Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/A8D628E8231511EF9A7B22E17CDC24C2.roa
File: A8D628E8231511EF9A7B22E17CDC24C2.roa (raw, json)
Hash identifier: rdWmNYAovRvioC35EzVFmeMfscvspx042boSN59/OAk=
Subject key identifier: 3D:D0:C0:D6:64:B9:9D:4D:56:0C:AF:AD:F8:1A:FF:7A:EF:9E:46:89
Certificate issuer: /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial: 07
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/A8D628E8231511EF9A7B22E17CDC24C2.roa
Signing time: Wed 05 Jun 2024 08:29:01 +0000
ROA not before: Wed 05 Jun 2024 08:28:57 +0000
ROA not after: Mon 05 Jun 2034 08:28:57 +0000
asID: 329278
IP address blocks: 102.212.244.0/22 maxlen: 22
2c0f:4440::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jul 2024 14:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AE219AF
Validity
Not Before: Jun 5 08:28:57 2024 GMT
Not After : Jun 5 08:28:57 2034 GMT
Subject: CN=666021cc-8211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:82:24:c9:7f:34:24:83:33:ec:d2:1b:9f:
2c:dd:8a:8c:83:ec:67:b3:de:a9:1b:d0:ff:03:f5:
70:d2:bf:85:6e:32:d7:58:3e:7d:e6:b6:33:38:34:
df:47:55:c0:3a:45:a5:70:62:48:da:7c:90:42:72:
51:c6:29:da:66:01:c8:7d:ae:95:d8:5e:ef:66:ef:
ef:f5:ac:07:c7:a7:12:ba:9a:ce:2e:7c:3f:c5:cb:
f9:6a:f8:a1:ce:92:3b:fb:4f:e8:99:81:7c:c4:2d:
11:2d:fa:73:87:55:1f:20:ee:6a:23:8e:f2:f8:62:
c9:c4:73:e9:19:ac:0a:fa:32:85:ef:83:de:0c:e6:
5a:67:2c:a0:22:a3:47:6e:dd:20:4a:4b:d5:a8:64:
07:90:9b:59:cc:76:e7:d4:3c:5a:f4:49:4b:b5:fc:
75:5d:27:6e:33:76:69:ce:7e:8a:99:49:f9:4e:fd:
6b:18:18:03:36:c5:5a:93:45:e2:bf:85:21:05:ed:
f2:da:75:22:f8:b0:a5:b8:5d:03:75:f5:37:10:6a:
9a:b6:f6:72:23:64:fe:62:8d:48:79:8f:27:3f:9d:
81:6c:12:0e:60:34:a9:23:58:73:82:a7:6e:9d:f6:
1f:7d:4c:fc:3a:34:d8:d1:24:b8:84:1d:84:78:a2:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:C0:D6:64:B9:9D:4D:56:0C:AF:AD:F8:1A:FF:7A:EF:9E:46:89
X509v3 Authority Key Identifier:
keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/A8D628E8231511EF9A7B22E17CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.244.0/22
IPv6:
2c0f:4440::/32
Signature Algorithm: sha256WithRSAEncryption
0d:62:d3:69:80:90:03:15:e7:db:e4:9c:8e:31:d6:f8:7e:d3:
50:93:4a:05:83:ee:55:9e:01:a8:5e:e1:f2:b6:3f:a2:8a:79:
a0:b2:69:50:5c:74:67:99:4a:9c:7b:d0:d1:06:50:3a:a9:d8:
