Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/FC79E9CA771C11EFB546A34C762E951A.roa
File: FC79E9CA771C11EFB546A34C762E951A.roa (raw, json)
Hash identifier: L4OGkVAZG6oyX39RBrhPDS8WF/NMEWwYgbibMyH4PUU=
Subject key identifier: 41:A2:37:48:8F:B0:61:E0:94:02:62:2E:CF:80:3F:27:B3:84:F2:3A
Certificate issuer: /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial: 04
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/FC79E9CA771C11EFB546A34C762E951A.roa
Signing time: Fri 20 Sep 2024 06:53:05 +0000
ROA not before: Fri 20 Sep 2024 06:53:01 +0000
ROA not after: Tue 30 Sep 2025 06:53:01 +0000
asID: 328444
IP address blocks: 102.128.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 20 Sep 2024 08:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Validity
Not Before: Sep 20 06:53:01 2024 GMT
Not After : Sep 30 06:53:01 2025 GMT
Subject: CN=66ed1bd1-ab3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:45:a4:23:75:18:d7:3b:0c:f0:4c:28:81:
af:b1:2e:3e:2e:9f:f9:ed:99:af:27:ff:7a:d2:3f:
8d:f1:ac:93:bf:c5:8c:68:8f:f7:06:5a:e6:e6:fa:
7a:97:20:2a:85:b4:a5:e8:e9:4c:ef:30:d2:87:6e:
23:df:65:30:30:8d:b8:82:80:9c:d5:f4:05:bc:f6:
a5:6b:8f:d5:f3:db:45:2c:7b:41:12:59:91:e2:da:
ce:17:c9:27:0f:a6:10:c3:64:45:e1:b1:cd:79:23:
d6:8a:6f:bc:45:bd:6d:0e:13:87:7d:d8:08:1e:1a:
1e:dc:db:01:76:e7:85:4f:f3:0c:76:9e:52:e1:14:
83:d4:8c:33:58:1e:5c:b1:d7:1e:50:3d:19:bb:21:
92:a7:33:d4:b7:d6:81:8e:9f:07:f7:94:ee:6e:ff:
65:56:45:69:ff:01:79:60:ac:9f:53:d7:2b:cc:17:
9c:b8:6e:18:84:12:c4:c7:b1:e6:e2:d8:03:45:62:
bb:e0:d0:59:a7:5b:9c:da:74:6c:14:35:f9:54:f5:
4e:4a:f2:6b:1f:bb:74:36:78:2f:89:d9:ee:10:10:
6c:04:a6:92:65:93:f8:51:b4:77:d5:3b:a2:93:c9:
1c:04:63:02:63:c1:9e:ae:48:0d:64:7e:0e:27:2b:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A2:37:48:8F:B0:61:E0:94:02:62:2E:CF:80:3F:27:B3:84:F2:3A
X509v3 Authority Key Identifier:
keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/FC79E9CA771C11EFB546A34C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.128.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:b3:f3:75:75:37:a2:e4:16:d2:a2:46:51:96:82:9f:08:00:
55:b8:c6:0a:ce:bf:74:a0:d3:60:2b:c1:db:ea:9f:82:d6:19:
bc:d8:63:d3:68:c9:7c:c5:61:60:df:9b:52:b0:c4:d4:06:97:
00:b2:32:0b:2e:5d:6f:f2:e7:d2:a8:a7:a0:fd:d6:ff:df:be:
32:4d:79:9f:ab:3a:9e:e1:21:13:dc:c7:24:47:42:50:6c:23:
d3:5a:5f:7f:93:9a:99:bf:78:2b:8b:fe:0a:22:95:6e:6a:b5:
a0:0d:f8:19:cc:3d:1f:05:62:d0:72:e7:85:e9:47:51:49:e5:
f1:bb:92:19:7f:03:ba:78:a3:d5:94:9b:e2:72:55:a7:1a:1e:
7b:1e:0f:7f:b6:e4:4e:c5:0e:8d:e4:09:55:3b:2e:60:5f:66:
9c:a4:5a:28:f9:31:85:bf:8b:0b:d8:44:c5:85:56:2f:8b:ca:
d3:7a:02:4f:d5:ab:42:86:09:b5:35:25:e3:97:1e:37:d0:9b:
11:b9:70:95:b6:8e:4c:e6:a7:80:8c:99:4c:3b:ab:a8:d4:a4:
66:07:a8:54:29:95:b3:3e:1d:95:44:70:22:d0:6e:57:14:af:
98:53:34:bf:99:1a:7b:fd:6a:93:83:4b:69:b9:49:e2:2e:75:
2c:ed:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 11:20:00 2024 by rpki-client on console-ams.rpki-client.org