Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/D5E2FAA8EF1811EFA487CBAA762E951A.roa
File: D5E2FAA8EF1811EFA487CBAA762E951A.roa (raw, json)
Hash identifier: 9R5HnDL6AMoA8W9VcZy3pR+TTic99jbC8fYYV0FgNMk=
Subject key identifier: E1:03:2B:7B:29:A2:6A:FB:57:A9:59:6C:D3:E6:39:C8:6F:3A:6F:F0
Certificate issuer: /CN=F365958DAF/serialNumber=178DDEF8BB3CFE4FBE013B923BC8AE22D645B302
Certificate serial: 0B
Authority key identifier: 17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/D5E2FAA8EF1811EFA487CBAA762E951A.roa
Signing time: Wed 19 Feb 2025 23:25:42 +0000
ROA not before: Thu 20 Feb 2025 23:25:31 +0000
ROA not after: Sun 20 Feb 2028 23:25:31 +0000
asID: 329090
IP address blocks: 102.221.8.0/22 maxlen: 22
102.221.8.0/24 maxlen: 24
102.221.9.0/24 maxlen: 24
102.221.10.0/24 maxlen: 24
102.221.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 10:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365958DAF/serialNumber=178DDEF8BB3CFE4FBE013B923BC8AE22D645B302
Validity
Not Before: Feb 20 23:25:31 2025 GMT
Not After : Feb 20 23:25:31 2028 GMT
Subject: CN=67b66876-7473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:ae:53:4a:e1:7f:d5:95:70:79:d7:d5:c8:
d9:3c:c1:60:6f:e2:e8:91:84:63:39:fc:4b:1b:ea:
a2:4a:49:fc:72:6b:ca:a7:28:e9:e2:9a:67:be:34:
68:4c:6e:6b:52:2d:38:c2:6e:a1:42:a4:d1:a4:fb:
43:4e:bc:8d:84:9f:49:d0:5b:3d:4e:e0:d2:1c:73:
5c:41:f2:10:03:78:55:57:89:bf:27:98:44:64:fc:
c5:56:1f:df:b3:28:33:48:3c:7a:9f:3a:c6:ce:bb:
de:6f:47:be:59:29:3f:e6:6b:c1:16:cd:ad:78:3e:
0c:70:6b:f3:40:d4:ab:42:a4:16:2f:6d:34:13:43:
68:b7:e9:31:98:24:fe:24:c8:8b:4b:3c:73:e4:10:
7e:9d:b0:d0:59:b0:ca:58:53:b4:39:0a:24:82:35:
8a:1f:48:67:75:a6:c0:5d:3b:62:09:e8:67:af:72:
07:fc:23:fb:9e:06:6d:52:19:a1:07:4b:30:83:9c:
4f:6c:97:80:3b:a0:15:8f:70:32:5d:1c:80:8f:77:
6a:21:ba:7b:85:19:3e:76:a8:ed:06:07:71:eb:c4:
9b:9e:8a:75:ec:81:ec:93:54:22:91:6c:12:d8:4c:
a1:54:54:18:98:3f:c5:e2:f7:96:16:1e:0e:0d:76:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:03:2B:7B:29:A2:6A:FB:57:A9:59:6C:D3:E6:39:C8:6F:3A:6F:F0
X509v3 Authority Key Identifier:
keyid:17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/D5E2FAA8EF1811EFA487CBAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.8.0/22
Signature Algorithm: sha256WithRSAEncryption
82:a8:6e:0b:3b:e4:4d:60:4f:9c:ff:7b:92:1a:5d:68:c6:f6:
09:e1:e6:17:9d:fd:7d:46:31:ad:df:3e:ff:3b:23:73:4f:30:
54:62:c7:d3:14:62:7a:3c:c1:4f:ae:1b:3a:a5:69:f2:a8:b5:
d6:48:84:1d:be:b8:73:4c:b9:fd:3c:26:d2:03:3b:70:6a:4e:
3d:e8:72:76:96:a1:3c:ae:98:d7:15:00:e1:c4:95:a8:58:a7:
ba:a9:26:84:65:05:af:85:3b:17:87:f6:fd:97:1d:42:b1:05:
2e:d6:eb:cc:87:f2:c6:82:81:38:fe:da:cd:30:60:64:57:32:
24:b2:35:d9:be:0d:24:8c:47:3b:33:9d:b7:b6:bc:58:e3:72:
9b:6b:1f:63:60:5f:a7:fa:17:23:9c:00:70:c1:57:a8:78:31:
8e:41:d6:9b:dc:d0:4d:32:12:7f:8a:d7:76:35:47:00:3f:e7:
d8:ee:23:9c:16:ae:6d:bb:b0:99:8d:1f:b8:fc:8c:f5:35:10:
d4:6f:51:0e:d1:00:bf:cd:1a:dd:ad:ab:7f:a6:89:f9:fd:49:
87:62:d4:87:26:d3:2f:57:a6:33:ab:ae:26:65:ca:bf:3c:37:
65:6b:5c:8e:81:0d:b9:ed:53:ef:72:15:b3:7e:69:02:dd:0c:
75:85:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 25 03:42:56 2025 by rpki-client on console.sobornost.net