Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/00D1E790819811EFB4D3EF4C762E951A.roa
File: 00D1E790819811EFB4D3EF4C762E951A.roa (raw, json)
Hash identifier: VqG1IdIEbtKRu9zye8aiDXSoYgGTKtG8zgDslNsjof0=
Subject key identifier: 62:C4:FF:B1:1B:4E:15:F4:17:BB:6A:87:6C:1D:E5:4A:7C:0C:F1:20
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 0111
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/00D1E790819811EFB4D3EF4C762E951A.roa
Signing time: Thu 03 Oct 2024 14:58:52 +0000
ROA not before: Thu 03 Oct 2024 14:58:48 +0000
ROA not after: Mon 03 Mar 2025 14:58:48 +0000
asID: 328988
IP address blocks: 102.208.96.0/24 maxlen: 24
102.208.97.0/24 maxlen: 24
102.208.98.0/24 maxlen: 24
102.208.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 11:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Validity
Not Before: Oct 3 14:58:48 2024 GMT
Not After : Mar 3 14:58:48 2025 GMT
Subject: CN=66feb12c-2bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:59:5e:e7:06:63:20:fd:a8:cb:61:8c:bd:
07:f9:14:49:ad:97:7c:9d:e7:7d:60:85:3f:0e:fb:
2c:e9:05:d0:a0:12:9b:1e:db:a7:31:3a:ba:e9:53:
bf:b5:49:87:81:e4:94:13:58:4c:4b:54:5b:c3:19:
74:6e:73:0e:a6:be:d7:70:de:32:fb:96:1f:ab:e1:
97:ad:7c:9c:c5:9a:da:11:41:88:ae:4d:03:d7:80:
aa:b2:ae:89:dc:66:dc:f9:d3:43:c5:9f:22:df:79:
0a:24:f0:d7:f7:7a:43:55:34:72:fe:9a:89:17:fa:
f7:18:d4:56:96:f7:1e:09:e6:9d:1e:85:8e:b8:a5:
31:72:3c:e6:5e:1c:41:23:8a:6d:65:9e:0a:b6:68:
b6:29:35:af:f2:ef:1b:5c:a0:ec:f0:a9:72:fe:7b:
a2:2f:8f:07:8f:f8:a8:33:64:10:4f:04:b3:70:eb:
a2:b6:a9:14:a6:f8:ab:13:95:c3:bd:fe:4c:72:9f:
25:69:9f:95:a5:a5:19:83:75:3f:90:5f:32:2c:3d:
dd:51:c0:2c:c5:49:d1:08:77:5b:bc:1f:b5:41:c2:
de:47:13:56:3a:0c:32:67:af:72:05:66:f6:8c:04:
c5:e0:69:2e:b8:b6:d3:9c:ae:87:83:49:15:bd:e1:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C4:FF:B1:1B:4E:15:F4:17:BB:6A:87:6C:1D:E5:4A:7C:0C:F1:20
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/00D1E790819811EFB4D3EF4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.96.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:9b:cb:f4:ad:7b:1b:7d:98:ee:f5:42:e8:9b:ab:6a:d4:75:
02:b8:56:a1:47:13:2d:ec:e7:a1:21:af:18:2d:78:6f:76:01:
70:84:26:a8:63:af:f1:6d:63:60:9a:0c:ce:a3:d3:db:cc:75:
87:27:d6:da:c3:72:da:29:02:aa:61:f7:a0:8e:a5:df:64:cb:
bb:13:97:26:e1:96:5a:ba:8a:6d:d9:08:f4:df:29:b2:65:5b:
3c:fa:d6:56:01:8b:5f:1d:40:d1:0b:09:90:9a:5a:84:63:2e:
b8:9f:c1:e6:3b:cf:90:77:04:c5:90:1f:35:96:cd:df:3b:3d:
6f:7b:7e:4e:0d:53:56:24:a5:1b:a3:a3:22:2e:e4:f5:14:91:
73:48:5b:84:d5:51:4d:87:65:06:6c:ae:7f:cd:d6:b2:6d:89:
5f:be:5e:37:4b:61:a4:58:69:ea:f4:fe:cb:d2:aa:b1:b4:19:
03:c9:af:aa:dc:5f:db:a8:12:62:e7:ca:03:1b:d3:c1:e0:87:
b4:41:3c:0c:79:98:13:6b:25:4e:07:ab:96:f9:cb:0b:f3:b3:
fd:88:b3:db:54:7c:fc:f4:fd:04:c9:53:6e:c3:47:c3:2f:21:
9f:7c:7b:3d:ce:7e:fc:34:b5:6d:a0:e5:79:77:b7:11:ee:dc:
96:17:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:52:11 2024 by rpki-client on console-fra.rpki-client.org