Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/C4C922461D0111EEAABEAB854AD9E6FC.roa
File: C4C922461D0111EEAABEAB854AD9E6FC.roa (raw, json)
Hash identifier: IvOcbHV4/nUi2Ur40GU6NeRO/Y7+AhGje8jCx6MPnrQ=
Subject key identifier: BC:1C:47:72:E8:96:A2:21:71:2C:E8:A2:79:0F:23:88:48:33:A3:6F
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 40
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/C4C922461D0111EEAABEAB854AD9E6FC.roa
Signing time: Fri 07 Jul 2023 20:06:33 +0000
ROA not before: Fri 07 Jul 2023 20:06:25 +0000
ROA not after: Sun 07 Jul 2030 20:06:25 +0000
asID: 329250
IP address blocks: 102.211.232.0/24 maxlen: 24
102.211.233.0/24 maxlen: 24
102.211.234.0/24 maxlen: 24
102.211.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 20:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Jul 7 20:06:25 2023 GMT
Not After : Jul 7 20:06:25 2030 GMT
Subject: CN=64a87049-a9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:bc:90:58:62:34:c6:89:65:4c:19:a4:54:
6f:48:a3:9f:f7:9a:4a:7b:d4:73:be:bf:1c:b3:fe:
3e:0a:ed:67:cf:34:24:65:29:ed:db:ca:0f:e9:e8:
8e:8d:ef:90:ed:98:b4:ee:eb:de:c2:72:e6:e1:41:
3b:4b:40:3d:39:e1:1b:99:e3:c8:3a:b2:44:b4:36:
76:81:39:3b:a8:0c:45:61:04:ce:1c:57:5f:51:f9:
3f:da:11:7e:1a:ee:7d:b6:b4:51:ae:af:20:34:f1:
9d:ac:33:b2:66:11:eb:5b:70:6e:b3:9d:1b:76:32:
ac:d0:fd:28:e0:84:84:c1:81:76:e9:d3:f1:de:96:
c9:59:0b:8e:5a:bb:fe:a7:f8:cd:58:ff:12:3b:e7:
af:52:ea:26:9a:7e:9d:f1:ee:ac:7b:02:cf:ed:93:
36:ab:b2:a3:9f:37:08:b7:3c:c2:2b:47:a5:30:30:
f0:6b:dc:05:59:c3:ca:ac:d4:db:a9:f6:3d:3f:84:
e8:3d:0a:37:fc:54:69:85:52:e0:17:7b:43:3b:fd:
cb:b6:97:4c:c6:d4:66:e1:4c:15:da:c5:a3:dc:2d:
8d:fe:13:f3:2e:09:35:14:10:4d:6b:3a:4e:69:f0:
99:76:f8:0d:42:0e:7d:02:f8:84:62:2c:d4:8f:38:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1C:47:72:E8:96:A2:21:71:2C:E8:A2:79:0F:23:88:48:33:A3:6F
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/C4C922461D0111EEAABEAB854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:8d:17:8a:75:c8:77:82:7c:d9:a8:65:df:47:99:c6:1f:8a:
a4:30:73:ab:1f:4c:06:b2:3f:5a:6b:33:86:e5:bd:6d:21:54:
66:1c:cf:0d:63:63:f2:53:28:f8:56:2a:15:a5:c1:bd:cf:e0:
73:1f:4e:1d:b0:6d:51:97:a8:9e:48:87:f6:4e:fc:70:e8:ba:
d8:c2:4f:cd:1e:e0:b6:2e:ed:8d:a2:f3:08:59:18:52:76:d7:
ca:09:31:3a:6f:22:d3:0d:e1:2b:3a:e0:cd:e5:6b:f3:f8:18:
93:f2:66:7d:2d:f3:95:71:f7:92:dc:bd:75:1e:94:c5:b6:be:
f6:57:aa:73:ed:02:1e:78:2e:19:46:65:60:68:2c:a3:96:d5:
7f:b1:56:3f:70:6a:f5:68:c6:d4:b2:f9:02:70:b6:9f:52:75:
00:a3:1e:7f:1f:3e:10:7f:87:37:d9:47:d6:5c:75:1a:ae:43:
cf:62:07:82:02:fd:a5:a9:79:a9:a4:19:59:58:ec:0c:60:38:
be:d2:a7:7e:d3:9e:d5:4e:6b:22:dc:a5:b6:be:90:55:58:7b:
48:36:26:25:1f:83:fa:c1:22:6e:34:e8:7a:56:75:d6:a5:4d:
99:40:0d:4d:15:ab:42:af:91:07:b8:3b:18:aa:2c:85:e4:0d:
ea:a0:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org