b4:aa:7a:2a:31:31:ff:ff:85:30:90:b5:32:a5:58:3e:5f:89:
24:20:fa:a1:78:25:45:95:4c:24:67:2f:b1:15:34:bc:72:de:
47:63:fe:5d:f3:40:93:22:5e:b4:e8:8a:98:0e:b4:21:c6:16:
40:9b:e7:bd:39:7f:39:c2:a6:3f:6a:2f:59:3c:95:99:34:0d:
c2:d1:38:d6:da:eb:f6:43:36:0c:34:24:0e:ef:9b:76:98:73:
8f:35:a1:30:ec:04:d6:b3:ae:12:6e:86:a7:76:24:47:af:2a:
e1:e0:90:c2:ea:6f:04:91:a7:e7:78:42:45:ac:73:94:64:ff:
83:9c:fb:ed:aa:87:98:3e:41:ba:af:3d:f8:ff:53:c0:e8:db:
64:0a:1d:04:f3:61:79:20:aa:0f:2f:f3:ca:ce:66:db:ab:4f:
16:5b:7d:c0:c6:57:82:57:9a:81:c2:3e:22:83:9f:50:c7:51:
06:86:ec:7c:5c:9f:65:5d:67:dc:2d:eb:7e:63:d1:90:b1:fa:
35:20:0a:d0
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
RTIxOUFGMTEwLwYDVQQFEyg5MUM5OUU0NTc5NjdCOTkyOUIyRURFNzk3OTcyOEIw
RkUyNjM5QUQ5MB4XDTI0MDYwNTA4Mjg1N1oXDTM0MDYwNTA4Mjg1N1owGDEWMBQG
A1UEAxMNNjY2MDIxY2MtODIxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOJLgiTJfzQkgzPs0hufLN2KjIPsZ7PeqRvQ/wP1cNK/hW4y11g+fea2Mzg0
30dVwDpFpXBiSNp8kEJyUcYp2mYByH2uldhe72bv7/WsB8enErqazi58P8XL+Wr4
oc6SO/tP6JmBfMQtES36c4dVHyDuaiOO8vhiycRz6RmsCvoyhe+D3gzmWmcsoCKj
R27dIEpL1ahkB5CbWcx259Q8WvRJS7X8dV0nbjN2ac5+iplJ+U79axgYAzbFWpNF
4r+FIQXt8tp1IviwpbhdA3X1NxBqmrb2ciNk/mKNSHmPJz+dgWwSDmA0qSNYc4Kn
bp32H31M/Do02NEkuIQdhHiiuskCAwEAAaOCArQwggKwMB0GA1UdDgQWBBQ90MDW
ZLmdTVYMr634Gv96755GiTAfBgNVHSMEGDAWgBSRyZ5FeWe5kpsu3nl5cosP4mOa
2TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QUUyMTkvNTJCQUMzRDgyMzEwMTFFRjkyODcxRjNBN0REQzI0QzIva2NtZVJY
bG51WktiTHQ1NWVYS0xELUpqbXRrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva2NtZVJYbG51WktiTHQ1NWVYS0xELUpqbXRrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUUyMTkvNTJCQUMzRDgyMzEwMTFFRjkyODcxRjNBN0RE
QzI0QzIvQThENjI4RTgyMzE1MTFFRjlBN0IyMkUxN0NEQzI0QzIucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbU9DANBAIAAjAHAwUALA9E
QDANBgkqhkiG9w0BAQsFAAOCAQEADWLTaYCQAxXn2+ScjjHW+H7TUJNKBYPuVZ4B
qF7h8rY/oop5oLJpUFx0Z5lKnHvQ0QZQOqnYtKp6KjEx//+FMJC1MqVYPl+JJCD6
oXglRZVMJGcvsRU0vHLeR2P+XfNAkyJetOiKmA60IcYWQJvnvTl/OcKmP2ovWTyV
mTQNwtE41trr9kM2DDQkDu+bdphzjzWhMOwE1rOuEm6Gp3YkR68q4eCQwupvBJGn
53hCRaxzlGT/g5z77aqHmD5Buq89+P9TwOjbZAodBPNheSCqDy/zys5m26tPFlt9
wMZXgleagcI+IoOfUMdRBobsfFyfZV1n3C3rfmPRkLH6NSAK0A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:16 2025 by rpki-client