Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/6A1CB39E28CC11EFA7880F3A7DDC24C2.roa
File: 6A1CB39E28CC11EFA7880F3A7DDC24C2.roa (raw, json)
Hash identifier: sdVwcERujx2oX9eYP2anbaOm2WlpbORKqFcq85lL5C8=
Subject key identifier: 4D:48:86:1D:17:EB:15:62:C8:12:31:3F:A8:AD:8A:F2:32:BF:CF:FE
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 01B8
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/6A1CB39E28CC11EFA7880F3A7DDC24C2.roa
Signing time: Wed 12 Jun 2024 14:59:49 +0000
ROA not before: Wed 12 Jun 2024 14:59:45 +0000
ROA not after: Wed 12 Jun 2030 14:59:45 +0000
asID: 834
IP address blocks: 102.211.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jun 2024 13:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: Jun 12 14:59:45 2024 GMT
Not After : Jun 12 14:59:45 2030 GMT
Subject: CN=6669b7e5-203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:6a:35:db:b4:14:e7:ff:9e:d7:70:0e:e9:
44:79:ce:e0:cd:30:67:3b:a3:cb:c6:fe:93:93:e4:
0e:71:89:f3:4a:50:6c:b7:12:ee:29:3f:61:4d:51:
7b:45:75:0a:9f:f7:3a:3d:3b:03:11:0d:ec:8e:99:
7f:24:e0:ff:66:82:14:eb:06:45:87:87:7f:a0:07:
c3:ff:3c:7d:b3:02:92:2e:68:07:93:8a:9d:b6:db:
fa:25:42:4c:2f:58:dd:fe:2d:93:c2:9d:4f:c9:c7:
41:91:85:5f:5f:51:31:13:88:72:7e:43:5f:c5:ad:
6c:60:68:29:42:8b:65:5d:b1:18:ea:60:32:ac:00:
47:25:6e:94:4b:64:ca:5f:58:38:50:2f:c8:b3:9f:
bf:51:a1:95:5e:0b:66:5c:e5:c9:4d:97:82:2d:be:
f2:11:fa:54:c6:20:6e:91:a6:3f:71:5d:22:da:9e:
20:5b:71:ac:55:ee:3f:3f:de:0f:fd:b1:67:b0:01:
4d:ed:74:92:e2:da:36:28:13:5c:53:67:ee:41:2b:
8e:e2:7d:32:7d:a6:58:24:04:f1:ac:d6:25:e3:da:
c5:39:54:9f:03:ec:e4:a2:9e:56:88:2e:07:b3:4f:
05:9e:95:9a:07:55:65:e4:7d:c9:60:b6:95:d2:c3:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:86:1D:17:EB:15:62:C8:12:31:3F:A8:AD:8A:F2:32:BF:CF:FE
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/6A1CB39E28CC11EFA7880F3A7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:33:6d:dc:3f:0c:84:97:0b:4e:85:97:da:7a:d6:e6:80:c1:
61:cb:64:c4:6a:99:a4:c1:74:9a:7e:b0:80:84:6a:64:6f:7a:
6f:42:10:4f:df:81:ca:03:70:0c:af:73:e5:b5:fb:05:83:fa:
68:a0:02:a2:ff:b2:85:3f:4b:b2:b8:2d:8e:42:3b:c1:38:02:
2d:3f:bc:41:a7:99:15:12:23:1b:12:d7:cb:9d:88:f8:bc:88:
63:23:b8:49:b0:f2:ff:e2:9c:7b:65:f9:3d:d4:46:da:ea:b2:
27:02:f4:b7:f8:67:b9:56:60:c3:3a:b7:c1:98:f6:b2:c3:fb:
4e:84:10:01:5c:17:05:fb:d1:e3:97:ab:0c:7a:12:5e:b6:57:
ef:df:4a:4f:f7:21:f7:4b:d8:3d:49:29:f3:14:4a:c6:f1:7b:
04:2c:75:d7:3b:f9:77:a4:2b:3f:ec:ad:61:4e:fe:f1:bd:fe:
9c:e3:c6:0f:88:64:33:0d:c9:36:79:e3:72:12:6e:53:5e:12:
fd:c7:fe:7b:df:62:ab:ff:a6:3a:ef:7e:00:4d:3f:f0:ae:3b:
fe:c9:16:10:44:2a:4a:b4:5c:0a:8c:51:32:64:e1:b0:b0:8a:
c5:2b:54:ca:0e:0b:15:28:c9:66:87:e6:17:86:80:4b:ae:ef:
c9:ba:7c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:36 2025 by rpki-client