Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/CFB4650A56DD11EF8389A84B762E951A.roa
File: CFB4650A56DD11EF8389A84B762E951A.roa (raw, json)
Hash identifier: IjIcpYi9kBalyltzARgZQ6VmIXWSEn3IHma1BrpuUec=
Subject key identifier: 27:BB:36:4F:91:A3:33:2E:49:20:D0:E7:A6:A1:59:D6:33:AF:8C:83
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 046D
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/CFB4650A56DD11EF8389A84B762E951A.roa
Signing time: Sat 10 Aug 2024 06:00:14 +0000
ROA not before: Sat 10 Aug 2024 06:00:11 +0000
ROA not after: Wed 09 Aug 2034 06:00:11 +0000
asID: 5536
IP address blocks: 102.218.130.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Aug 2024 16:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Aug 10 06:00:11 2024 GMT
Not After : Aug 9 06:00:11 2034 GMT
Subject: CN=66b701ee-2277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:a9:ec:3c:18:11:84:a2:64:1d:05:5a:59:
48:89:1f:15:ac:5c:1c:30:5a:4c:4c:72:6f:49:60:
89:df:d6:48:a0:69:ff:ff:b2:07:e2:3b:4c:3f:80:
ae:eb:36:ae:5f:a5:f2:8a:d0:10:89:40:2d:c1:67:
3f:51:ea:f3:fd:5f:24:54:1b:72:c5:64:f6:f0:f0:
b4:9e:ba:c9:42:4c:be:7f:0e:1e:30:99:8d:a0:8f:
5e:b2:38:51:e0:44:3e:f3:56:6d:b8:aa:16:45:5d:
5b:54:37:15:0e:b3:b1:18:0b:dd:2e:5e:f5:07:b9:
ad:38:47:c2:08:46:96:8b:a4:f8:80:c3:36:ec:30:
5c:62:57:f5:be:96:10:d7:2c:8c:f1:92:4e:54:e2:
7a:d0:cc:e8:d7:1e:05:bc:9f:30:bb:84:10:c0:25:
39:c9:26:06:6e:d4:ba:5b:89:c7:dc:d3:1b:a6:02:
09:a9:35:48:9a:0c:56:09:02:66:7d:30:ec:85:4a:
aa:c6:b0:46:dc:07:47:19:b7:80:ef:ce:f8:47:e0:
1b:10:fe:f7:d1:d1:46:57:7d:d5:8d:c0:41:09:d4:
46:d9:99:39:9c:40:e3:e4:bb:f2:5c:89:60:5c:7c:
ca:c7:65:20:1c:3e:30:61:a3:3b:4e:31:3d:82:c3:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:36:4F:91:A3:33:2E:49:20:D0:E7:A6:A1:59:D6:33:AF:8C:83
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/CFB4650A56DD11EF8389A84B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a9:2b:e8:d1:9e:f8:c3:4a:5b:73:2d:15:ac:6c:56:b4:e6:
df:3e:6a:24:50:4a:0a:e8:c2:db:9a:c3:c3:0d:18:0b:f6:b7:
09:7b:e6:28:55:43:8d:05:39:49:3e:68:3e:03:2e:b7:f9:3c:
91:b7:f0:f6:4b:2e:2b:e5:0a:53:c6:9e:82:28:f5:84:f5:f9:
47:85:b8:93:be:49:57:e7:5c:b0:3f:7e:94:db:1d:e2:3f:8f:
55:d4:54:ac:b2:43:9a:d8:02:65:d1:46:2c:05:ec:80:8e:a4:
4e:ad:a4:0d:65:8e:eb:94:06:93:8a:81:f5:ef:73:ff:b9:35:
fe:93:fa:75:22:d4:de:e5:cc:64:a1:2b:2f:3c:a3:cf:84:23:
ef:b0:b4:78:4b:d5:0b:58:38:5a:37:85:31:f9:c0:de:d1:43:
38:f4:d3:dc:27:7a:b2:81:6a:40:6a:50:0d:b8:90:a1:3e:84:
42:a9:b6:53:a2:76:da:c2:54:35:b0:c1:07:1b:14:c1:c7:87:
5d:f6:99:9e:d7:da:96:5d:5d:64:fb:39:e7:c7:46:03:85:81:
ca:75:cc:72:de:18:27:94:8a:55:ea:89:17:34:dd:fb:95:4d:
6b:4f:5c:a9:46:4e:4e:d8:e1:cd:4c:06:07:80:7f:61:42:45:
67:2d:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 20:17:03 2024 by rpki-client on console-ams.rpki-client.org