Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/21E43DF0094511EF9923F170017001B1.roa
File: 21E43DF0094511EF9923F170017001B1.roa (raw, json)
Hash identifier: DJtHxX+TU1iM3ex+E7b0QyMwT92GwDOJ0PYABx8sRh0=
Subject key identifier: D1:74:13:1D:2D:26:90:73:FF:F8:5F:79:68:79:5C:44:62:FF:64:53
Certificate issuer: /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial: 0510
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/21E43DF0094511EF9923F170017001B1.roa
Signing time: Fri 03 May 2024 12:03:20 +0000
ROA not before: Fri 03 May 2024 12:03:16 +0000
ROA not after: Wed 31 May 2034 12:03:16 +0000
asID: 328745
IP address blocks: 102.209.48.0/24 maxlen: 24
102.209.49.0/24 maxlen: 24
102.209.50.0/24 maxlen: 24
102.209.51.0/24 maxlen: 24
102.217.248.0/24 maxlen: 24
102.217.249.0/24 maxlen: 24
102.217.250.0/24 maxlen: 24
102.217.251.0/24 maxlen: 24
102.221.154.0/24 maxlen: 24
2c0f:5000::/36 maxlen: 36
2c0f:5000:1000::/36 maxlen: 36
2c0f:5000:2000::/36 maxlen: 36
2c0f:5000:3000::/36 maxlen: 36
2c0f:5000:4000::/36 maxlen: 36
2c0f:5000:5000::/36 maxlen: 36
2c0f:5000:6000::/36 maxlen: 36
2c0f:5000:7000::/36 maxlen: 36
2c0f:5000:8000::/36 maxlen: 36
2c0f:5000:9000::/36 maxlen: 36
2c0f:5000:a000::/36 maxlen: 36
2c0f:5000:b000::/36 maxlen: 36
2c0f:5000:c000::/36 maxlen: 36
2c0f:5000:d000::/36 maxlen: 36
2c0f:5000:e000::/36 maxlen: 36
2c0f:5000:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 04 May 2024 06:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Validity
Not Before: May 3 12:03:16 2024 GMT
Not After : May 31 12:03:16 2034 GMT
Subject: CN=6634d288-c26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:2e:21:cb:0f:76:41:fc:af:36:fa:99:9e:
aa:2d:65:ee:f1:65:dd:cc:31:e7:a6:59:12:ae:4a:
3c:5d:2c:cc:9d:ac:be:d7:89:36:b3:9f:8e:d5:55:
ce:e1:6f:81:6e:4d:62:ba:8c:17:18:15:23:ea:cb:
51:48:59:71:6d:bb:32:da:ab:e0:f3:ed:21:6b:ff:
3c:54:9c:17:7a:29:35:fb:ec:87:44:b4:91:94:e9:
72:08:cf:e0:2d:96:0d:4e:7b:96:6d:8c:ba:05:63:
e4:85:0d:f7:88:39:60:08:2e:0e:8a:31:d1:de:1b:
70:74:5f:e8:ab:5b:8b:df:93:42:38:b0:ef:34:d2:
9d:6c:9b:e7:61:7d:89:08:ef:fc:08:8f:7c:08:ce:
6f:c5:d1:9b:f0:83:54:36:f8:09:1f:20:fd:03:7a:
3e:ad:0b:67:7e:7a:47:e7:65:87:4b:1c:82:35:d2:
b8:b9:56:c0:a9:83:05:5a:a1:ba:7e:48:56:d6:f8:
26:f4:e5:16:4b:1d:4b:e4:90:df:f7:0c:1b:6e:23:
3c:93:16:cd:9b:50:cd:31:e1:3a:a1:96:d7:33:02:
4a:2a:95:67:70:b6:b7:fd:3e:d5:85:67:39:45:b5:
87:83:22:de:1f:25:d6:7a:09:bb:96:1a:c6:54:3c:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:13:1D:2D:26:90:73:FF:F8:5F:79:68:79:5C:44:62:FF:64:53
X509v3 Authority Key Identifier:
keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/21E43DF0094511EF9923F170017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.48.0/22
102.217.248.0/22
102.221.154.0/24
IPv6:
2c0f:5000::/32
Signature Algorithm: sha256WithRSAEncryption
b1:d6:1f:bb:8e:a4:0f:16:7d:f5:45:21:a1:e6:01:73:d0:9f:
3d:a9:c8:d3:4d:1f:04:f4:6a:14:e1:73:e3:86:68:4d:01:eb:
0a:c6:d1:62:f5:c9:cc:6a:52:69:b3:c5:d5:fb:bc:24:f8:3c:
58:5b:aa:64:be:23:17:28:b0:bb:54:85:a9:b4:3e:e5:e8:e4:
fe:96:1a:1b:c6:97:bd:4e:0b:d7:3e:58:b2:09:28:42:36:50:
65:5b:68:14:62:26:19:a8:d0:94:83:9a:6d:18:0b:e7:b8:1e:
f4:65:8b:3d:5c:c2:b7:bd:90:c9:5a:a5:82:c0:09:3d:29:ab:
bb:1a:38:62:2a:cd:1f:7b:dd:7e:f7:79:2e:81:95:f7:0a:32:
a6:4b:31:23:a1:97:26:21:9e:f1:91:eb:da:c1:6f:36:95:7f:
c5:9a:29:0d:f5:22:81:96:8d:11:0e:1f:71:cc:27:4a:d1:23:
a6:af:eb:f8:54:f2:c2:67:45:87:c8:1a:b3:ea:05:71:bb:34:
e7:96:1f:cc:8e:41:1f:9d:38:1b:cf:9c:fd:c2:88:7d:b4:aa:
68:74:e8:14:b3:63:73:12:5c:30:fe:0e:36:22:5b:2f:c8:05:
77:bc:07:16:65:d8:6a:2d:55:e9:85:12:95:33:c7:a1:04:61:
89:e3:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org