Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/718A7944459C11EFBB900BAB762E951A.roa
File: 718A7944459C11EFBB900BAB762E951A.roa (raw, json)
Hash identifier: 7vgzn/XfkmXabuQbfdYuPHSqolmIK0V4A7Mq4KnGVS0=
Subject key identifier: 25:2C:23:D5:02:07:F6:6D:85:D7:97:18:01:DE:61:BD:EB:2E:B5:BF
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 01EA
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/718A7944459C11EFBB900BAB762E951A.roa
Signing time: Fri 19 Jul 2024 06:59:29 +0000
ROA not before: Fri 19 Jul 2024 06:59:25 +0000
ROA not after: Fri 18 Jul 2025 06:59:25 +0000
asID: 834
IP address blocks: 102.211.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 10:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: Jul 19 06:59:25 2024 GMT
Not After : Jul 18 06:59:25 2025 GMT
Subject: CN=669a0ed1-c1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:95:43:7a:ee:de:ec:ab:40:48:d0:eb:11:
bf:4a:72:dc:49:99:6b:76:8d:6f:b6:7b:c7:b2:86:
39:3d:01:3a:b8:2c:7f:b9:a7:63:0c:35:26:73:d1:
08:21:e6:2e:eb:52:28:3e:07:1a:e0:d1:97:0f:d2:
51:de:82:09:f0:1d:74:0d:56:a8:87:67:5d:e8:43:
2e:1d:39:79:a5:61:f4:6b:9a:f5:50:4c:37:6e:22:
16:53:f1:22:63:01:47:92:8e:58:e8:87:aa:92:d2:
1f:b3:6e:cb:d8:da:14:08:58:0d:05:4a:2a:89:b1:
21:f1:a2:07:bb:2d:33:23:7b:5b:f1:2c:5b:fd:02:
54:97:75:f0:32:f1:1e:07:42:06:d5:46:78:fb:6b:
89:ab:6b:81:4f:2f:74:87:80:72:11:16:0a:b7:db:
9b:28:e2:bb:05:9b:8e:cb:e2:8a:2d:0f:53:1f:57:
78:84:10:c9:86:9c:2d:cb:d9:bc:2e:df:41:12:c5:
4b:52:28:07:98:be:99:18:07:be:92:22:f0:e7:97:
57:74:d9:f6:ef:a5:a9:6f:e2:0b:3a:f0:fc:df:46:
d7:7a:0c:cd:e3:c5:dc:8e:20:24:b4:41:2e:8b:0e:
7c:a3:e6:f8:80:6b:a4:cd:8a:63:2c:1c:32:05:f0:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2C:23:D5:02:07:F6:6D:85:D7:97:18:01:DE:61:BD:EB:2E:B5:BF
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/718A7944459C11EFBB900BAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.235.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:37:41:ff:e9:f4:47:86:59:f9:c1:b0:8b:c5:2c:64:da:39:
fe:b1:2e:1f:55:ff:c6:ad:62:63:fb:1d:0e:df:70:32:a3:88:
09:91:3b:73:be:3d:bb:87:19:cc:26:a0:64:ec:29:83:4a:a1:
1f:cc:89:09:05:df:99:f2:36:cc:49:04:5a:3f:6e:f1:82:7f:
68:74:c5:5f:67:d7:9b:7c:a8:05:a4:61:ea:a6:73:49:31:6c:
ee:b9:07:84:8a:cb:b8:8e:48:e5:f7:a9:dd:f8:2c:ad:e8:16:
fd:89:e9:26:c0:11:0d:8d:01:29:b6:1d:10:02:1e:a6:b8:e8:
64:b6:8f:96:44:36:7c:cd:57:df:f2:04:9e:e5:65:da:b4:78:
89:7d:fd:ab:3d:15:29:50:6f:5a:75:62:e2:71:0a:7a:bc:42:
76:50:3e:8f:86:2a:1b:e0:2e:36:fe:d7:4f:56:6f:30:b3:df:
6e:a4:fd:50:b3:47:fc:a6:54:f3:5b:da:2d:7e:82:cc:37:08:
28:b0:04:93:f2:da:a5:cd:d0:1e:3a:22:e0:b1:d9:bb:9a:33:
f6:82:91:2f:a8:1a:17:b7:40:54:c4:f4:d3:35:7f:68:65:28:
84:bb:50:bd:42:48:d1:ad:f5:18:ad:fb:fe:6c:ad:e3:e6:b4:
e7:87:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:54 2025 by rpki-client