Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/25475C6A567B11EFA61580A1762E951A.roa
File: 25475C6A567B11EFA61580A1762E951A.roa (raw, json)
Hash identifier: scPZtoMdmZFB8TrgO9xeKQm3xiCWd3pM4DCm8hsT/bM=
Subject key identifier: 66:91:17:B3:DA:B1:23:C7:84:A4:17:18:2F:6F:C7:02:7B:44:38:79
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 045F
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/25475C6A567B11EFA61580A1762E951A.roa
Signing time: Fri 09 Aug 2024 18:13:58 +0000
ROA not before: Fri 09 Aug 2024 18:13:54 +0000
ROA not after: Tue 08 Aug 2034 18:13:54 +0000
asID: 5536
IP address blocks: 102.218.128.0/24 maxlen: 32
102.218.130.0/24 maxlen: 32
102.219.22.0/24 maxlen: 32
102.220.125.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sat 10 Aug 2024 05:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119 (0x45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Aug 9 18:13:54 2024 GMT
Not After : Aug 8 18:13:54 2034 GMT
Subject: CN=66b65c66-2145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:7c:3c:84:a9:16:63:43:08:bd:b7:c7:a2:
49:31:5d:51:1f:53:d4:e0:d1:97:f8:b3:f4:42:60:
7e:59:cb:c5:47:76:82:77:cf:77:39:57:ec:0f:56:
3a:3b:c2:a1:88:25:e8:89:37:16:63:74:43:85:b8:
35:09:fe:6a:cd:60:f0:09:a3:27:1f:a0:37:bd:dc:
56:47:bd:07:e2:99:b2:71:f9:97:d0:87:69:c8:9b:
f4:da:89:cb:21:5e:da:0c:fd:33:78:2f:77:27:86:
a4:71:21:24:05:e2:18:0d:54:a4:fe:78:62:af:60:
1b:3f:3b:0e:dd:f0:15:0d:e1:6c:31:39:56:fa:d9:
3c:21:e8:09:f9:b2:f2:ae:b1:d1:37:66:52:25:f8:
26:ee:23:75:70:7a:2d:68:94:c9:74:12:6c:be:56:
90:2e:35:92:18:34:02:4d:33:b4:0e:85:7b:c8:7a:
ee:40:a1:8d:7f:e0:3f:c5:2a:26:f3:b8:b9:b4:21:
60:9b:72:2b:a1:d8:11:d5:5d:1c:0c:d4:0b:9c:d0:
d6:aa:12:cd:d4:e9:ca:ca:61:0f:b7:f8:44:5d:b2:
08:2e:88:72:88:3f:47:ab:9e:c2:cf:2f:30:65:a4:
38:56:d6:63:b6:69:6c:50:86:0a:f7:de:c2:d3:b6:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:91:17:B3:DA:B1:23:C7:84:A4:17:18:2F:6F:C7:02:7B:44:38:79
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/25475C6A567B11EFA61580A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
102.218.130.0/24
102.219.22.0/24
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
17:08:60:a2:b4:c3:db:b8:f8:50:72:31:e5:92:6c:54:57:02:
ae:7d:a0:e3:56:a0:fc:72:bb:78:91:ea:4d:45:bf:de:19:21:
bb:4b:07:19:b4:d8:bf:4b:1f:48:83:71:41:d9:c1:2e:16:95:
7e:05:9f:56:e2:86:3e:95:ae:1b:7e:fa:90:6b:14:4a:98:11:
5f:b3:35:26:69:b5:95:f6:0e:c1:a2:14:66:4a:8c:55:51:78:
85:55:23:4f:eb:07:3f:ad:ac:11:fc:51:67:0f:54:67:94:66:
15:d1:18:7b:d8:b8:4e:86:45:a6:fa:65:f8:65:2d:1c:77:7f:
13:d4:42:03:9a:19:7f:28:07:60:09:9b:07:a3:77:de:60:4d:
10:47:02:dc:ed:f3:1d:96:2e:68:89:ba:2f:01:f6:f1:22:d5:
59:99:1f:c9:76:2f:e9:e4:c2:db:39:31:2d:ed:79:89:72:73:
41:48:3c:37:b8:73:19:97:4b:66:a5:98:3f:f8:ca:4e:55:b9:
e8:86:32:b0:d1:be:5a:8f:29:9b:08:f9:ac:ce:0c:de:d2:fc:
b9:4d:63:d4:6e:ea:60:eb:ce:1a:57:59:da:a1:85:9f:a7:19:
6b:24:52:63:d9:8d:8f:19:58:eb:16:db:f1:95:73:5c:fb:44:
1a:07:75:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 07:44:21 2024 by rpki-client on console-ams.rpki-client.org