Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/413FE210231911EF8F8E1DF87CDC24C2.roa
File: 413FE210231911EF8F8E1DF87CDC24C2.roa (raw, json)
Hash identifier: jrJj4ZecuQrUZXQQ86Lp44CvRYrJcOf9xWezCceXljk=
Subject key identifier: D5:43:72:F5:44:14:1F:B5:7A:E2:C4:2F:67:07:8D:76:A3:43:6D:38
Certificate issuer: /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial: 0A
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/413FE210231911EF8F8E1DF87CDC24C2.roa
Signing time: Wed 05 Jun 2024 08:54:45 +0000
ROA not before: Wed 05 Jun 2024 08:54:41 +0000
ROA not after: Mon 05 Jun 2034 08:54:41 +0000
asID: 329278
IP address blocks: 102.212.244.0/23 maxlen: 23
102.212.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 31 Jul 2024 14:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Validity
Not Before: Jun 5 08:54:41 2024 GMT
Not After : Jun 5 08:54:41 2034 GMT
Subject: CN=666027d5-c038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:a5:e6:15:4b:4a:07:1a:1d:8d:17:4a:23:
7b:65:24:1e:04:39:25:ab:e1:67:e3:b3:07:c6:8a:
0c:57:2d:a8:36:1c:20:e9:4b:70:b1:e4:82:4a:ed:
c8:cb:91:9e:d7:d4:a4:8f:bb:b8:ad:ea:d8:1a:eb:
23:c9:d6:7c:b4:07:76:28:db:20:c4:7b:ba:24:a2:
d2:ce:87:0f:d5:36:14:07:7b:fd:01:86:89:b3:9b:
5a:b5:b8:7c:79:f0:60:83:eb:83:d4:87:4e:6f:52:
6c:21:dc:e3:28:0f:76:48:28:3a:f9:3e:12:89:8f:
95:b3:fc:27:ed:54:cd:a1:58:30:27:ed:df:d0:ed:
34:6c:0e:09:5a:86:a9:f4:09:8e:8b:e0:ef:39:5f:
95:11:25:50:0a:29:9b:88:ee:73:8e:71:61:c4:df:
15:ac:d2:38:15:4c:5d:5a:26:a7:95:82:a6:b9:b6:
c2:17:69:d4:12:00:0e:69:26:c8:87:12:4b:57:da:
24:0f:27:35:d2:8f:ee:66:8b:46:44:31:73:2a:86:
c1:52:82:9c:9d:91:b8:2f:ee:c4:81:9a:69:d5:e0:
0b:10:b7:3a:4e:8a:93:19:e1:cb:9d:6f:1b:4a:2b:
92:ba:30:9e:f1:27:39:3d:98:87:0e:59:3a:66:72:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:43:72:F5:44:14:1F:B5:7A:E2:C4:2F:67:07:8D:76:A3:43:6D:38
X509v3 Authority Key Identifier:
keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/413FE210231911EF8F8E1DF87CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.244.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:f5:72:80:dd:f1:d3:f9:fd:b2:65:cb:a2:c2:06:fe:7b:4a:
01:11:14:a6:15:fe:9d:14:b5:d0:c9:25:2c:2c:27:96:71:28:
6f:82:d8:02:96:c4:ca:94:bd:4c:12:b5:06:78:d5:56:94:bd:
a7:99:bc:bb:fb:e8:ec:ac:62:1e:2d:51:19:5c:d2:59:6f:8a:
1b:05:2d:b4:80:2f:19:8b:0b:a3:1b:18:f4:30:e7:fb:55:3d:
c8:91:e4:9e:3f:3f:84:6b:f7:76:d6:9f:04:99:f2:a2:e7:79:
6b:d4:9b:01:8f:7f:be:fe:e2:bc:63:79:c8:27:63:a6:b2:8e:
2d:99:25:60:9a:51:0f:bf:fa:6a:b4:da:18:43:d0:8c:17:e0:
cc:67:e3:d3:2b:87:1f:20:61:f2:55:c8:54:f3:30:2f:95:98:
ea:cb:68:3b:57:45:05:60:11:ba:ee:99:02:d3:46:5b:3d:45:
2f:10:d0:0e:39:42:a3:27:08:2c:a0:2a:83:18:98:9d:1b:f8:
19:7b:38:f9:d5:3a:dd:7a:49:0b:f9:cf:51:61:83:eb:ac:05:
e1:bc:d2:5a:3e:c8:12:fc:96:e7:d1:a8:2c:61:8b:fe:39:26:
1b:54:18:95:ca:57:4f:ea:f0:be:31:0e:b5:c1:71:52:8e:e3:
6c:71:58:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 16:56:12 2024 by rpki-client on console-ams.rpki-client.org