Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/F993828E6DC611EFA2715BB7762E951A.roa
File: F993828E6DC611EFA2715BB7762E951A.roa (raw, json)
Hash identifier: Y0wBicrt47nKh5jYGuR+NiYjj4XRSOVBpVZndQt98Jc=
Subject key identifier: 0A:80:EC:72:8D:BE:C9:D5:87:81:5F:C7:B2:0D:6B:76:24:CB:2A:70
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: F5
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/F993828E6DC611EFA2715BB7762E951A.roa
Signing time: Sun 08 Sep 2024 09:44:43 +0000
ROA not before: Sun 08 Sep 2024 09:44:40 +0000
ROA not after: Tue 31 Dec 2024 09:44:40 +0000
asID: 19905
IP address blocks: 102.208.96.0/24 maxlen: 24
102.208.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 11:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Validity
Not Before: Sep 8 09:44:40 2024 GMT
Not After : Dec 31 09:44:40 2024 GMT
Subject: CN=66dd720b-c06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:94:56:77:f1:f6:0c:49:88:13:da:c5:f9:
fc:da:b4:7e:3e:ce:17:ec:b7:ce:9c:4c:92:18:4e:
dc:da:c9:ba:36:47:6d:45:bf:7c:83:7b:79:3b:7a:
99:7a:04:89:08:c3:07:74:8d:cb:dd:86:4a:e5:ab:
da:2b:77:e8:69:d8:cb:7b:0f:b3:3a:07:fd:94:fd:
be:68:46:d0:70:85:38:4d:7f:99:50:59:6d:7b:ae:
04:10:cd:26:51:3a:53:26:1e:e6:d1:e1:e6:8d:9a:
97:39:4f:8e:92:63:7a:8f:5a:03:9b:79:95:f0:c0:
56:fe:54:1e:7b:eb:04:f1:3a:7c:3b:86:a4:0e:42:
6d:3a:6c:98:d3:3e:e6:50:3d:90:32:a4:9f:bb:a6:
65:a4:f1:b1:b4:e9:26:09:54:c4:df:ba:e5:1d:f9:
2b:e2:ab:5d:1d:20:bb:42:bd:54:f8:5e:1c:0f:a0:
44:7d:c2:0a:87:c6:10:6f:82:32:31:c9:dd:de:a1:
0a:34:0f:19:ce:3d:0f:15:3c:f8:c6:cb:cc:20:0b:
b7:5b:3f:40:b5:ba:57:45:da:c9:3b:d1:a3:0c:74:
90:db:ac:f9:a9:b6:d5:97:e5:f4:28:b8:7f:79:8b:
92:70:63:04:4f:de:38:d1:ee:ed:0f:86:70:ac:8e:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:80:EC:72:8D:BE:C9:D5:87:81:5F:C7:B2:0D:6B:76:24:CB:2A:70
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/F993828E6DC611EFA2715BB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.96.0/23
Signature Algorithm: sha256WithRSAEncryption
91:be:08:29:fd:48:4f:ac:bb:da:2d:76:1d:04:3c:7b:49:34:
0f:3a:cd:6c:1a:2e:08:d2:c2:3d:e6:0b:ee:16:5f:e6:c2:b7:
bf:8e:fe:88:9d:01:1a:08:f3:d6:6f:3c:3c:f4:a2:f7:d9:33:
f4:5f:90:20:7f:ff:33:45:1f:22:af:89:0c:5f:93:39:32:b6:
8f:96:87:e2:de:1a:73:ec:20:74:85:1b:4e:b3:14:16:5d:5d:
2b:23:e4:b0:0d:d8:f1:5f:f2:8e:3c:c7:59:bb:ec:5e:91:9d:
e3:ff:1a:be:d2:7f:43:e7:65:ee:7f:28:0d:d0:40:ba:72:89:
26:9a:4a:0e:af:9c:03:a5:06:c3:04:45:94:52:e4:78:11:47:
4f:1b:65:93:c8:2c:1e:5c:cc:6d:54:63:43:e5:61:c1:25:eb:
4c:b9:82:90:3d:80:4b:65:78:ed:67:a6:fa:70:60:e3:4b:0c:
9c:34:69:53:7f:13:cd:65:2d:1d:01:c6:5c:bf:ab:41:e5:e2:
a8:fc:b8:60:2f:95:4c:49:14:3b:c7:52:54:e9:ba:7f:a1:c6:
77:69:26:4e:a3:8f:79:0b:7f:6f:6d:93:e6:8b:fb:e5:b7:de:
07:8a:01:27:6f:33:85:c9:3e:4a:ba:2a:32:c8:73:0b:1e:a3:
01:17:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:48:37 2024 by rpki-client on console-ams.rpki-client.org