Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/F1834CFABF4811EE852F9867775412E6.roa
File: F1834CFABF4811EE852F9867775412E6.roa (raw, json)
Hash identifier: GW1WZx00B2/KzPY8GDlNnZx+jDa1oyY3LdiFqNzIsvY=
Subject key identifier: 38:37:23:12:3B:36:5E:C5:BA:BF:83:65:D7:EA:6B:41:D4:38:04:8C
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 0105
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/F1834CFABF4811EE852F9867775412E6.roa
Signing time: Tue 30 Jan 2024 08:24:11 +0000
ROA not before: Tue 30 Jan 2024 08:24:07 +0000
ROA not after: Sat 01 Feb 2025 08:24:07 +0000
asID: 37684
IP address blocks: 102.221.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 07:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Validity
Not Before: Jan 30 08:24:07 2024 GMT
Not After : Feb 1 08:24:07 2025 GMT
Subject: CN=65b8b22a-eea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:31:75:58:24:ca:ac:2a:6c:e4:f8:c9:c6:
80:a7:2d:2d:69:89:5b:68:cd:20:d4:81:7d:fe:ca:
84:45:ee:76:20:ad:cf:dd:4a:2d:ec:5b:f2:99:47:
a5:71:a3:fb:49:18:e4:f0:54:5f:d6:fa:e0:15:dd:
ec:08:c3:73:ee:a8:e9:b3:b4:b9:6c:c6:6f:e4:b6:
27:c3:fa:25:4a:17:e8:c0:e9:ea:d7:bb:f3:62:e0:
c1:7c:21:39:6b:87:96:91:ae:83:ca:11:54:88:d0:
5e:2d:46:49:1a:a1:3b:1c:3f:8f:f3:84:99:f3:a3:
1f:84:56:1e:dc:fc:c3:c7:f4:61:40:71:be:7d:e2:
4c:bf:27:78:48:9e:96:84:17:f6:40:d8:1e:1d:81:
34:96:c2:be:c5:1d:ea:13:06:01:df:c8:a9:11:a9:
5b:ba:20:fa:5a:6a:e1:0a:7b:b2:8b:03:57:3d:2d:
60:35:d4:1c:dd:a1:76:b7:cd:a3:52:3f:b0:c0:0a:
7b:8f:dd:11:d4:a9:68:96:95:b0:88:ac:55:fe:5c:
6c:65:86:48:c4:5f:73:ba:fe:f2:0d:22:c2:21:88:
69:02:e5:a6:b3:f1:2a:28:16:82:48:b3:f0:dd:97:
81:1e:a4:5e:42:87:9b:2b:8e:5f:42:84:95:df:89:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:37:23:12:3B:36:5E:C5:BA:BF:83:65:D7:EA:6B:41:D4:38:04:8C
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/F1834CFABF4811EE852F9867775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c5:65:a6:4e:52:a6:f6:fc:d0:22:f6:63:42:4a:f4:62:42:
f5:1b:c0:07:a1:3b:7d:94:8b:3c:33:5a:46:4e:f0:f3:eb:d5:
4f:1a:b2:41:7d:f4:9f:01:8b:0b:0b:09:15:60:33:08:80:82:
1e:92:1e:a3:2c:ae:11:37:51:5d:16:df:35:59:7e:66:54:a2:
a1:67:7a:d5:c7:52:81:56:e5:b2:5e:59:16:7e:b5:90:75:23:
a4:f0:19:8b:df:8d:c4:be:73:ff:57:f2:8f:d9:be:cd:65:a1:
22:17:cc:5a:fa:18:79:36:74:fe:e3:26:f8:6c:df:80:f9:26:
77:a1:b5:32:5e:98:7b:5b:80:85:79:4c:43:42:ab:1d:fd:de:
2a:cd:22:4a:cf:cc:84:2f:75:c6:9f:dc:fb:c7:d5:64:a3:b6:
ed:ec:9f:c7:9d:6f:0a:5d:71:25:80:ab:70:ab:90:df:85:50:
08:10:cc:44:3d:b9:3c:97:fa:5b:ce:e8:16:ea:bf:9d:10:25:
fb:c7:09:f0:46:be:71:75:cf:13:5b:17:77:a9:83:24:d4:fb:
fd:9c:89:62:22:d5:5c:d3:cf:59:e8:d3:e3:6d:b1:7e:bc:bb:
2a:50:c3:8c:48:b0:9e:2c:7b:e1:18:a7:fc:b8:47:62:08:ea:
b1:8b:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org