Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/87F5435656DD11EF93A2144B762E951A.roa
File: 87F5435656DD11EF93A2144B762E951A.roa (raw, json)
Hash identifier: uNzjx8g9w0qn65tzVnXn7+6ZDN/9EqcVjW9ImwehVic=
Subject key identifier: B7:60:0C:24:33:04:A0:AE:95:FB:02:6B:02:D2:D2:6A:48:FC:CA:1F
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 0468
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/87F5435656DD11EF93A2144B762E951A.roa
Signing time: Sat 10 Aug 2024 05:58:14 +0000
ROA not before: Sat 10 Aug 2024 05:58:11 +0000
ROA not after: Wed 09 Aug 2034 05:58:11 +0000
asID: 5536
IP address blocks: 102.219.22.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Aug 2024 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Aug 10 05:58:11 2024 GMT
Not After : Aug 9 05:58:11 2034 GMT
Subject: CN=66b70176-1ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:37:f4:a8:fc:8f:f9:d9:f7:48:65:c5:89:
ce:da:18:9a:84:fd:83:53:12:d4:8c:45:00:28:d1:
7e:0f:cf:b8:7f:5a:be:5b:f8:54:8b:01:91:ba:0c:
d4:0d:c4:07:10:4f:2f:e8:40:9c:3d:11:27:37:05:
87:c0:eb:1d:36:dd:e1:1c:90:23:ef:1c:f1:5f:fb:
fc:3d:d6:2d:6b:c2:61:b4:f4:61:f7:5e:ef:d4:4e:
bc:d0:22:26:29:5f:5a:8e:9d:80:45:02:6d:df:38:
ee:7b:58:7c:06:f8:6c:f8:35:3e:d4:ed:4a:8c:f3:
55:c8:3c:3f:4b:b6:88:05:e4:25:b9:6e:42:4a:98:
11:8b:c3:c4:d2:3c:c4:74:d7:ed:4a:0b:cd:2a:58:
c0:df:9e:d4:eb:f7:3d:bd:7f:b6:43:b2:d1:44:89:
ba:10:27:49:b7:d4:8f:70:6b:2a:d1:e9:3a:72:2c:
7e:2f:c7:97:ce:b5:f8:37:95:05:f5:c0:58:8e:03:
60:2a:53:6d:54:f3:d8:ef:76:fe:7c:bf:a3:ea:1e:
ef:be:43:83:06:93:5c:99:bc:45:da:24:b5:fa:47:
3e:8c:bd:fd:d5:92:e3:d1:d6:ee:a4:73:af:81:14:
35:69:84:32:6f:13:6f:f9:15:96:fc:70:25:2c:23:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:60:0C:24:33:04:A0:AE:95:FB:02:6B:02:D2:D2:6A:48:FC:CA:1F
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/87F5435656DD11EF93A2144B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.22.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8c:a0:8e:76:af:fe:6b:ff:07:7a:a3:f4:f6:19:25:71:ce:
98:8c:ec:e8:aa:b2:27:71:a2:5f:0f:e2:04:e4:b9:27:0f:80:
7d:ee:2f:e2:26:2f:63:1b:eb:4f:6a:cb:a7:e5:f5:4c:0d:f6:
c7:a1:85:e0:53:2c:f1:46:a1:fe:82:2d:68:ca:33:b5:57:28:
5b:df:e6:0c:02:9c:04:af:1d:50:c3:d9:5d:a4:32:e1:09:47:
85:46:e9:10:90:9c:db:d6:e1:d6:92:2c:03:02:24:de:d7:5a:
76:e8:91:25:12:b1:8d:9c:c0:c0:d9:f5:5b:fc:7c:03:7a:d6:
51:ab:12:3d:96:dc:58:32:47:94:ff:b9:cd:46:1a:a7:7a:bb:
fa:f2:3d:2a:cf:a8:63:2c:cd:29:a6:4b:a4:f4:32:36:1a:bb:
f3:18:34:f4:8b:50:e9:83:38:64:f0:9b:d0:9f:aa:80:9d:93:
81:d7:39:88:a8:0c:45:d4:51:c4:48:56:75:43:1b:f5:17:e7:
6c:65:10:a9:67:16:2a:d8:af:37:bc:ad:06:45:8c:0a:87:47:
d8:bc:71:68:92:50:b1:3d:26:bb:e5:ad:2a:94:4a:cf:ef:0a:
98:a8:83:2f:15:84:0e:44:73:87:fd:18:56:da:d4:fb:2b:e6:
5b:b6:ee:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 18:04:20 2024 by rpki-client on console-ams.rpki-client.org