Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/93896884231911EF8D1C04FC7CDC24C2.roa
File: 93896884231911EF8D1C04FC7CDC24C2.roa (raw, json)
Hash identifier: JRq7YYU7yCw3+4hTNP07fK8tsejBym72o7NDEfF6XZQ=
Subject key identifier: 76:AA:9F:EE:B7:9D:34:7A:52:AE:F8:22:AF:49:B9:40:08:02:68:33
Certificate issuer: /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial: 0C
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/93896884231911EF8D1C04FC7CDC24C2.roa
Signing time: Wed 05 Jun 2024 08:57:03 +0000
ROA not before: Wed 05 Jun 2024 08:57:00 +0000
ROA not after: Mon 05 Jun 2034 08:57:00 +0000
asID: 329278
IP address blocks: 102.212.244.0/24 maxlen: 24
102.212.245.0/24 maxlen: 24
102.212.246.0/24 maxlen: 24
102.212.247.0/24 maxlen: 24
2c0f:4440::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jul 2024 14:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Validity
Not Before: Jun 5 08:57:00 2024 GMT
Not After : Jun 5 08:57:00 2034 GMT
Subject: CN=6660285f-1a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:05:b6:27:c7:69:22:4e:55:24:eb:ae:99:
4f:0c:52:24:dc:79:6a:a9:d3:de:9b:e1:55:7d:3e:
ff:b6:81:9c:f9:0c:22:2c:ad:23:c9:a3:d4:30:37:
2d:2f:dd:8f:81:b9:8d:78:74:6a:c3:96:d1:1a:44:
13:3a:88:f4:46:c3:38:b3:d7:8b:fe:33:cc:07:fd:
35:54:26:40:72:5f:27:14:ba:1a:e3:82:93:ef:d5:
5c:66:24:62:fe:f7:24:34:a2:47:f5:9f:c9:de:4e:
8c:17:87:12:0d:7d:24:df:5f:50:5d:9b:29:08:b8:
84:d6:8f:df:65:b9:5e:79:a7:b2:08:73:c9:ee:36:
98:17:67:fb:32:2f:96:e1:fa:46:30:71:68:55:d2:
c1:ab:2d:37:09:17:c0:cc:25:97:fe:61:67:d4:f5:
67:e5:09:d5:34:59:2a:99:0d:30:f9:a2:6f:30:01:
15:af:c0:c1:ef:a1:76:e2:df:aa:6b:07:6b:be:79:
da:43:47:5b:9c:81:50:96:09:60:d1:5e:14:64:5f:
b0:77:6d:20:f1:f2:66:aa:38:57:15:00:18:f2:a4:
87:13:a8:5d:da:f7:99:78:40:17:98:02:d4:64:96:
34:75:a0:c2:69:59:ce:06:3b:4d:59:dc:a3:83:99:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:9F:EE:B7:9D:34:7A:52:AE:F8:22:AF:49:B9:40:08:02:68:33
X509v3 Authority Key Identifier:
keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/93896884231911EF8D1C04FC7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.244.0/22
IPv6:
2c0f:4440::/32
Signature Algorithm: sha256WithRSAEncryption
2f:f2:3e:18:52:15:99:ba:f3:41:fe:71:81:01:52:93:53:f5:
bd:f7:c0:c8:1e:ba:d2:a6:d8:fa:8d:ab:94:03:8a:9f:c3:83:
36:1a:fe:2b:10:c9:fa:19:9b:1f:57:80:f4:0a:10:7f:d0:c0:
62:23:ab:ff:4a:c5:63:19:f8:56:fa:eb:26:0f:ef:4f:1f:e6:
b4:c2:ff:9c:c1:05:a9:48:7e:60:7f:1d:81:cc:6e:90:3e:03:
72:5f:0b:56:31:28:56:b6:11:a7:0a:a2:1c:dc:82:c2:6c:9d:
ca:56:ce:27:1a:3b:0d:48:9d:98:da:62:ac:6d:a0:18:85:e0:
7e:ae:77:52:66:54:e5:32:e6:7f:fa:e8:75:81:23:95:1e:cf:
52:49:a9:02:d7:25:f3:32:8b:af:af:81:24:af:37:c5:81:7f:
25:46:4e:dc:52:37:d5:66:f1:c7:f7:05:ab:ef:3d:00:d7:ca:
14:0e:4f:0d:f3:8a:6a:aa:cd:44:2e:5e:25:9d:1b:b9:16:2b:
9c:06:c9:2f:08:af:ad:8d:3d:da:a2:f7:01:5f:9d:fd:b2:13:
1d:19:b6:a3:76:23:0d:70:82:5e:2d:ef:ba:e6:c6:76:bb:b1:
d1:53:0d:17:07:52:3b:99:d8:3a:d1:9c:cc:99:bd:11:5f:fe:
26:8e:16:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 16:48:19 2024 by rpki-client on console-fra.rpki-client.org