Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/51BF0A569DAA11EFA922524F762E951A.roa
File: 51BF0A569DAA11EFA922524F762E951A.roa (raw, json)
Hash identifier: R7mCb7A6U6jYNBBQteyJCStQQiiiOb5LqPKVMPWqaD8=
Subject key identifier: BB:8A:C8:BB:47:E1:98:3A:F4:0B:D0:20:D2:D1:9F:85:AC:EF:E3:8F
Certificate issuer: /CN=F36F6A4DAF/serialNumber=CA941F10D8010F95C8049E0102DCCAA883D9A0DB
Certificate serial: 09
Authority key identifier: CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/51BF0A569DAA11EFA922524F762E951A.roa
Signing time: Fri 08 Nov 2024 08:20:31 +0000
ROA not before: Fri 08 Nov 2024 08:20:28 +0000
ROA not after: Sun 30 Nov 2025 08:20:28 +0000
asID: 32833
IP address blocks: 102.207.120.0/22 maxlen: 24
2c0f:51c0::/32 maxlen: 64
Validation: Failed, certificate revoked on Sat 09 Nov 2024 06:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6A4DAF/serialNumber=CA941F10D8010F95C8049E0102DCCAA883D9A0DB
Validity
Not Before: Nov 8 08:20:28 2024 GMT
Not After : Nov 30 08:20:28 2025 GMT
Subject: CN=672dc9cf-8fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dc:e3:9f:a7:3c:74:4a:de:0d:72:11:a8:e8:
86:2d:f9:01:4d:03:e1:cf:61:54:85:81:88:76:4f:
0a:f4:fe:f0:86:b8:ca:73:17:d1:80:ed:5a:7f:52:
1f:e2:53:06:66:d3:3f:15:ea:8d:c9:15:38:ca:bb:
44:09:3e:4c:75:f1:6b:23:24:09:46:18:18:b8:fc:
ac:62:6c:86:aa:df:76:ab:a1:9a:8d:4b:44:28:a4:
d1:2c:cf:d2:ab:c1:2b:ce:bc:94:f0:63:1a:c6:48:
69:4a:ec:0c:16:44:db:b1:1f:ff:7b:b4:9c:de:97:
36:fa:03:94:4d:b9:00:73:b5:06:8a:bc:0f:03:5b:
f3:4b:c4:66:e6:f4:3b:6a:1c:fd:dc:16:28:b6:71:
15:a9:5e:c3:3a:0f:1a:46:61:e8:10:8f:c4:cf:cf:
4c:ea:60:14:33:a6:6c:67:90:ed:8c:eb:58:99:6d:
ff:db:83:75:6d:b2:ec:d1:a9:96:be:76:ad:26:13:
1f:89:9c:6f:87:86:02:1f:d8:d4:c5:31:70:08:0b:
8d:66:49:34:22:c7:f0:87:50:ff:22:d1:69:e4:4a:
18:4c:46:8c:90:07:e0:a9:5d:7a:f8:7b:3d:15:c3:
92:d8:40:28:43:2d:6a:b8:4f:c2:ff:43:b6:d2:98:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8A:C8:BB:47:E1:98:3A:F4:0B:D0:20:D2:D1:9F:85:AC:EF:E3:8F
X509v3 Authority Key Identifier:
keyid:CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/51BF0A569DAA11EFA922524F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.120.0/22
IPv6:
2c0f:51c0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:0b:34:b9:54:ff:89:85:8a:3f:6a:46:41:15:32:f7:99:91:
8d:be:b2:7e:f8:cf:01:53:6a:8e:a3:96:7d:b6:33:ec:4f:a8:
ef:d7:ec:89:9e:7b:5a:d1:3b:06:fa:d9:e6:36:74:c6:d5:a8:
86:79:f4:85:58:65:4b:fc:ba:4b:3e:00:09:12:91:25:cd:96:
20:08:cd:88:34:f1:02:fb:71:c4:c6:b0:09:09:37:af:28:e8:
08:87:6d:a1:20:81:09:67:2f:27:fe:9b:c5:7f:aa:8a:ad:27:
a6:7d:c1:ae:35:d6:39:b9:0a:fa:e0:dd:41:19:0e:d5:30:5d:
b2:ac:34:8d:20:16:97:54:cf:da:97:37:8b:09:a7:da:fb:4c:
25:be:3b:9e:e0:35:a8:26:52:81:0a:b7:e6:48:8a:d3:41:c5:
52:28:db:1d:70:53:f9:19:9d:88:a7:e6:a0:ca:a0:b9:42:73:
07:1d:56:3f:e1:46:90:e5:fd:16:bf:8e:b6:fd:65:04:89:4a:
6e:4e:23:88:48:12:27:3d:ad:a2:1c:50:d1:09:2d:17:1b:00:
75:88:b0:03:1c:8a:a0:c6:1e:17:95:66:f7:af:73:b4:d3:64:
21:e6:f8:2d:01:19:2e:69:5e:f3:0d:55:7a:b0:2a:20:a3:77:
1a:6a:57:df
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 9 08:13:48 2024 by rpki-client on console-fra.rpki-client.org