Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/2F2405C4F92611EE87B8D6FC007001B1.roa
File: 2F2405C4F92611EE87B8D6FC007001B1.roa (raw, json)
Hash identifier: YbxlB+8zxKfaZfmQCpn76TXnQzS59+95H5M71jB24HM=
Subject key identifier: D6:37:B4:CC:5D:51:24:91:98:73:0D:08:37:A7:95:E3:F1:CF:23:60
Certificate issuer: /CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Certificate serial: 44
Authority key identifier: E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/2F2405C4F92611EE87B8D6FC007001B1.roa
Signing time: Fri 12 Apr 2024 23:41:29 +0000
ROA not before: Sat 13 Apr 2024 23:41:24 +0000
ROA not after: Thu 01 May 2025 23:41:24 +0000
asID: 34465
IP address blocks: 102.209.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Apr 2024 08:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Validity
Not Before: Apr 13 23:41:24 2024 GMT
Not After : May 1 23:41:24 2025 GMT
Subject: CN=6619c6a9-7ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b4:99:33:1a:a5:67:eb:96:8a:de:f3:4b:e7:
b3:72:65:5b:e2:59:65:ef:53:56:38:3c:47:9f:2d:
57:cb:e0:e2:70:f4:16:f9:87:48:4d:c8:6f:52:ba:
f6:7b:a4:00:b9:7d:a7:d3:ba:6a:b5:56:de:2f:cc:
01:4a:58:38:e6:75:09:39:dc:ec:71:fb:2b:a5:69:
c6:91:7e:09:06:52:19:b7:a2:d2:53:c1:5c:cb:14:
94:34:78:e9:82:99:81:0a:d8:f1:f0:56:4d:ce:72:
85:47:07:af:1f:bb:b1:90:c4:be:41:21:ea:44:48:
7d:1c:74:44:9a:1b:f0:88:a7:69:5f:05:63:06:31:
59:ad:c0:13:02:c3:36:87:9e:03:ab:49:16:7b:3f:
1c:6f:8d:eb:30:b7:04:58:88:e3:c4:8e:ef:23:da:
41:86:bb:26:6f:4d:8c:90:e6:c9:e2:a7:99:37:ed:
59:71:9a:2d:09:52:11:6b:2a:c7:44:be:6d:8b:3d:
dd:9b:cd:70:ec:89:73:34:ba:27:9e:c3:4e:3a:07:
ee:9b:8a:da:ac:cd:03:63:c1:a4:2a:6f:e3:fb:d6:
8c:bc:04:61:f4:0b:1b:87:59:ce:ad:a8:82:db:5a:
42:93:89:f3:7d:af:e0:95:58:ff:aa:31:c0:fe:be:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:B4:CC:5D:51:24:91:98:73:0D:08:37:A7:95:E3:F1:CF:23:60
X509v3 Authority Key Identifier:
keyid:E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/2F2405C4F92611EE87B8D6FC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.243.0/24
Signature Algorithm: sha256WithRSAEncryption
40:89:fd:6c:de:9f:10:e2:bb:3e:03:cb:40:00:85:c3:5b:58:
39:1d:c6:65:9f:f1:c1:52:13:15:ce:35:73:56:3f:1c:9c:30:
1c:60:03:1a:e9:8a:d4:3f:85:8d:38:af:91:dd:35:d6:df:c6:
83:f8:5d:3c:dd:af:7b:6d:33:f6:7a:4b:01:19:83:2b:32:ca:
32:43:fe:0a:f2:d4:af:ad:02:78:85:b8:05:36:3c:c4:27:f2:
14:3a:be:af:f6:ab:ce:60:b5:af:6d:e8:81:6e:59:97:74:84:
ef:28:c5:8d:44:71:30:30:24:bd:e8:7e:d5:51:07:b7:30:62:
11:e1:2d:93:50:e2:83:52:11:fb:6c:91:34:71:4a:9c:12:a8:
89:e4:a3:18:9e:85:75:ec:b6:ab:8b:2f:80:c6:ef:46:19:b6:
53:16:37:d2:ab:2c:32:2f:ff:3c:6a:0f:57:32:eb:e2:a8:81:
7f:c6:03:6a:5d:06:ed:09:e4:2a:af:35:22:a3:3c:b4:14:90:
1c:a5:69:70:4a:ad:97:f9:20:f2:d3:a1:8e:d1:19:2e:c7:5b:
bd:b5:76:a3:de:37:e9:61:0f:66:42:ba:e7:d3:7d:4d:4f:14:
65:b3:a5:53:0f:ce:c3:d3:32:20:9a:6d:bf:16:f4:27:54:e7:
65:05:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org