Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/42E614C666D711EEBC555B114AD9E6FC.roa
File: 42E614C666D711EEBC555B114AD9E6FC.roa (raw, json)
Hash identifier: D9mlr03OChUjiGEm2hVl5Gn3MKSnUoc+df+QZTjVWts=
Subject key identifier: 2B:D7:48:27:C3:C4:8F:D1:74:D7:7E:C8:0B:D4:3C:C0:6E:2F:CB:C1
Certificate issuer: /CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
Certificate serial: 02
Authority key identifier: C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/42E614C666D711EEBC555B114AD9E6FC.roa
Signing time: Mon 09 Oct 2023 19:08:42 +0000
ROA not before: Mon 09 Oct 2023 19:08:39 +0000
ROA not after: Mon 09 Oct 2028 19:08:39 +0000
asID: 329099
IP address blocks: 102.216.236.0/23 maxlen: 32
Validation: Failed, certificate revoked on Sat 14 Oct 2023 17:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
Validity
Not Before: Oct 9 19:08:39 2023 GMT
Not After : Oct 9 19:08:39 2028 GMT
Subject: CN=65244fba-dd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:49:79:85:92:82:73:20:d4:06:c7:84:cb:
96:39:7b:07:a8:a3:22:ab:f1:56:e0:e2:04:8f:4d:
7e:bf:e8:97:3f:d9:5a:12:eb:eb:f0:50:95:65:2c:
55:da:60:c9:5f:0d:3e:05:32:f3:2a:56:0e:da:45:
06:71:44:77:f3:4e:fe:43:7a:df:11:de:ad:2d:a5:
13:9c:ec:49:82:38:68:ae:18:4a:82:f3:31:4c:90:
9b:2e:c4:7d:73:c1:66:01:65:65:1d:2d:10:c4:3e:
da:d7:7d:91:dc:63:49:ce:18:24:0b:93:1c:87:a2:
80:3a:62:fa:b4:17:8e:e9:56:70:bc:19:51:79:46:
4f:17:af:35:0a:dc:fa:8e:46:40:ed:f0:25:94:ae:
86:b7:23:7c:da:6a:9c:99:fc:10:36:6a:59:78:9e:
41:5a:d3:6a:a2:c0:06:0e:f1:63:e1:c9:2a:41:f8:
87:df:86:df:16:da:9f:72:50:de:b0:81:6d:aa:01:
7c:1f:4e:92:1c:51:12:24:2f:b2:73:33:86:ae:15:
42:da:df:07:d4:76:ca:95:7f:c6:17:e8:55:0a:56:
95:61:38:99:ea:45:11:86:7c:2c:98:6b:8b:f2:71:
c6:75:cb:25:52:11:9f:89:4f:f2:86:e4:50:67:1e:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:48:27:C3:C4:8F:D1:74:D7:7E:C8:0B:D4:3C:C0:6E:2F:CB:C1
X509v3 Authority Key Identifier:
keyid:C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/42E614C666D711EEBC555B114AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.236.0/23
Signature Algorithm: sha256WithRSAEncryption
32:87:39:0e:c2:74:ae:b8:48:0a:6a:c9:df:84:4c:67:d6:a4:
9f:b0:15:50:fe:16:e4:b1:52:95:63:08:e2:36:5b:e8:82:3f:
dd:52:36:14:c5:c8:69:e3:23:90:42:04:67:26:e0:b4:3f:30:
ae:43:26:4f:1a:8e:d9:5b:05:b4:05:00:78:3b:47:be:bf:f5:
c8:ca:64:59:ae:17:84:ff:8e:27:6d:fd:49:30:c8:74:11:ba:
af:da:00:5e:ba:cf:5c:35:5c:9b:cb:01:5d:ec:35:c3:cd:41:
0d:3a:5a:a8:67:2b:52:fb:c8:40:87:df:1b:56:38:82:8e:a7:
ab:e8:87:7c:c1:d0:c0:01:6f:ee:d2:10:63:24:25:0a:23:4d:
78:09:11:6b:3d:20:fc:03:30:8a:c0:99:d4:71:80:0d:77:38:
c8:56:cc:f3:c1:c8:d7:2e:b5:17:31:a7:80:e0:28:56:04:3a:
69:6e:14:3e:a2:e4:97:a6:6f:3b:1c:e7:e7:45:96:25:7a:8f:
a4:7b:39:d7:28:07:7e:db:0e:4b:9c:21:15:a9:8b:20:24:44:
d4:b3:fc:e7:a0:7d:60:85:39:57:a0:3e:c9:d1:32:a9:62:20:
b6:db:c1:e2:f9:2f:50:e3:56:4d:5c:7a:bd:09:e2:19:ea:3f:
6e:8a:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org