Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/0D175FDA4F2011EF91431E50762E951A.roa
File: 0D175FDA4F2011EF91431E50762E951A.roa (raw, json)
Hash identifier: mnuiQV2HfaNgAdPR94gjiIorb5kQDpZZ61EssT58TbU=
Subject key identifier: BA:69:4E:3A:6F:F5:3F:06:5B:D0:7C:E2:81:A7:3D:7F:2D:4F:FB:F5
Certificate issuer: /CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Certificate serial: 04
Authority key identifier: 97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/0D175FDA4F2011EF91431E50762E951A.roa
Signing time: Wed 31 Jul 2024 09:34:15 +0000
ROA not before: Wed 31 Jul 2024 09:34:12 +0000
ROA not after: Tue 31 Jul 2029 09:34:12 +0000
asID: 37148
IP address blocks: 102.64.48.0/24 maxlen: 24
102.64.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 11:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Validity
Not Before: Jul 31 09:34:12 2024 GMT
Not After : Jul 31 09:34:12 2029 GMT
Subject: CN=66aa0517-6847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:53:77:1e:9f:fe:46:85:75:f5:44:78:cf:
1c:0d:03:cf:e8:10:1e:15:e8:0d:da:95:cb:65:7b:
84:82:b1:9e:a3:2c:8b:40:9b:71:01:32:42:ac:7e:
37:95:e5:b0:7f:0c:7e:86:82:5f:1a:29:da:1b:fc:
98:a0:74:35:a4:1c:cd:11:97:5d:d3:47:3a:d2:d8:
aa:7f:9f:ac:da:e7:c2:67:41:fb:f2:b2:16:c4:7f:
bd:7a:35:90:69:56:8c:c7:f2:c3:6e:c9:21:a7:d1:
df:eb:43:43:5c:c6:12:ed:54:40:f6:26:f7:3b:54:
50:44:51:f5:7c:db:c5:81:98:44:76:66:26:58:ee:
bb:c9:93:04:2c:25:2e:25:98:1f:54:04:c2:44:b4:
b2:93:e7:57:7f:c2:45:b1:f6:78:64:f3:44:53:36:
03:8d:0d:e1:72:66:0e:83:75:3a:e7:db:96:64:d2:
d7:b7:77:4d:5e:e0:98:cd:83:ca:df:1b:b6:31:d7:
64:d4:ae:3d:ad:df:de:75:6b:25:b4:c6:89:2d:d0:
32:80:69:d1:29:cc:5c:9c:36:4a:c9:2e:10:56:b6:
0a:35:b2:75:98:23:f8:74:6d:d8:9a:71:e7:2b:a5:
b3:53:a0:a0:b9:60:be:52:da:74:7a:f3:90:10:82:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:69:4E:3A:6F:F5:3F:06:5B:D0:7C:E2:81:A7:3D:7F:2D:4F:FB:F5
X509v3 Authority Key Identifier:
keyid:97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/0D175FDA4F2011EF91431E50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.64.48.0/24
102.64.50.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:4f:48:6b:87:fa:73:dc:f2:8e:f4:e3:c0:8a:dc:1d:0c:a2:
0d:6b:1f:66:ed:29:56:26:22:17:58:db:e1:da:97:2c:87:e8:
e9:1d:d1:31:fb:e9:33:85:fe:c4:9b:27:1f:31:ac:6d:fc:65:
ef:0b:35:62:36:82:30:37:b1:54:65:7e:ef:33:c9:2c:f8:72:
08:d8:17:4e:c4:2e:0a:81:92:a7:40:5e:3d:a0:57:5a:b2:16:
0d:03:02:1e:91:4f:67:07:9f:90:32:c0:5e:7c:2b:7e:bf:4f:
f2:c9:81:17:94:cb:00:97:8d:01:96:e9:26:28:85:20:96:e9:
9a:5f:cb:4f:a3:36:8c:3d:cf:86:8b:a6:66:6a:ca:e4:7d:f6:
ec:73:6a:8f:7f:97:52:c0:08:eb:96:cd:c3:04:69:35:80:37:
ff:be:11:04:58:84:27:b8:6e:06:e5:e8:f8:16:9a:07:8a:14:
66:93:0d:c7:20:2d:dc:70:3b:60:01:c4:9f:89:89:58:d4:1d:
92:02:de:db:2c:7b:9b:98:4d:20:a5:57:1d:07:29:d7:6c:f4:
e5:40:28:65:0e:ae:cd:a1:a2:35:4b:42:9e:5b:8d:f2:31:5f:
20:6c:3e:f1:5e:a5:84:95:1a:61:30:e2:a8:f5:49:95:ce:cf:
d9:de:b5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 14:18:39 2024 by rpki-client on console-ams.rpki-client.org