Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/146EB046241511EC8DF51A5DD8A014CE.roa
File: 146EB046241511EC8DF51A5DD8A014CE.roa (raw, json)
Hash identifier: uU8904BF/ZV2A232RvmwZ9zcEmqOEzEnfVF7TcD0eGg=
Subject key identifier: DE:C5:27:4B:9D:E7:0F:7B:00:56:2A:5F:0A:B8:71:C8:58:9E:0D:3F
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 02
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/146EB046241511EC8DF51A5DD8A014CE.roa
Signing time: Sun 03 Oct 2021 06:42:30 +0000
ROA not before: Sun 03 Oct 2021 06:42:26 +0000
ROA not after: Tue 03 Oct 2028 06:42:26 +0000
asID: 37725
IP address blocks: 102.218.128.0/24 maxlen: 24
102.218.130.0/24 maxlen: 24
102.219.22.0/24 maxlen: 24
102.220.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jul 2023 06:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Oct 3 06:42:26 2021 GMT
Not After : Oct 3 06:42:26 2028 GMT
Subject: CN=615950d6-804a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:0e:59:5e:7e:69:bb:9c:0f:60:4f:36:8e:
72:f5:2b:c2:aa:01:27:d0:1f:91:45:5a:5c:ae:ce:
96:0c:dc:cc:28:8d:6e:af:f4:13:8f:78:d2:51:38:
60:3a:8f:3d:8d:14:22:fc:f2:98:5a:88:93:32:f0:
ef:c3:10:ef:5a:48:5e:e0:c2:b6:0a:30:2a:a5:fa:
e4:41:86:97:76:ae:fc:f5:20:b9:2f:b3:5d:a4:d2:
48:59:1d:67:1d:ef:eb:3b:10:e7:76:c7:0f:76:38:
48:7d:7c:89:1e:62:19:1c:d0:e1:2b:18:d8:73:02:
16:99:82:f2:1b:83:db:ee:b0:62:23:13:a6:dd:94:
2e:82:4a:6d:10:1d:aa:1c:93:e6:55:60:ef:a3:58:
d0:c4:e2:34:92:1b:70:b2:72:41:d3:42:bc:db:1e:
ef:82:19:fe:69:12:a0:97:3f:62:2d:bb:a4:38:6b:
a0:56:d9:0b:5b:a7:a5:e2:70:8a:b9:c0:1f:96:28:
0e:a4:36:72:08:fc:8f:e9:43:44:ea:46:86:3c:8d:
1c:c8:f2:eb:28:c7:6e:ba:b2:d4:59:8a:3a:25:6c:
67:a4:00:69:94:35:9d:f5:e6:25:13:ba:8b:93:4f:
d3:67:23:fb:7d:a7:9b:9f:73:69:7c:c9:01:e5:b5:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C5:27:4B:9D:E7:0F:7B:00:56:2A:5F:0A:B8:71:C8:58:9E:0D:3F
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/146EB046241511EC8DF51A5DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
102.218.130.0/24
102.219.22.0/24
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c3:d6:40:82:85:24:79:64:17:d6:55:c2:1b:88:21:ef:58:
db:e1:c9:4c:1a:5a:e4:b6:ab:8b:1d:85:03:da:c0:81:6e:6f:
00:a4:4e:e8:2d:9b:fa:3f:3e:86:91:5f:a5:5e:b4:b1:94:f5:
28:42:ca:72:2a:43:5f:f7:d2:d9:b3:98:bf:88:2c:18:34:1a:
ee:74:02:c1:cb:28:9e:5f:f0:a1:4b:06:cb:f6:79:ee:f1:cf:
f3:af:3f:d3:dc:c6:af:49:9d:e1:5f:e4:73:92:50:38:e2:a8:
a9:5a:e9:7f:61:73:95:9b:5f:3b:a3:ed:b6:74:88:17:58:ba:
fb:65:c0:80:91:2c:ce:f6:9b:f4:62:5f:48:87:07:22:8a:73:
0f:19:24:7d:ac:f9:2b:04:04:f2:07:70:fe:55:67:9a:a3:6f:
af:b4:16:10:50:b1:c0:f6:5c:3a:e4:6f:b4:47:f3:17:98:e0:
39:43:89:3a:a0:4e:53:b1:fd:32:cd:29:28:88:cf:a9:9f:47:
07:2e:08:bc:22:0f:ed:2e:07:2b:71:17:b1:1f:33:7e:7f:ec:
44:25:81:e7:cd:2e:98:ef:ea:8d:46:a0:86:ab:d1:70:8b:e9:
23:ec:5c:f4:f6:32:55:03:19:42:3c:e9:a6:19:7e:ce:e2:26:
c0:d0:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org