Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/176405DE1C2011EFB6711C447DDC24C2.roa
File: 176405DE1C2011EFB6711C447DDC24C2.roa (raw, json)
Hash identifier: vm7m9tI0mWcEB0N4iV4IjTgmm8LY7yDdv1L5zcijPYU=
Subject key identifier: BC:07:D4:6D:3B:E8:B8:3F:19:E9:BA:DD:E8:1D:D7:3E:98:13:18:BA
Certificate issuer: /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial: 09
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/176405DE1C2011EFB6711C447DDC24C2.roa
Signing time: Mon 27 May 2024 11:56:03 +0000
ROA not before: Mon 27 May 2024 11:55:59 +0000
ROA not after: Thu 27 May 2027 11:55:59 +0000
asID: 37381
IP address blocks: 102.223.28.0/22 maxlen: 32
102.223.28.0/24 maxlen: 32
102.223.29.0/24 maxlen: 32
102.223.30.0/24 maxlen: 32
102.223.31.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 21 Oct 2024 13:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Validity
Not Before: May 27 11:55:59 2024 GMT
Not After : May 27 11:55:59 2027 GMT
Subject: CN=665474d3-4ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:99:46:6f:8d:51:95:86:18:64:10:a0:a1:
8d:f2:fb:44:65:93:5d:86:17:36:d4:e6:0f:47:3e:
28:8c:e7:ea:70:8e:d2:e6:e1:b6:53:4e:5d:55:93:
ea:fc:f0:bf:e7:bf:6f:14:aa:34:9f:13:4b:5b:44:
15:9e:db:15:33:d0:78:26:ae:8f:42:08:01:e4:c8:
92:61:fa:b8:79:ca:4b:e2:f3:de:a5:da:97:54:66:
79:55:1e:68:68:6a:1c:ba:7d:32:56:e0:ac:1b:a6:
35:86:dd:a8:a5:ac:1b:07:cf:c2:82:41:73:01:08:
c0:ed:fc:a2:6d:50:bb:39:ee:f4:52:6e:0d:1c:87:
3b:c5:6d:c9:87:c7:44:b6:31:fe:fa:9b:7d:16:a4:
e0:b4:2f:44:4f:e7:58:61:84:ed:2f:95:7e:80:5b:
5d:c1:42:28:02:6a:fe:09:e9:35:ed:84:79:53:f6:
10:a8:46:8e:20:9f:6d:ab:b3:02:f0:a0:6b:1e:72:
14:62:9b:aa:a7:6d:ba:0d:68:5e:c1:a4:9b:9e:c1:
ee:00:50:9a:f1:17:c5:34:4f:69:fd:a1:99:2b:c1:
8b:e8:9c:ca:09:81:72:9e:a1:21:4b:3a:ea:9a:59:
21:6c:e9:a3:23:0c:55:fa:08:35:15:51:98:c8:58:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:D4:6D:3B:E8:B8:3F:19:E9:BA:DD:E8:1D:D7:3E:98:13:18:BA
X509v3 Authority Key Identifier:
keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/176405DE1C2011EFB6711C447DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.28.0/22
Signature Algorithm: sha256WithRSAEncryption
19:af:ad:1b:bd:6a:67:4b:c3:9a:c2:30:5e:1f:98:a9:d3:ea:
d8:cd:cf:f5:63:f7:39:78:39:77:4b:bd:e5:1b:95:5e:ee:01:
fa:49:f8:8a:af:4a:bd:85:39:57:a1:b0:68:e7:e1:d0:fd:6a:
62:4c:fb:87:5f:a4:0b:18:fb:a1:97:4d:47:63:72:c8:31:c1:
4b:48:3f:2b:31:54:67:af:50:6b:64:c9:dc:35:58:38:4c:00:
6f:24:b5:1a:67:e0:77:44:25:ea:a6:95:a9:9d:c1:17:22:19:
0a:b8:1c:97:fe:33:74:65:59:e1:33:ac:99:82:35:7a:38:98:
84:74:6e:20:0d:61:9e:c3:dd:1c:62:d4:5b:6e:30:2c:24:85:
bc:5e:ba:ac:81:c2:5c:d6:b3:a6:0e:95:29:44:d0:7d:16:b5:
f1:5d:80:8a:65:a6:14:51:af:95:02:a3:09:e3:c8:f9:fd:ed:
54:97:77:96:e3:a2:dd:f5:9c:96:00:23:b0:c7:5d:32:94:0d:
b3:6b:52:f1:0d:68:9d:6f:a2:1d:87:a4:9a:89:1b:54:62:1b:
f2:17:fb:c0:f3:9f:12:39:12:a4:ef:25:9e:89:2a:15:e7:dd:
ff:ca:c4:a9:7c:be:10:95:80:11:a0:dc:aa:82:ba:c2:78:20:
ff:21:44:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 15:40:33 2024 by rpki-client on console-fra.rpki-client.org