Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960BB/9458ACF6AE6411EC9ED36E905A40D577/C1CB45F4B4C711ECA31D3FCB5A40D577.roa
File: C1CB45F4B4C711ECA31D3FCB5A40D577.roa (raw, json)
Hash identifier: rU0VAHixqcr5RJaWPMwE/iUDV1f1zNFsFSobiimRCOA=
Subject key identifier: 29:88:E8:BA:0A:AE:60:7A:B3:05:B3:18:C3:24:86:90:04:88:B0:FC
Certificate issuer: /CN=F36960BBAF/serialNumber=97A78EBB6EBD8774BF8A8D5D7E8A15AD6454609D
Certificate serial: 0A
Authority key identifier: 97:A7:8E:BB:6E:BD:87:74:BF:8A:8D:5D:7E:8A:15:AD:64:54:60:9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l6eOu269h3S_io1dfooVrWRUYJ0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960BB/9458ACF6AE6411EC9ED36E905A40D577/C1CB45F4B4C711ECA31D3FCB5A40D577.roa
Signing time: Tue 05 Apr 2022 10:04:19 +0000
ROA not before: Tue 05 Apr 2022 10:04:15 +0000
ROA not after: Mon 05 Apr 2027 10:04:15 +0000
asID: 329035
IP address blocks: 102.216.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Apr 2022 22:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960BBAF/serialNumber=97A78EBB6EBD8774BF8A8D5D7E8A15AD6454609D
Validity
Not Before: Apr 5 10:04:15 2022 GMT
Not After : Apr 5 10:04:15 2027 GMT
Subject: CN=624c1422-448b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:83:e4:cf:bd:c6:f9:2f:cf:ab:77:60:75:
2d:b4:7c:f1:17:3b:f5:19:6b:2d:99:f1:a8:a1:5e:
44:0f:20:89:9b:60:0e:9a:26:85:5b:2d:3f:e4:47:
ed:3a:5b:d5:75:e7:53:5e:2b:4e:3a:be:19:98:a9:
cf:c0:03:0b:8e:b4:b4:22:43:2d:a2:76:a0:82:c7:
da:d7:5e:26:c0:c9:62:e9:6d:f2:a6:7c:4d:81:b2:
65:b3:08:fc:36:6a:97:fa:96:df:da:33:bb:68:69:
6d:1b:73:16:f0:35:45:e4:aa:07:44:bd:38:dd:08:
d7:83:0e:05:ed:5f:2a:59:eb:82:8e:3f:e9:49:90:
58:16:36:0a:b9:b0:f8:c9:16:dc:f2:f5:e4:d9:08:
be:0c:e0:9f:67:e4:86:04:65:62:30:ef:8a:30:19:
ce:c3:77:18:8e:5a:f4:6a:7c:34:24:d9:5e:9e:86:
38:60:dc:95:ce:92:18:1a:ad:63:ca:a1:1a:f7:09:
0f:85:0d:1b:b6:fc:56:8b:50:42:90:c5:01:d5:f0:
2e:ca:2c:7b:53:41:6a:46:ba:61:f7:6e:66:28:bf:
d2:e1:ee:4e:50:6b:7b:56:da:ff:ba:7f:0f:49:c3:
f6:ab:85:d4:c4:cf:a1:8f:16:3f:df:d1:56:27:b5:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:88:E8:BA:0A:AE:60:7A:B3:05:B3:18:C3:24:86:90:04:88:B0:FC
X509v3 Authority Key Identifier:
keyid:97:A7:8E:BB:6E:BD:87:74:BF:8A:8D:5D:7E:8A:15:AD:64:54:60:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960BB/9458ACF6AE6411EC9ED36E905A40D577/l6eOu269h3S_io1dfooVrWRUYJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l6eOu269h3S_io1dfooVrWRUYJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960BB/9458ACF6AE6411EC9ED36E905A40D577/C1CB45F4B4C711ECA31D3FCB5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b7:1c:60:57:6c:b6:00:0d:f8:2c:08:de:4d:ed:0e:0e:83:
72:00:23:5c:81:08:02:b7:30:9b:ec:dc:4d:96:52:01:7f:f6:
91:ff:78:23:39:72:4a:8a:59:bd:c1:9e:be:f8:90:ff:b2:9a:
17:98:b4:92:e7:ed:a6:13:e4:16:35:70:21:86:33:26:8c:39:
98:bc:0b:31:d7:d1:fe:d5:fd:8f:ba:24:9d:f2:35:c1:2d:ef:
34:e0:55:f2:71:42:32:a0:8d:97:5a:30:6c:21:97:e1:26:c6:
15:c1:e1:e6:cb:4a:ad:9d:73:f8:0a:18:2b:14:a0:e2:0b:fc:
92:d4:d7:5f:25:3a:f8:c4:64:07:69:8d:54:32:a6:d0:47:44:
6e:f8:c9:3d:f9:ff:9d:ce:a7:fb:12:1f:44:3c:bf:62:77:db:
ba:8d:fb:a4:e7:57:04:35:d3:2c:f1:e0:00:55:9d:1f:8c:95:
0c:bf:66:7b:a3:e5:50:56:2d:62:b1:f4:e0:86:1c:dc:92:6e:
2d:03:bd:ff:08:c3:f3:b0:76:e7:f2:b5:48:db:5e:b6:b1:73:
00:86:48:40:5e:55:32:15:ec:c7:4b:fd:25:42:26:87:92:ea:
22:21:bb:f7:ce:02:1a:85:12:f5:6b:dd:e5:0c:e6:e7:ac:ed:
14:83:03:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org