Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/44573D926C4111EFBB4D3EA4762E951A.roa
File: 44573D926C4111EFBB4D3EA4762E951A.roa (raw, json)
Hash identifier: vPSsQlZjDqetX414wXSS/eYRKdEdEmNDfYGDURGT6Is=
Subject key identifier: 0D:3D:4C:D6:CC:DE:99:1B:92:F2:5F:38:25:DC:84:5E:CF:16:0B:9E
Certificate issuer: /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial: 02
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/44573D926C4111EFBB4D3EA4762E951A.roa
Signing time: Fri 06 Sep 2024 11:15:05 +0000
ROA not before: Fri 06 Sep 2024 11:15:01 +0000
ROA not after: Wed 31 Dec 2025 11:15:01 +0000
asID: 328310
IP address blocks: 102.164.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 10 Sep 2024 13:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Validity
Not Before: Sep 6 11:15:01 2024 GMT
Not After : Dec 31 11:15:01 2025 GMT
Subject: CN=66dae439-d646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:8f:99:4d:7c:ca:4d:df:d1:5b:8f:e1:17:
e6:18:20:2c:8a:3a:e1:ff:c8:98:ea:eb:0f:78:15:
53:e6:ed:9b:32:2a:2e:48:a5:c6:89:76:47:38:66:
90:a1:44:0f:1d:72:83:6d:f5:6a:6e:ac:38:ab:4a:
c0:cc:79:48:c4:da:c0:05:55:b1:86:61:f4:18:ad:
b0:46:50:3f:8e:61:69:ec:a5:3e:94:e3:b8:5a:9c:
b9:af:77:87:81:fd:cf:30:29:b6:38:e3:46:f1:da:
c2:cf:5e:7c:d5:af:06:c2:2b:63:c7:1e:3f:24:a5:
18:8c:00:b8:ec:20:84:85:65:49:8d:eb:78:19:61:
0a:ac:88:35:1e:91:01:74:1b:3e:1a:c1:28:0d:07:
de:d9:0e:e2:dd:06:1b:17:aa:62:d2:fe:75:75:64:
73:10:e1:af:0e:a2:67:12:b6:f9:0c:2c:32:7c:01:
e5:8e:49:3d:06:b0:a5:c7:af:4b:69:c9:50:9c:c8:
bd:c0:99:36:28:08:9f:66:35:01:49:e4:d7:5d:20:
98:e1:9f:0e:36:ca:7d:2c:62:d3:20:f8:1f:62:21:
bb:a2:12:7d:02:bc:fc:e2:c9:5d:a3:1b:ef:2f:90:
86:fa:25:74:74:92:59:26:b2:f9:3f:fe:09:dc:0c:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3D:4C:D6:CC:DE:99:1B:92:F2:5F:38:25:DC:84:5E:CF:16:0B:9E
X509v3 Authority Key Identifier:
keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/44573D926C4111EFBB4D3EA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.164.244.0/22
Signature Algorithm: sha256WithRSAEncryption
46:98:29:12:6b:44:74:f0:c4:ae:5c:62:f7:c7:a6:b0:cb:c8:
d0:8c:f2:6d:68:e8:38:ac:12:60:7c:89:88:46:5c:a6:e5:3a:
fb:e7:cf:82:d3:71:ba:b4:d1:a4:ad:53:6b:db:e2:7e:c7:f5:
3b:f7:fe:ba:a8:76:7f:31:b6:31:77:b4:72:11:49:4c:8e:1d:
af:c7:5c:2a:49:13:8c:bd:ee:47:8b:6d:42:4f:cd:3b:42:c0:
20:42:e7:b7:7b:b7:37:4f:2d:3a:05:67:10:c3:01:b8:9c:6a:
a9:03:10:2f:19:9d:5e:04:47:ee:57:85:6e:15:c6:e2:72:90:
67:33:ef:d7:7c:21:25:96:13:0a:6c:2c:24:9f:a6:2d:15:1f:
67:66:0c:bc:a7:3e:f6:78:c8:52:13:d7:26:98:7e:01:69:7f:
26:22:8d:3a:25:4a:e2:ac:9e:e6:15:1b:32:33:e1:3e:82:f7:
6b:62:f7:72:88:84:f3:9f:5b:2b:7a:54:0e:02:89:16:61:50:
1b:19:6a:6c:71:66:09:3a:b0:7c:e0:25:d7:f1:e1:29:fb:43:
0d:bb:e6:ac:a7:49:27:09:13:7c:4a:18:04:12:46:9f:34:dc:
b0:e8:f1:9e:80:91:41:06:8c:d9:30:5b:b4:b0:08:0d:0d:2c:
72:56:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:22:55 2024 by rpki-client on console-fra.rpki-client.org