17:55 2035 GMT
Subject: CN=67ae3757-1560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:d4:8f:cb:67:7d:8d:85:7a:84:43:61:82:
8b:9f:aa:32:b2:87:b3:ec:f6:25:e2:ff:3e:a9:e5:
d8:c0:50:9c:a1:16:88:9f:01:e3:bc:a0:40:67:52:
59:a3:ac:ef:07:4c:7b:cf:51:9d:b7:af:74:ff:c2:
3e:de:20:c3:f0:a4:99:8f:d5:0a:13:33:26:d2:57:
d2:3a:ff:cf:f1:29:d8:c0:94:5c:57:0b:8f:42:80:
5f:5e:74:27:6d:77:a4:dd:72:00:b4:19:46:3f:27:
03:4b:b9:0c:02:c7:57:df:3a:45:53:ff:55:29:e9:
c8:22:21:0c:b8:85:11:fd:56:e9:2e:cf:fb:6c:db:
6b:92:33:ee:ff:eb:cf:58:e4:8d:ce:ac:b4:e7:9d:
e5:5e:05:36:14:34:9e:d5:be:df:35:c1:69:21:f6:
d9:6c:8c:6c:98:a9:87:69:13:62:87:ba:c6:62:b0:
82:8b:44:6f:4e:14:64:41:fa:44:3c:6f:6c:f4:3f:
88:58:d7:0b:cc:9d:8b:10:cd:57:54:32:62:96:54:
61:94:ac:b9:7a:98:4e:9c:5c:39:3c:e5:ba:01:41:
1e:ae:62:bf:df:8a:b6:a1:67:66:3b:87:02:f1:ac:
53:9d:f6:9b:91:d0:b0:a8:3d:3d:f8:9e:5c:cd:01:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6D:EB:78:FB:56:2C:49:BD:E4:46:63:AB:75:F8:88:C2:BA:20:CA
X509v3 Authority Key Identifier:
keyid:F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/DA930020EA3611EFB256326E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.236.0/22
Signature Algorithm: sha256WithRSAEncryption
73:55:d8:c0:bd:93:43:de:38:5d:6b:8e:8b:b1:1a:b4:67:cf:
19:e3:c6:fd:3d:98:cf:4c:86:73:6f:38:9a:8e:c8:7c:d7:d9:
99:18:e3:db:54:b0:f9:b5:f0:e5:2c:e6:39:67:06:05:3c:ca:
27:b9:5c:7b:e9:63:e4:a5:97:1f:c5:87:67:fe:d4:3f:11:db:
93:26:af:a0:02:3c:e2:db:79:73:07:9e:45:ca:48:a5:da:7f:
f0:19:36:bd:b3:79:da:49:d5:8a:d2:ae:88:6b:04:46:75:9a:
7e:1d:ed:9f:33:ff:e3:52:bf:d6:2c:60:d6:b9:49:18:f0:03:
d1:1d:3c:80:94:e2:de:e2:d3:f9:2f:63:bd:09:8b:dc:ef:6f:
06:34:f3:7c:56:b9:5c:c6:1c:a1:ee:77:41:90:32:0f:62:ec:
64:a6:5f:cb:f0:8e:0b:e4:68:d2:33:eb:5c:7a:95:12:93:c7:
c8:2a:41:2e:84:58:82:cf:e5:ac:f9:6a:5b:85:39:bc:39:32:
0c:52:99:b2:cd:9a:59:71:be:09:25:8f:c3:d2:ee:be:24:30:
e0:9a:a0:32:a9:2c:c8:7d:b2:7e:1e:1c:07:4d:48:ad:51:9f:
39:e9:a6:c6:38:69:3d:c0:aa:c4:07:93:be:fc:dd:96:a0:db:
9c:82:b9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:55:08 2025 by rpki-client