Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/F5C07F044BA211EFB5F67E8D762E951A.roa
File: F5C07F044BA211EFB5F67E8D762E951A.roa (raw, json)
Hash identifier: l7UJx0HDZUl5mN9KlrNI4D7rpqS/VV5tzXX2OCQlf4k=
Subject key identifier: 3F:6F:4A:FA:D2:2D:F4:98:C9:3F:C6:84:7F:64:FA:D4:7C:0A:3A:F0
Certificate issuer: /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial: 07
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/F5C07F044BA211EFB5F67E8D762E951A.roa
Signing time: Fri 26 Jul 2024 23:01:15 +0000
ROA not before: Sat 27 Jul 2024 23:01:12 +0000
ROA not after: Mon 04 Nov 2024 23:01:12 +0000
asID: 329130
IP address blocks: 102.214.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 10:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Validity
Not Before: Jul 27 23:01:12 2024 GMT
Not After : Nov 4 23:01:12 2024 GMT
Subject: CN=66a42abb-35a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:49:51:97:77:42:f3:ab:a8:65:11:d9:9c:
d0:aa:1a:71:19:72:55:08:40:1a:47:50:e8:68:6d:
09:de:63:7d:94:73:d8:0e:ee:5a:09:37:3d:ff:ff:
9f:d7:6b:61:6e:6f:f0:e7:3e:fe:b2:f4:bb:51:ac:
81:d9:4e:60:d0:c8:a7:ec:63:c2:50:e1:73:1c:72:
2c:d4:cc:6f:2c:14:be:e1:e8:25:88:e2:27:5f:55:
ea:94:17:82:f5:a4:05:3f:9a:91:d3:ee:21:26:43:
8a:6d:e6:d4:ed:78:75:0c:2a:a9:6b:0d:56:dd:6c:
b8:6f:0c:15:6e:48:98:67:d7:65:b8:27:2f:43:26:
a9:de:51:16:44:a6:46:7e:ef:4b:58:6b:df:de:18:
57:b1:2a:96:3f:2a:6f:48:92:7f:19:c1:6e:11:65:
e0:9d:9d:15:02:99:bc:6e:91:80:4a:e8:b0:69:e7:
fa:32:0e:cf:90:c6:51:13:b6:d0:92:35:22:9f:51:
e2:e4:ca:da:be:78:21:97:87:0b:8f:0c:0a:38:97:
67:32:46:5b:9e:d9:00:97:ce:cf:eb:38:eb:d6:1f:
42:0c:ed:c8:50:73:48:b2:fd:6c:61:38:8f:50:65:
c6:d6:a2:99:90:8b:ed:d2:c8:2b:51:70:90:3e:ca:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6F:4A:FA:D2:2D:F4:98:C9:3F:C6:84:7F:64:FA:D4:7C:0A:3A:F0
X509v3 Authority Key Identifier:
keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/F5C07F044BA211EFB5F67E8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fa:90:9d:f1:1a:1c:ef:2e:8b:08:a2:46:1e:f7:9f:08:f1:
25:3c:b9:1b:28:ad:22:b3:c9:d8:66:9a:38:4d:0f:b9:81:f6:
e4:72:26:66:f3:6a:7c:43:c9:2b:b5:88:b7:65:7e:b4:97:a0:
da:de:60:4d:cb:d0:b6:90:f9:fd:7c:08:56:56:91:44:d1:99:
b4:a7:3b:eb:7c:df:87:5b:63:07:00:72:ae:37:6c:00:a1:33:
1b:25:37:c7:2f:32:6f:1b:d1:64:4a:e4:d0:6b:e8:0a:89:7c:
dc:8c:69:c1:30:d6:87:14:df:31:05:57:72:ff:5d:47:20:2a:
19:61:e3:49:f5:4b:b6:47:4b:df:2d:78:05:aa:a5:78:e9:b0:
81:52:92:49:cc:b4:77:e9:b6:37:db:69:e5:15:ea:85:a4:57:
71:80:96:e6:05:ea:77:4c:19:61:5e:01:15:e2:93:4b:69:d9:
8c:7b:1a:6c:b5:b2:f6:a2:18:39:e0:23:96:00:f1:12:40:e5:
de:8f:d1:91:0c:30:b4:94:2b:34:05:b8:26:bc:a9:5a:0f:a2:
7b:54:9a:e1:7d:ee:2e:ec:8a:ac:c5:21:cc:83:a5:8d:5b:2e:
f0:a9:0d:d5:e0:c5:63:10:18:05:5f:43:2b:9f:be:0b:d1:c0:
da:6e:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 14:11:17 2024 by rpki-client on console-fra.rpki-client.org