Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/FDAC77BC57BF11EFB02453AC762E951A.roa
File: FDAC77BC57BF11EFB02453AC762E951A.roa (raw, json)
Hash identifier: iV47kNr5LMYTQSJex28Cum52GWhwcvvC/2TTlhCQn+k=
Subject key identifier: EA:11:D9:A7:F1:F3:5E:32:2F:67:02:C5:A7:06:8C:CA:AF:79:1E:35
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 020A
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/FDAC77BC57BF11EFB02453AC762E951A.roa
Signing time: Sun 11 Aug 2024 08:59:18 +0000
ROA not before: Sun 11 Aug 2024 08:59:14 +0000
ROA not after: Sun 11 Aug 2030 08:59:14 +0000
asID: 834
IP address blocks: 102.211.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 12:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: Aug 11 08:59:14 2024 GMT
Not After : Aug 11 08:59:14 2030 GMT
Subject: CN=66b87d66-f9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:09:76:cb:13:1d:6c:09:15:7f:7e:a0:51:
8f:a4:13:47:2e:66:63:3e:69:e9:13:70:01:36:61:
1f:c0:a4:65:4b:38:e8:9e:f9:9b:57:ff:67:56:ca:
ca:18:19:ed:e2:8a:af:f9:2a:c9:6c:6b:f6:1c:12:
48:3c:4e:79:cd:bb:7d:e2:c1:49:51:76:d1:a9:35:
bb:66:a2:9e:16:26:38:e1:40:f8:47:81:eb:d0:0a:
cb:c7:2f:ef:5d:e8:b3:10:96:80:86:c3:5f:4b:8d:
f2:ea:b9:e3:4b:a9:ca:5a:86:17:b8:db:8b:43:aa:
18:5a:f0:07:09:e9:a1:bc:da:23:14:d6:b8:de:30:
6d:fb:f3:12:b6:d3:7a:94:6c:15:c0:84:f8:7c:6a:
62:03:22:40:b8:0e:f1:75:13:b0:33:2d:e7:92:de:
b8:a6:c2:6b:83:09:38:d5:dd:3c:9f:d0:c0:6e:48:
ff:4e:1e:0f:24:35:b7:e2:33:6f:e7:17:4e:28:e7:
0b:47:32:40:2c:06:41:ee:25:9e:db:b3:7b:ac:78:
d4:20:c4:ac:84:d1:4d:cb:48:79:36:1f:1a:fa:91:
84:bd:72:60:76:5b:43:17:d1:45:95:6d:d6:97:cf:
73:f9:14:f4:f1:6d:80:d0:93:c6:f0:9b:26:47:68:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:11:D9:A7:F1:F3:5E:32:2F:67:02:C5:A7:06:8C:CA:AF:79:1E:35
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/FDAC77BC57BF11EFB02453AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.234.0/24
Signature Algorithm: sha256WithRSAEncryption
65:03:11:df:e5:5a:70:54:40:aa:a1:03:42:dd:b3:2c:7f:79:
3a:2b:42:37:f8:59:4b:de:30:7b:18:ec:d6:a3:34:87:37:cb:
9c:86:31:5c:ae:9d:01:56:de:d0:5f:34:6b:3c:30:25:3d:a3:
40:06:f0:4c:20:d5:e8:c0:2f:a0:d0:a5:5c:7e:52:ec:c3:b4:
87:6f:d8:91:57:5a:25:0f:58:9b:f3:53:3c:d4:f2:1e:28:13:
e2:e4:dc:39:18:82:a1:75:79:4e:af:be:0b:1e:89:e8:64:04:
a4:d6:43:d1:75:69:5e:8f:82:b7:8b:13:0a:7f:f7:af:0e:24:
d1:f6:62:f6:05:da:ad:ed:06:dd:c9:92:5c:f4:51:a4:3e:00:
d1:78:8e:f0:e8:be:81:8e:99:8c:56:6d:7d:2b:dd:f4:cb:ce:
f9:d5:35:f7:d8:96:bf:27:f3:e3:3a:6b:61:b0:d9:02:20:0e:
2a:b6:ed:cb:f0:3b:08:cc:aa:75:9c:ae:b0:c0:70:67:56:4a:
b7:6d:98:3a:cb:34:e5:87:16:d6:d7:42:b0:21:be:87:46:20:
f2:9f:55:df:84:b2:79:be:11:4e:fb:53:78:ef:b7:c7:c6:25:
30:41:a7:ca:e0:e9:8c:9b:fa:73:a6:bd:15:98:1d:8f:15:23:
46:2e:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:31 2025 by rpki-client