Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/483195A66AB311EE9AD0985E4AD9E6FC.roa
File: 483195A66AB311EE9AD0985E4AD9E6FC.roa (raw, json)
Hash identifier: P2HKvws69ckLeCHFDjUcmYjaL+qFRCUAlHxZf1cN6NA=
Subject key identifier: E0:5B:30:12:6C:DD:D1:01:2D:B4:30:BB:36:38:65:F3:A3:A8:4E:D6
Certificate issuer: /CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
Certificate serial: 0A
Authority key identifier: C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/483195A66AB311EE9AD0985E4AD9E6FC.roa
Signing time: Sat 14 Oct 2023 17:01:14 +0000
ROA not before: Sat 14 Oct 2023 17:01:10 +0000
ROA not after: Mon 14 Oct 2024 17:01:10 +0000
asID: 329099
IP address blocks: 102.216.236.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Oct 2023 18:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
Validity
Not Before: Oct 14 17:01:10 2023 GMT
Not After : Oct 14 17:01:10 2024 GMT
Subject: CN=652ac95a-f725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:ab:a0:a2:eb:25:df:89:cc:f9:19:bd:c6:
89:1e:ba:ce:d5:ad:db:5d:fe:1d:28:0b:8c:34:11:
98:30:07:bf:1c:c4:2c:5e:b9:e3:45:d0:69:c5:4f:
b2:48:64:f3:f9:ea:77:58:3c:9b:cb:0e:96:87:93:
00:04:9a:31:2f:7d:bb:aa:39:9b:4b:72:36:1c:48:
a7:78:98:92:9f:12:aa:ed:d9:0f:6a:8e:cc:8e:2b:
ad:c1:92:7e:dd:cd:08:05:49:19:f3:af:b7:b3:de:
e8:8d:a9:45:42:28:30:8a:33:eb:5f:49:4f:7d:ba:
99:47:39:6c:03:79:73:62:ff:d6:52:7c:9c:44:3e:
af:aa:cd:e1:c8:94:18:a7:33:e8:42:11:c7:f5:e3:
75:49:40:24:50:43:92:67:fc:41:06:22:5d:48:10:
d6:1b:ed:5e:ab:0b:65:e3:19:8b:74:43:e5:04:8a:
6d:e4:cc:b1:31:d7:ce:de:be:95:f1:4f:7b:40:51:
bd:a7:9b:62:e0:e3:ad:76:5f:fc:32:0e:df:bf:ce:
92:f1:93:1f:6a:11:c1:cc:56:9d:98:02:5a:de:47:
da:56:fb:3b:53:ee:a8:eb:45:6c:66:0a:f1:1a:cc:
82:f8:d6:cb:77:67:8c:37:65:b9:3f:82:0d:dd:c9:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5B:30:12:6C:DD:D1:01:2D:B4:30:BB:36:38:65:F3:A3:A8:4E:D6
X509v3 Authority Key Identifier:
keyid:C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/483195A66AB311EE9AD0985E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.236.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ee:24:9f:a3:95:eb:dc:fd:43:67:89:bc:b3:7b:f8:4c:33:
a8:37:77:5d:79:b0:34:15:58:83:22:5b:a6:a9:6b:c5:65:8c:
f2:fc:f4:c8:42:07:6a:03:4d:4f:83:54:36:c1:09:75:2a:4b:
ad:17:3f:d0:ca:6d:b9:6f:9a:7a:29:42:ac:d6:e8:00:f5:e8:
91:c9:4c:5e:b7:6e:c5:6f:f3:e6:e4:24:7c:45:61:a7:3e:cd:
e0:c9:fa:91:3f:22:f6:c9:57:bf:0d:c6:e8:86:10:17:e2:fa:
66:be:02:14:f5:6b:74:c7:c5:b4:47:b5:30:f0:b5:e1:8d:62:
43:89:a2:0d:e7:02:16:9a:84:cb:7f:d0:73:ba:c8:a3:b6:82:
ff:46:62:55:b3:30:5f:93:12:4b:5c:b1:34:2f:ce:92:dc:86:
0f:20:95:b7:44:d7:62:d2:6e:53:66:dd:a6:7e:96:11:e9:cb:
ee:73:4b:63:48:4d:0a:30:2a:c2:b0:f6:da:ee:7a:76:d6:9c:
45:57:91:b2:b7:d9:68:72:d8:6a:e1:5c:31:52:02:d8:42:e8:
86:46:72:7a:a8:67:c9:b4:50:ba:5a:34:ec:b1:02:a2:f7:be:
0c:ba:e9:d1:5c:d3:ab:1c:c5:08:80:36:9a:cd:2d:12:16:b9:
e9:e1:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org