Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/78D245BE63B111EF85AECB4F762E951A.roa
File: 78D245BE63B111EF85AECB4F762E951A.roa (raw, json)
Hash identifier: tFtztWoRZSQCqB69bpNJRJwYBoQa+n1oDrhjKZrviGI=
Subject key identifier: 6D:F1:D5:BE:C0:99:0D:C2:F9:E1:B2:90:A2:4A:05:D6:0D:B0:70:4C
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 0483
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/78D245BE63B111EF85AECB4F762E951A.roa
Signing time: Mon 26 Aug 2024 13:45:36 +0000
ROA not before: Mon 26 Aug 2024 13:45:32 +0000
ROA not after: Fri 25 Aug 2034 13:45:32 +0000
asID: 37725
IP address blocks: 102.219.22.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Aug 2024 16:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Aug 26 13:45:32 2024 GMT
Not After : Aug 25 13:45:32 2034 GMT
Subject: CN=66cc8700-77c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:d6:26:2c:30:b6:97:69:ea:29:17:7f:4e:
27:c9:8d:f9:37:67:8f:2f:a6:8d:45:07:a4:55:b8:
98:cd:63:f3:d4:b2:0c:dc:25:4a:50:7d:0c:ca:32:
27:b3:c1:c2:13:fe:b6:d2:6f:f4:da:9c:56:c9:6f:
b5:98:96:ec:b6:91:ee:bc:0c:f5:5b:9d:84:56:29:
9a:fc:a8:62:5a:e9:cb:0b:83:bd:c9:90:c8:0a:5f:
28:c7:74:75:e2:ed:62:a6:60:51:c3:a8:0b:5d:80:
96:13:5a:e4:92:c5:7d:1c:ae:95:b2:7e:e9:23:9f:
4e:83:41:2e:ce:a5:8e:4a:cb:c1:25:87:f8:d7:d5:
39:0b:02:15:4c:f6:34:96:95:1d:5b:43:dd:be:11:
1c:42:0b:5e:b7:c8:19:c2:be:93:2c:4e:bd:67:78:
b9:a6:8d:af:fb:d5:90:36:eb:37:fb:d1:52:47:92:
2a:3f:fe:5d:62:50:cf:9b:cc:56:5d:5f:4a:31:1e:
ac:69:f8:e0:d3:4f:06:07:cf:16:7c:46:55:b5:f8:
9c:50:d3:70:1d:26:3e:18:33:38:89:5a:2c:69:09:
39:53:3a:fc:b7:bf:b5:62:af:d5:c2:29:8e:53:7b:
06:a7:d9:a3:01:43:c7:05:d9:a7:3b:89:a5:c7:48:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:D5:BE:C0:99:0D:C2:F9:E1:B2:90:A2:4A:05:D6:0D:B0:70:4C
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/78D245BE63B111EF85AECB4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.22.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ed:da:84:b3:61:04:d7:0a:76:ed:56:fc:90:4e:94:8c:52:
25:73:97:c2:13:6e:f4:89:7d:27:3b:bc:0c:58:51:06:b8:bf:
86:1a:72:1b:85:bb:72:30:5b:46:43:de:5a:b9:ed:65:11:04:
64:2d:e2:0b:2d:64:85:9b:a4:db:6c:7d:b8:e9:6f:05:90:da:
a4:bc:d9:94:d2:90:98:24:13:ff:aa:5a:39:5a:e6:57:ae:a9:
11:3b:f7:f4:54:b6:65:a1:0f:d2:ac:32:75:e1:f6:53:6a:89:
3a:11:c3:21:95:fb:29:c0:9b:82:12:0d:b1:de:88:77:3a:f2:
b8:42:cc:bb:6f:27:f2:dd:f9:00:ed:74:3a:66:4e:ad:0d:a3:
53:b7:36:86:9f:40:ba:8e:62:14:9e:3d:aa:01:e7:24:4d:17:
d9:54:61:ea:0b:0c:75:82:99:f3:4c:b4:ac:53:46:6d:31:5a:
e7:ab:ba:ae:30:03:dc:2c:c2:01:b8:ce:e5:d6:48:00:a6:ee:
ce:e0:00:81:10:32:f9:7f:44:8b:22:22:d6:e9:6a:47:d2:1a:
37:05:40:98:ff:78:d8:38:e8:24:bc:a3:23:70:c1:f9:28:69:
b3:fa:a9:b0:28:4b:c3:ab:4d:5b:43:eb:6c:e4:63:8f:3a:ff:
70:cd:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 20:17:03 2024 by rpki-client on console-ams.rpki-client.org