Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8BD97D3EF2FC11EDB9A99A844AD9E6FC.roa
File: 8BD97D3EF2FC11EDB9A99A844AD9E6FC.roa (raw, json)
Hash identifier: xREFu6/rg9nWAmLOFa8c48W16xZy0WhlhTy8xS94jI8=
Subject key identifier: 87:8A:16:FB:77:77:B8:58:85:48:65:E1:00:00:D6:1B:66:11:D8:2A
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 04
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8BD97D3EF2FC11EDB9A99A844AD9E6FC.roa
Signing time: Mon 15 May 2023 08:43:21 +0000
ROA not before: Mon 15 May 2023 08:43:17 +0000
ROA not after: Wed 15 May 2030 08:43:17 +0000
asID: 61317
IP address blocks: 102.212.4.0/24 maxlen: 24
102.212.5.0/24 maxlen: 24
102.212.6.0/24 maxlen: 24
102.212.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 20:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: May 15 08:43:17 2023 GMT
Not After : May 15 08:43:17 2030 GMT
Subject: CN=6461f0a9-996b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:0c:30:0f:55:6e:d8:1b:94:4d:00:ff:b9:
2d:99:f5:e7:18:80:9e:0f:58:6c:05:75:24:6e:da:
79:9b:32:b0:18:f2:75:41:23:d7:1d:61:39:3e:20:
d5:aa:94:35:22:6e:3d:78:1f:6e:76:23:fb:49:c5:
5b:5d:3f:fa:3b:da:5f:3c:bf:6e:25:a0:a4:88:54:
80:82:4b:fc:31:08:b1:ed:46:1e:6f:83:1d:dd:b7:
6f:8b:19:fd:7a:f4:69:94:53:9c:5b:70:7c:09:3a:
f5:f5:e0:b7:4d:d3:86:2e:1d:d0:c3:60:3c:47:6a:
53:a0:8a:8a:24:59:6d:79:1b:0f:8f:33:5c:61:5d:
a3:c0:21:54:c6:76:20:5b:2f:be:d4:b5:8a:63:f6:
2a:ec:a9:21:a8:70:1d:11:ea:f9:cd:55:e4:50:72:
4d:49:18:c3:46:30:2f:a1:64:ab:15:fd:a9:ae:d5:
49:44:6e:55:f0:87:3b:ed:0a:82:5d:9c:84:4e:d8:
1a:1f:d0:f8:9c:96:6f:9d:b7:cc:e0:36:c9:47:c3:
ef:b8:cd:ba:d7:1a:16:c2:99:c6:3b:f0:d7:40:2d:
72:df:4d:c1:50:2c:a2:27:94:6e:bf:f1:94:97:31:
b0:6a:09:c9:82:36:04:d5:1f:63:7d:ba:41:d5:38:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:16:FB:77:77:B8:58:85:48:65:E1:00:00:D6:1B:66:11:D8:2A
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8BD97D3EF2FC11EDB9A99A844AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.4.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:18:ce:91:b6:a7:59:ac:97:d2:cc:3f:0a:4b:af:1a:80:a6:
b5:5b:b1:8a:79:43:5b:62:58:ee:7d:d4:61:92:80:a3:7f:60:
4f:de:f3:b0:ed:22:ee:b4:14:6f:08:9d:ea:3c:c3:f1:67:25:
ff:7b:ce:0f:87:23:60:c2:c9:cd:70:30:99:a3:93:54:59:8f:
d8:e6:bd:60:50:84:65:1c:ee:82:b4:0d:0d:17:38:2f:61:cc:
38:c7:ee:04:d5:2b:97:b2:a5:64:a8:55:43:9f:14:c5:2c:36:
56:36:32:b0:1d:c7:1d:1d:a4:06:18:82:6c:54:fb:3d:8a:ab:
57:83:54:f0:d3:dc:cc:e9:22:6f:90:f7:a0:1c:c3:d3:e2:22:
a0:17:ed:a4:cb:d9:3c:bb:1a:3c:07:b3:f9:36:08:93:b6:2e:
70:72:47:e2:b8:23:c2:e9:bc:c3:7e:f1:93:79:34:e0:fa:47:
9a:76:a3:f3:76:d9:81:9c:b8:ee:f6:83:2d:f3:0a:81:2d:93:
c1:2f:c6:dd:90:ec:7c:f5:ae:26:34:ff:d6:0e:c2:39:d8:9c:
17:38:59:71:02:de:62:cd:62:4f:4f:29:f5:53:5e:60:c0:3d:
a7:57:a7:84:3a:6a:1c:23:f3:60:c7:4d:b8:d8:ec:d1:59:59:
be:25:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:11 2025 by rpki-client