Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/E582F6604F1E11EF81842447762E951A.roa
File: E582F6604F1E11EF81842447762E951A.roa (raw, json)
Hash identifier: f+0lDifQNt7g0fNev5ncDm65HXPDk2x7O/6Q4jm0GVA=
Subject key identifier: 71:A6:D7:E2:8E:10:A7:25:92:E1:8A:7E:87:82:69:40:64:0F:BB:09
Certificate issuer: /CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Certificate serial: 02
Authority key identifier: 97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/E582F6604F1E11EF81842447762E951A.roa
Signing time: Wed 31 Jul 2024 09:25:59 +0000
ROA not before: Wed 31 Jul 2024 09:25:56 +0000
ROA not after: Tue 31 Jul 2029 09:25:56 +0000
asID: 29465
IP address blocks: 102.64.48.0/24 maxlen: 24
102.64.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 11:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Validity
Not Before: Jul 31 09:25:56 2024 GMT
Not After : Jul 31 09:25:56 2029 GMT
Subject: CN=66aa0327-11cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:d4:f0:2f:75:db:08:fd:a5:6a:2f:95:d5:
61:51:27:32:a6:95:92:d3:8f:13:95:0e:1e:66:5f:
56:d2:da:67:f1:fc:c0:d9:73:d4:59:22:23:26:c5:
09:c9:03:e9:02:99:24:64:0b:9c:01:13:8b:c4:ca:
26:84:0d:7a:bb:69:dc:8f:25:73:17:91:02:45:83:
1c:b1:f2:4f:0c:40:24:f4:d2:49:80:16:86:a6:c2:
ef:45:f5:f7:7b:6b:68:dd:4d:b6:33:21:d9:d8:3a:
03:7b:f0:0c:93:4c:e4:2c:86:ff:db:83:a9:05:18:
70:76:cc:15:bf:6b:84:57:45:22:c2:69:2b:5b:b7:
65:35:43:81:28:87:f2:b4:91:cb:ff:7a:d0:1d:5f:
5a:c3:f9:1e:ff:ad:39:92:a7:3b:8b:53:d9:e9:8c:
18:66:5b:d7:e1:5b:74:a1:d3:f6:0b:bb:46:de:89:
b3:32:c0:a9:dc:55:3f:66:20:8d:d3:08:e1:6b:df:
ac:e7:67:d0:d3:40:cd:57:34:17:9e:78:0b:bd:6d:
16:70:63:92:5f:8b:06:a7:19:f8:d9:d6:25:5e:00:
9d:84:58:c6:3c:a2:e6:b9:0f:9e:6d:17:77:61:ff:
c6:83:6d:5a:ac:43:9c:55:05:72:dd:d9:b2:83:ee:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A6:D7:E2:8E:10:A7:25:92:E1:8A:7E:87:82:69:40:64:0F:BB:09
X509v3 Authority Key Identifier:
keyid:97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/E582F6604F1E11EF81842447762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.64.48.0/24
102.64.50.0/24
Signature Algorithm: sha256WithRSAEncryption
64:80:90:32:1d:b4:f7:da:ae:95:26:b8:39:1b:fc:10:3a:f6:
d8:73:10:40:9f:e4:e5:f9:0d:cb:ea:49:00:c9:f1:69:57:a1:
bf:fe:cf:43:c5:b1:50:6c:45:fa:6b:75:08:a1:3b:ab:d8:c1:
c3:50:2f:ca:55:18:b3:b4:d9:ac:25:6e:62:b1:64:4d:43:83:
ce:cc:9e:56:ad:e0:a5:5f:57:ff:ff:31:48:e7:c9:16:2c:53:
54:18:99:c3:31:35:e4:84:5f:3d:f5:30:37:e1:5f:a2:f3:42:
98:71:e7:77:1e:4b:3d:15:72:dc:89:a3:29:d3:d3:64:20:25:
b2:3e:95:f4:64:4f:35:36:e7:bb:b6:aa:52:3b:39:34:7a:3c:
1b:c6:82:31:2a:27:ce:8d:a5:8a:d1:0d:b1:99:f7:cd:61:7e:
5b:f4:9c:fe:73:55:bb:8e:25:c7:5c:34:7c:7b:72:c2:ca:dc:
f6:3f:6c:7b:6d:ef:eb:b3:4e:42:18:2e:64:d4:13:47:6f:a5:
26:7c:8e:db:3a:b1:99:3b:64:69:11:2c:73:00:a2:27:a8:5f:
40:7d:77:87:b6:e7:a6:fb:c1:1f:37:53:44:28:b5:23:60:95:
97:a2:ff:4f:14:0a:05:6d:1a:22:8b:44:01:e0:4b:24:06:f1:
91:25:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 14:18:39 2024 by rpki-client on console-ams.rpki-client.org