Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/6C06E53C56DD11EF8B64F04A762E951A.roa
File: 6C06E53C56DD11EF8B64F04A762E951A.roa (raw, json)
Hash identifier: 1f0g4bBQRj2aHfLyEqU9D5buRbY3yY1ToFghuOxwkYo=
Subject key identifier: C9:4F:0A:66:14:B3:A3:4A:70:91:44:51:7C:3A:FC:D2:73:E0:59:82
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 0466
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/6C06E53C56DD11EF8B64F04A762E951A.roa
Signing time: Sat 10 Aug 2024 05:57:27 +0000
ROA not before: Sat 10 Aug 2024 05:57:22 +0000
ROA not after: Wed 09 Aug 2034 05:57:22 +0000
asID: 5536
IP address blocks: 102.220.125.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Aug 2024 16:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126 (0x466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Aug 10 05:57:22 2024 GMT
Not After : Aug 9 05:57:22 2034 GMT
Subject: CN=66b70147-7d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:32:54:31:dd:68:1d:56:b6:fa:3f:fd:d5:
23:93:71:51:f4:d1:c4:c6:ee:e0:26:ed:15:bb:f1:
44:85:e9:8b:36:1d:e3:f9:9e:e4:8d:2f:96:cc:cd:
ba:56:c8:92:b8:c8:05:41:ad:66:f0:c6:7a:4a:c1:
24:00:8d:55:b3:a9:25:d7:f6:2b:68:c7:cc:76:9b:
e8:06:fc:69:15:22:e0:67:59:a7:8b:e9:3d:1a:9a:
d9:c4:be:19:41:4b:37:ea:04:98:ea:46:9e:d2:a3:
bf:15:9f:a1:73:4f:14:1a:03:5d:2d:e4:5a:07:e1:
3d:c9:77:15:79:66:eb:bf:e4:0e:22:9c:37:9c:9b:
3b:00:61:83:53:55:37:30:b6:c0:6c:df:21:01:92:
8c:fb:57:c8:60:a2:0d:27:9f:6f:39:a5:7b:17:71:
15:eb:5a:a1:67:96:9d:b7:09:8a:ac:7b:4a:44:58:
9d:93:9d:74:89:8c:56:a0:b7:c6:19:6f:28:dd:a1:
70:8f:07:19:a8:aa:53:89:4e:6e:bd:48:81:1c:92:
14:85:62:f0:da:1a:a4:6f:27:a4:cc:1a:95:21:b4:
f7:5d:88:9e:20:19:f8:57:c2:40:9f:ec:47:04:89:
99:ee:fb:be:26:1c:ea:f8:8d:b1:9a:21:91:71:c0:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4F:0A:66:14:B3:A3:4A:70:91:44:51:7C:3A:FC:D2:73:E0:59:82
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/6C06E53C56DD11EF8B64F04A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
95:81:82:07:44:da:b7:1b:e2:f3:ee:8f:d1:2a:21:11:e5:8e:
a5:95:35:3f:8d:94:74:db:42:19:7c:72:4b:f5:93:c0:67:3f:
00:57:05:8c:af:61:a8:9d:4a:32:2e:b0:5b:da:83:20:20:da:
84:3e:e8:fc:ef:8b:14:e7:58:c4:f1:a1:58:f1:cf:72:c0:54:
e4:19:a5:cf:9f:37:d6:77:8e:37:33:22:d1:d1:3f:27:19:da:
af:0e:1a:03:6b:6d:37:69:27:62:2b:0a:aa:b4:84:3c:b8:62:
70:65:61:95:65:0b:90:9a:2f:e2:69:18:22:5f:25:fe:23:fa:
f8:57:46:9d:6b:a8:be:92:d4:fc:3e:2d:95:14:60:75:ed:59:
52:ea:37:53:d9:72:cf:75:8a:87:d2:d4:af:0b:3a:11:5f:4b:
c7:34:1b:23:f3:96:b9:af:ca:09:da:81:6a:6c:a2:cf:a2:6a:
f8:ed:05:db:81:e6:8b:77:69:84:43:cc:ff:72:95:ef:10:95:
26:17:0a:3e:e5:c6:a0:c6:c7:a2:84:ca:d8:c5:b0:6e:0a:e1:
97:9a:c6:3d:cd:18:a7:7a:be:5a:b8:03:4b:a0:ad:aa:19:67:
4a:bd:c6:37:63:83:21:43:92:48:53:a5:28:07:2a:82:1f:54:
6d:35:d6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 18:39:39 2024 by rpki-client on console-fra.rpki-client.org