Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/AE4A16B263CB11EFB0267170762E951A.roa
File: AE4A16B263CB11EFB0267170762E951A.roa (raw, json)
Hash identifier: pPuZatLTU89g7Ou4n8AFusydYWsdu+hVj2MSZSYL7Xs=
Subject key identifier: BA:76:D5:0D:67:A1:D3:CE:A5:AC:5F:D3:7C:BC:E2:00:07:B8:5E:91
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 0489
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/AE4A16B263CB11EFB0267170762E951A.roa
Signing time: Mon 26 Aug 2024 16:53:13 +0000
ROA not before: Mon 26 Aug 2024 16:53:09 +0000
ROA not after: Fri 25 Aug 2034 16:53:09 +0000
asID: 5536
IP address blocks: 102.218.128.0/24 maxlen: 32
102.218.130.0/24 maxlen: 32
102.219.22.0/24 maxlen: 32
102.220.125.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sun 17 Nov 2024 05:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161 (0x489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Aug 26 16:53:09 2024 GMT
Not After : Aug 25 16:53:09 2034 GMT
Subject: CN=66ccb2f8-cb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:e0:84:8d:18:1e:25:a2:a3:82:b0:2d:32:
ea:a2:21:a6:40:04:a9:5a:2b:ea:11:de:ea:09:8f:
ed:fe:d3:d5:ae:f3:6e:16:d5:ca:fe:52:2d:1c:e6:
2a:2d:23:56:ec:48:ca:b2:f8:23:ad:ed:8d:11:69:
f4:a5:8d:73:25:0f:38:68:62:72:6c:7a:08:32:e2:
7c:c2:8b:8b:b0:a1:f3:be:9f:68:64:f9:a2:1b:9c:
17:3d:cf:9c:cb:54:a2:ac:18:20:39:5f:a9:30:83:
4d:b9:8c:c8:39:78:e0:9b:f8:e4:fe:44:b7:35:b6:
75:1c:11:3b:56:aa:03:69:98:87:4a:53:db:93:0b:
94:bf:67:8f:d8:53:92:e1:82:34:fb:e8:3d:d8:29:
90:30:80:79:8b:f8:50:cc:3a:17:c3:b2:51:a0:bd:
54:39:88:98:0d:ef:28:78:67:89:8e:79:31:0a:e1:
4e:bb:d6:63:d0:3d:20:86:fd:ba:84:4c:71:9b:06:
00:dc:df:89:d9:a1:bf:c5:c8:38:4d:cc:3a:9b:04:
1e:f8:ea:34:8c:ba:a7:4e:0d:b1:64:47:9a:69:f7:
b9:9b:45:96:1e:8b:36:e0:b5:88:84:ff:a9:68:1c:
cd:fc:8b:d6:f4:13:52:23:85:69:da:39:9a:b8:8a:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:76:D5:0D:67:A1:D3:CE:A5:AC:5F:D3:7C:BC:E2:00:07:B8:5E:91
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/AE4A16B263CB11EFB0267170762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
102.218.130.0/24
102.219.22.0/24
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c0:64:8f:cb:0c:70:07:e3:00:8a:45:f8:e0:a2:54:9f:9b:
6c:6f:28:5c:4a:b4:04:48:6f:f6:48:ba:57:17:96:24:ce:5e:
eb:f5:2d:9c:c1:34:e4:81:20:54:ae:35:28:3e:af:b0:7c:3a:
fc:11:cf:07:21:77:ab:7a:a5:60:9d:b7:72:11:9b:c2:8c:5b:
fc:00:d6:5c:64:b7:24:7e:32:63:5d:d8:7a:ed:c3:f1:4a:1a:
95:97:a1:72:8f:6f:6f:f2:44:1d:df:10:78:0b:e2:64:a9:eb:
ea:19:90:89:d3:2e:46:27:3c:46:30:e1:1c:ca:ef:3d:70:6c:
95:f8:82:39:0b:19:72:3f:75:1d:6c:3d:06:88:66:0a:ff:3e:
bb:8f:61:e8:23:be:ef:61:43:57:3d:29:74:e9:14:a6:3a:d8:
03:8d:96:7c:da:0f:94:25:e3:46:c2:08:43:61:3b:cd:5f:86:
55:62:64:39:83:96:22:2a:c5:06:19:2b:71:a2:e0:7b:d4:c5:
ab:96:47:60:e4:0e:34:bd:33:c0:33:47:bc:b8:08:b5:9b:f9:
f8:c8:cc:00:fd:43:34:07:63:1b:f6:79:75:92:3d:c8:c8:09:
0a:2f:3d:97:05:1e:e7:30:fc:7e:13:71:42:58:e9:5a:58:0b:
c4:f4:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 07:05:06 2024 by rpki-client on console-fra.rpki-client.org