Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/A5BBCAA6093311EFA4240965017001B1.roa
File: A5BBCAA6093311EFA4240965017001B1.roa (raw, json)
Hash identifier: Ps15vaM+pZoiRD8cbloVOtzYJ8epfsucKaIL48mSXLM=
Subject key identifier: 36:A9:07:49:68:0B:89:ED:2F:01:3F:27:AB:CA:EA:A0:EE:70:26:0B
Certificate issuer: /CN=F36B86D4AF/serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Certificate serial: 0D
Authority key identifier: BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/A5BBCAA6093311EFA4240965017001B1.roa
Signing time: Fri 03 May 2024 09:58:10 +0000
ROA not before: Fri 03 May 2024 09:58:07 +0000
ROA not after: Sun 03 May 2026 09:58:07 +0000
asID: 329157
IP address blocks: 102.214.96.0/22 maxlen: 22
102.214.96.0/23 maxlen: 23
102.214.98.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 03 May 2024 09:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B86D4AF, serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Validity
Not Before: May 3 09:58:07 2024 GMT
Not After : May 3 09:58:07 2026 GMT
Subject: CN=6634b532-023e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:be:4c:65:99:15:ed:5a:ee:b3:3e:34:0d:
29:6d:7c:d0:06:57:1e:7b:dc:01:a5:d7:25:4c:43:
bd:12:17:89:a5:be:45:db:2b:14:5d:c8:be:db:7e:
64:a7:b8:35:5d:fc:c9:3d:1a:70:32:ed:cc:40:d9:
e0:fa:66:57:f7:88:c4:21:06:91:73:4f:d3:9f:b9:
9f:de:10:d8:ab:74:32:47:b1:c0:21:5c:57:3e:06:
4b:ed:ea:7b:91:26:ea:98:56:be:33:2a:2f:f1:b7:
3f:40:44:5c:62:09:cf:d8:d4:76:0b:1c:bf:4f:3c:
f1:ae:ca:92:e0:75:bf:5b:b5:80:95:15:79:16:85:
f5:f5:cf:d3:68:72:40:54:09:d7:96:9b:76:83:73:
9c:9f:84:aa:93:2c:22:ce:a4:b6:91:45:1f:92:f8:
84:e4:db:3c:a5:44:68:d8:01:78:e3:e5:2d:bb:d0:
95:c8:b9:38:f1:54:ca:82:43:3b:1d:40:d7:ad:cb:
f6:48:43:c9:0e:d6:20:32:59:3f:45:7c:cb:66:da:
70:aa:cd:b3:77:bc:b2:14:ad:d3:a8:52:1b:a7:89:
1b:4c:4b:c0:d9:f5:81:8d:1d:fc:48:43:7e:6e:8c:
f0:a6:57:76:ce:ea:95:10:e4:1f:92:72:d5:c9:c7:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:07:49:68:0B:89:ED:2F:01:3F:27:AB:CA:EA:A0:EE:70:26:0B
X509v3 Authority Key Identifier:
keyid:BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/A5BBCAA6093311EFA4240965017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.96.0/22
Signature Algorithm: sha256WithRSAEncryption
54:3f:3c:8e:8c:76:f0:67:f4:f7:3e:0c:9c:6b:62:81:47:4e:
11:e5:05:c7:26:6c:db:16:a9:b7:44:c2:f2:6c:23:49:97:85:
da:51:46:8d:5e:dc:be:e6:4d:4e:2f:41:5e:f5:8a:73:2b:87:
af:3a:a2:46:80:38:04:a2:da:d4:d7:e9:1a:01:29:2f:f5:2c:
c0:d1:6b:c6:a9:c5:d9:73:8e:60:82:92:f1:f5:21:df:5e:7c:
6e:c7:92:21:d9:06:e7:57:71:7c:09:c2:7c:f4:e3:37:dd:14:
6a:0f:0e:d2:2d:f4:46:73:a3:e5:79:c7:09:bb:24:06:bb:22:
fd:7c:5a:31:df:8e:55:b0:8c:3b:17:cf:ba:91:b6:76:79:50:
d7:cb:6c:d3:01:b7:af:30:3a:1c:80:31:47:a4:b4:3a:09:eb:
15:41:ed:58:50:f3:20:c8:29:75:d7:6e:bb:3f:36:bb:42:21:
82:8f:35:85:2d:5a:52:e6:e4:3b:f8:d1:c0:a9:34:b8:5b:5e:
b2:2c:15:42:b8:e9:1c:99:b3:ee:87:13:4f:d9:50:49:62:23:
49:2f:79:e1:03:a7:82:64:f2:41:b7:09:6f:52:97:c7:71:5a:
92:ae:73:5d:4b:83:4b:cd:99:0e:80:c9:4d:cc:dd:7a:24:23:
06:4c:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:37:27 2025 by rpki-client