Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/40DDDDD2567B11EF988EA3A1762E951A.roa
File: 40DDDDD2567B11EF988EA3A1762E951A.roa (raw, json)
Hash identifier: qEjOiMCbiCQGfmP5vOTfwvgUWw9v5dpMwJBbnYrgkBY=
Subject key identifier: B8:E8:3E:EF:1B:F6:A2:2D:B3:5A:D1:F5:C3:6F:45:79:50:6A:3A:B3
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 0461
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/40DDDDD2567B11EF988EA3A1762E951A.roa
Signing time: Fri 09 Aug 2024 18:14:44 +0000
ROA not before: Fri 09 Aug 2024 18:14:41 +0000
ROA not after: Tue 08 Aug 2034 18:14:41 +0000
asID: 37725
IP address blocks: 102.218.128.0/24 maxlen: 32
102.218.130.0/24 maxlen: 32
102.219.22.0/24 maxlen: 32
102.220.125.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sat 10 Aug 2024 05:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121 (0x461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Aug 9 18:14:41 2024 GMT
Not After : Aug 8 18:14:41 2034 GMT
Subject: CN=66b65c94-dc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8e:12:47:17:89:e6:a7:d0:8e:f6:0a:bc:60:
64:3c:d7:1c:91:5a:2a:ed:01:62:0d:c0:53:1f:4c:
84:32:2d:c9:79:0f:f3:04:00:96:65:32:33:87:84:
6b:a1:e2:bb:93:ac:6e:88:b3:bd:d8:ca:56:f2:6d:
ee:23:50:f0:95:ff:5c:61:87:b4:c5:39:ae:4d:73:
db:09:46:c3:55:4a:2a:96:80:40:29:ba:f9:17:2f:
1c:73:fd:3b:3b:4b:d8:0c:3d:34:9b:71:27:fe:7a:
b4:6c:70:1b:21:96:3b:f6:2c:b2:35:7c:b2:1f:97:
9f:8d:e9:f7:63:ee:47:4f:bc:31:03:17:48:99:e1:
a5:9d:03:c8:47:bf:cc:a8:1e:03:0e:f5:e7:a6:8d:
78:4a:82:23:dc:0a:e0:e6:17:f9:d1:a0:1c:a7:eb:
ff:be:0a:7a:d6:8b:e3:d2:78:d3:3a:ab:c1:38:f1:
33:e6:22:c8:f7:bc:9e:d8:bd:0d:4e:b7:00:a2:bb:
14:52:ec:9b:0a:df:46:5f:96:16:1d:9c:1d:6b:18:
56:92:b9:32:ab:25:a3:ad:28:30:18:d9:57:57:52:
a8:6f:b0:3f:d9:e3:ef:97:c5:60:82:68:bf:ef:02:
a4:af:86:f2:59:6a:bc:55:71:83:f8:ac:0e:54:4c:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E8:3E:EF:1B:F6:A2:2D:B3:5A:D1:F5:C3:6F:45:79:50:6A:3A:B3
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/40DDDDD2567B11EF988EA3A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
102.218.130.0/24
102.219.22.0/24
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e8:80:ba:aa:40:ef:68:45:c7:b4:59:7e:d9:3e:db:28:90:
dd:22:32:b3:f3:9d:aa:53:37:51:8e:37:b7:0b:83:b0:8b:89:
58:54:1d:a4:c9:ae:e0:a7:21:76:b3:40:d2:be:24:7f:e0:95:
f6:86:f4:da:a1:7c:53:fd:fd:cf:5e:c7:66:72:ad:4b:4d:85:
10:85:fc:42:bb:64:a3:47:f8:d3:b3:0b:94:e6:04:4d:cb:79:
e0:a7:a4:07:5a:d1:18:4e:80:8e:9c:f9:54:27:4a:99:62:7e:
58:39:4e:ce:04:cd:9d:8b:f4:61:b1:c3:90:96:6a:53:77:f3:
c3:eb:50:6e:ad:a0:21:1f:b7:d8:70:67:34:bb:f7:93:3d:83:
de:e8:82:7e:76:f6:4d:e4:af:e7:c8:6e:cd:db:11:d1:62:83:
87:1d:09:ad:91:f5:56:aa:eb:14:8d:5b:55:69:67:11:55:bd:
97:27:22:7f:50:eb:f5:ed:24:fc:1e:84:cb:c3:16:0c:ec:be:
78:4c:f7:53:48:06:fb:e5:c9:a1:6d:ca:5e:78:aa:82:f9:24:
ee:a8:b0:ba:56:f2:fa:7f:e4:1f:72:e1:3d:2a:27:6e:8b:07:
e8:a8:8e:61:e1:22:d2:45:4f:07:03:8e:64:93:61:c8:10:54:
51:ce:fb:6e
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yNDA4MDkxODE0NDFaFw0zNDA4MDgxODE0NDFaMBgxFjAU
BgNVBAMTDTY2YjY1Yzk0LWRjMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDwjhJHF4nmp9CO9gq8YGQ81xyRWirtAWINwFMfTIQyLcl5D/MEAJZlMjOH
hGuh4ruTrG6Is73Yylbybe4jUPCV/1xhh7TFOa5Nc9sJRsNVSiqWgEApuvkXLxxz
/Ts7S9gMPTSbcSf+erRscBshljv2LLI1fLIfl5+N6fdj7kdPvDEDF0iZ4aWdA8hH
v8yoHgMO9eemjXhKgiPcCuDmF/nRoByn6/++CnrWi+PSeNM6q8E48TPmIsj3vJ7Y
vQ1OtwCiuxRS7JsK30ZflhYdnB1rGFaSuTKrJaOtKDAY2VdXUqhvsD/Z4++XxWCC
aL/vAqSvhvJZarxVcYP4rA5UTJ0nAgMBAAGjggK3MIICszAdBgNVHQ4EFgQUuOg+
7xv2oi2zWtH1w29FeVBqOrMwHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4
QTAxNENFLzQwREREREQyNTY3QjExRUY5ODhFQTNBMTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABm2oADBABm2oIDBABm2xYD
BABm3H0wDQYJKoZIhvcNAQELBQADggEBABnogLqqQO9oRce0WX7ZPtsokN0iMrPz
napTN1GON7cLg7CLiVhUHaTJruCnIXazQNK+JH/glfaG9NqhfFP9/c9ex2ZyrUtN
hRCF/EK7ZKNH+NOzC5TmBE3LeeCnpAda0RhOgI6c+VQnSpliflg5Ts4EzZ2L9GGx
w5CWalN388PrUG6toCEft9hwZzS795M9g97ogn529k3kr+fIbs3bEdFig4cdCa2R
9Vaq6xSNW1VpZxFVvZcnIn9Q6/XtJPwehMvDFgzsvnhM91NIBvvlyaFtyl54qoL5
JO6osLpW8vp/5B9y4T0qJ26LB+iojmHhItJFTwcDjmSTYcgQVFHO+24=
-----END CERTIFICATE-----
Generated at Sat Aug 10 07:44:21 2024 by rpki-client on console-ams.rpki-client.org