Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/422CE51C2B4B11EF96D2FA227DDC24C2.roa
File: 422CE51C2B4B11EF96D2FA227DDC24C2.roa (raw, json)
Hash identifier: yyNGtfFyzq9S/FUDbJjC3ZziNpX7YiGrMgJztXExieM=
Subject key identifier: A2:4A:86:CB:96:BE:58:6D:01:DF:57:F5:20:89:E2:49:E9:FC:DC:49
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 01C5
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/422CE51C2B4B11EF96D2FA227DDC24C2.roa
Signing time: Sat 15 Jun 2024 19:12:51 +0000
ROA not before: Sat 15 Jun 2024 19:12:46 +0000
ROA not after: Sat 15 Jun 2030 19:12:46 +0000
asID: 5065
IP address blocks: 102.211.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 06:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: Jun 15 19:12:46 2024 GMT
Not After : Jun 15 19:12:46 2030 GMT
Subject: CN=666de7b2-af2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:f5:b7:5d:7f:9c:ef:e6:3d:a0:8c:6b:e6:
1c:7d:96:43:78:15:05:6e:b0:84:c2:44:eb:c3:96:
89:0c:3a:dd:aa:53:1d:a9:a4:6c:a0:1c:be:51:45:
2b:23:6d:f2:ea:4a:44:b8:f3:c7:0f:1e:e6:36:9b:
f7:6b:b0:fc:2f:89:64:93:95:e7:27:0e:b2:b1:e5:
34:aa:02:d2:dd:8f:67:9a:24:3b:d4:07:84:e2:27:
1c:8c:17:a4:98:cf:3c:f1:f6:8a:81:b9:f9:c3:64:
6a:3f:4e:57:47:18:79:16:fe:ff:15:86:8a:28:43:
a5:b2:d7:8c:99:ac:70:4c:c5:b4:ca:b5:aa:02:19:
a0:f4:6c:91:cb:e8:44:ca:ed:d4:3b:02:a9:96:94:
56:47:13:e5:47:d0:9a:6f:88:51:c0:b2:46:2b:f6:
ce:22:44:b9:81:8e:e6:9f:67:c5:b8:66:d8:15:4b:
6b:c1:74:ac:2c:e3:dd:6e:30:77:21:2c:42:62:16:
3b:d5:47:72:6a:bb:8b:9d:4e:64:34:ff:d8:1d:e3:
f1:a4:f4:98:5c:9a:c1:03:bf:e5:ea:49:eb:68:d8:
97:9c:e4:aa:3a:cc:da:33:39:44:e5:c8:de:99:be:
ca:f6:97:15:f4:5f:d3:29:50:b0:b6:e2:bb:67:a1:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4A:86:CB:96:BE:58:6D:01:DF:57:F5:20:89:E2:49:E9:FC:DC:49
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/422CE51C2B4B11EF96D2FA227DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.235.0/24
Signature Algorithm: sha256WithRSAEncryption
03:db:b2:d4:b6:8a:25:7b:1e:29:73:aa:9b:da:4b:f8:fc:15:
28:8a:6f:65:f4:b2:5a:c0:35:e1:e1:a6:7a:e2:3d:6c:81:74:
8f:df:5d:45:7c:8e:d5:fd:f3:7c:08:aa:ea:78:98:00:ff:f2:
e9:e9:63:ee:61:28:91:ec:06:73:53:67:ac:e8:3d:4a:01:71:
7e:a5:35:3c:5f:31:e6:c6:96:95:62:76:14:3b:2d:df:df:6a:
ac:6b:31:25:a9:8e:d2:4c:61:f1:d9:28:5e:cf:99:7a:5a:bf:
38:0b:a4:e8:0e:90:17:a2:7a:0f:86:32:91:46:b1:10:29:72:
9a:35:8f:66:29:c1:8d:57:f3:5d:85:92:17:4f:6c:c9:6b:4b:
4f:73:d5:6b:f0:24:7f:1b:93:05:8c:e5:a8:f9:3e:5a:72:bf:
d0:e1:29:04:f3:ae:56:5c:42:09:de:3e:93:0c:ef:ed:c6:10:
9d:a0:0f:b6:df:91:f0:8f:eb:44:f5:3a:c9:a9:07:13:5f:08:
97:24:a3:26:68:ed:3b:dc:fa:23:14:85:4e:fc:76:ec:e0:29:
a3:c1:fd:30:f3:ce:11:a9:c8:fd:af:8d:13:39:fa:0f:4b:7e:
d2:f7:ca:b7:0b:80:e7:c0:70:32:95:48:e6:fe:a4:39:18:1d:
72:f4:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:37 2025 by rpki-client