Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/08F1F418EF1D11EFB1B89C46762E951A.roa
File: 08F1F418EF1D11EFB1B89C46762E951A.roa (raw, json)
Hash identifier: +Q5fP6ka3DWq1yj5ldb3Sb+W5hGjnItzznch2EpHXqs=
Subject key identifier: 17:41:4F:04:47:D9:8E:41:64:E7:F7:B5:18:6B:01:77:25:C4:C9:FE
Certificate issuer: /CN=F365958DAF/serialNumber=178DDEF8BB3CFE4FBE013B923BC8AE22D645B302
Certificate serial: 0E
Authority key identifier: 17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/08F1F418EF1D11EFB1B89C46762E951A.roa
Signing time: Wed 19 Feb 2025 23:55:46 +0000
ROA not before: Thu 20 Feb 2025 23:55:41 +0000
ROA not after: Sun 20 Feb 2028 23:55:41 +0000
asID: 329090
IP address blocks: 102.209.32.0/22 maxlen: 22
102.209.32.0/24 maxlen: 24
102.209.33.0/24 maxlen: 24
102.209.34.0/24 maxlen: 24
102.209.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365958DAF/serialNumber=178DDEF8BB3CFE4FBE013B923BC8AE22D645B302
Validity
Not Before: Feb 20 23:55:41 2025 GMT
Not After : Feb 20 23:55:41 2028 GMT
Subject: CN=67b66f81-7650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:c8:37:40:df:89:8a:a0:41:19:59:10:3b:
39:02:2a:e2:7a:62:b3:a1:e9:9b:2e:b5:8b:f3:95:
f8:40:7c:d8:9f:56:ef:86:e5:52:e2:e7:a6:1a:af:
4d:c6:d0:07:ab:e3:4f:0a:8b:af:79:05:d9:58:94:
dd:2a:45:bd:10:4b:09:46:05:cc:38:ba:0b:88:a2:
56:e3:3d:a6:52:aa:f0:bf:fb:e9:66:8b:4a:01:9e:
93:07:e0:46:66:48:ee:f7:ee:d1:2d:2e:b4:a0:db:
4a:66:9b:ab:c5:a8:01:5f:62:df:86:78:2c:af:20:
a2:49:76:64:be:4b:35:90:87:f9:11:9f:93:af:5d:
2c:46:96:13:16:35:1c:5a:5c:cb:5a:b7:dd:52:17:
c5:75:ab:3f:1a:4b:00:81:18:e6:4e:46:a4:b0:a8:
c5:1a:f3:62:2d:f5:3d:06:7d:ef:1e:be:ad:9f:43:
de:b7:09:8e:bb:c7:5c:1d:af:30:2c:18:bb:33:f2:
92:5b:b5:82:01:66:79:59:80:5e:14:b3:92:af:94:
57:ce:26:16:8d:d0:58:f6:f2:78:0a:00:4a:76:36:
b3:b4:da:e7:59:98:b1:09:31:98:8c:c7:88:5e:c4:
09:40:38:0e:49:4a:4c:7f:52:3c:04:2e:e3:22:a0:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:4F:04:47:D9:8E:41:64:E7:F7:B5:18:6B:01:77:25:C4:C9:FE
X509v3 Authority Key Identifier:
keyid:17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/08F1F418EF1D11EFB1B89C46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.32.0/22
Signature Algorithm: sha256WithRSAEncryption
64:b8:98:0f:8e:5f:4c:f3:0c:b0:2e:30:72:56:c4:d1:6d:a2:
7f:23:52:b4:64:d5:ae:55:9b:b5:23:4b:ee:a1:6f:ab:9e:a5:
5b:22:db:ca:a6:57:46:c9:11:31:90:4a:3c:c2:70:46:bf:9a:
f1:a8:e7:99:70:f9:23:26:a8:57:37:28:c0:b4:7d:13:2b:6d:
69:54:e5:2b:9c:21:11:7e:a5:63:2c:26:11:11:38:d6:d5:8b:
b3:f7:ca:74:9f:d6:68:81:4e:82:81:2e:7b:b6:ab:64:4a:27:
d4:6e:db:c7:d3:1d:c0:aa:43:05:d4:26:52:df:4c:a8:ab:31:
27:f1:fb:e6:85:be:43:8f:43:38:74:de:fd:0d:35:d6:21:fb:
b2:0f:e5:a8:dd:6c:3c:5a:bd:0d:bd:02:68:1d:8f:9e:35:f5:
11:bf:08:72:4d:e0:5d:24:77:27:eb:fc:ea:11:7c:44:d0:0f:
1e:e3:50:6f:7e:c1:7a:e6:1a:c9:67:57:28:49:14:cf:e4:b3:
e1:80:5a:a5:43:c8:9e:1b:1a:25:f5:7e:a8:13:4c:0a:14:e5:
90:62:a2:58:a4:7a:03:8a:53:d7:0b:45:bc:92:2d:d4:60:e0:
8a:b9:61:70:c7:91:30:57:f2:26:1a:b1:1c:89:53:18:fd:19:
f6:b9:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 25 03:42:56 2025 by rpki-client on console.sobornost.net