Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/CCBCFC281F7711F09F814B7CDAE4EC9C.roa
File: CCBCFC281F7711F09F814B7CDAE4EC9C.roa (raw, json)
Hash identifier: SjdqHZ1lfu+SArtSLFqjpvaiPbJEkon/p3pxvB6KB5w=
Subject key identifier: 17:6C:E3:BA:68:3D:B5:FB:B2:E5:F2:FB:D3:1B:6A:3F:EF:9E:5A:37
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0334
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/CCBCFC281F7711F09F814B7CDAE4EC9C.roa
Signing time: Tue 22 Apr 2025 12:46:25 +0000
ROA not before: Tue 22 Apr 2025 12:46:20 +0000
ROA not after: Mon 22 Apr 2030 12:46:20 +0000
asID: 834
IP address blocks: 102.211.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 08:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Apr 22 12:46:20 2025 GMT
Not After : Apr 22 12:46:20 2030 GMT
Subject: CN=68078fa1-f8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:12:f7:3f:e6:87:1c:71:50:c2:54:ba:15:
ef:42:9c:28:d0:47:74:87:3b:b7:66:11:1d:d7:2f:
15:06:9a:e0:02:e7:19:ae:aa:1d:37:20:25:82:a1:
70:c8:27:d2:da:95:3f:ab:43:7b:5a:ee:53:2e:f1:
13:bf:d4:eb:7c:11:70:23:33:48:1c:06:3e:32:08:
b9:df:a8:5e:43:14:1c:be:d8:96:70:c4:48:d2:fc:
c6:1f:15:4c:52:3e:10:6a:af:3e:84:85:ab:70:c4:
5c:ac:44:05:7c:0a:89:b9:da:10:fd:2c:80:72:69:
9d:a4:9d:e3:a1:e1:1f:af:c3:8d:cb:ed:ad:ae:7b:
af:ea:49:0b:71:6e:d7:6a:6f:a6:ac:8d:68:13:22:
e9:9d:e4:f7:32:a3:b2:62:20:bc:f6:f5:99:b7:5a:
ed:40:3c:3f:52:11:2e:5f:ea:8e:76:eb:c9:ce:21:
74:12:64:e5:8e:d3:0c:c0:2a:6f:59:07:15:ff:97:
c8:7c:c7:3c:3b:b7:a5:f8:f4:77:5e:20:51:23:d3:
f9:e5:10:6e:82:bb:1f:50:6c:5f:1a:de:fa:c2:b1:
16:91:71:b8:af:6a:4a:54:d0:76:2f:46:57:12:57:
73:0d:b7:d6:43:7f:8d:39:95:0a:ad:62:bd:41:85:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:E3:BA:68:3D:B5:FB:B2:E5:F2:FB:D3:1B:6A:3F:EF:9E:5A:37
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/CCBCFC281F7711F09F814B7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8c:a1:e3:c6:57:98:1b:3b:43:2e:8c:2a:15:2d:e4:7f:21:
dc:a9:27:c1:f6:3e:e6:69:61:5a:f5:db:b1:fa:6b:eb:92:5f:
c9:d0:b4:dc:0a:e1:6b:be:48:61:04:4f:87:89:63:db:bf:da:
f5:33:f8:fb:49:e4:79:bd:e9:65:71:66:dd:b2:30:11:18:8d:
7c:42:e2:48:ac:67:00:a0:3b:a6:3a:4d:2a:34:94:9d:9d:6c:
05:b6:36:ee:ef:5e:e6:db:de:fc:6a:e4:7d:6e:42:66:37:76:
22:a4:c2:e2:45:3d:ba:6b:6a:6b:d2:de:c8:c9:6b:f0:05:a2:
54:86:4f:8b:4e:a5:a6:b6:f8:2d:fa:20:23:6e:18:04:c9:35:
a0:6e:c7:a9:06:49:9d:9f:1c:87:73:1c:4f:e8:10:87:1f:e5:
ac:b2:9c:31:0b:d2:9b:fa:b7:8e:36:ed:d6:8e:4c:3d:d1:02:
b1:de:10:5a:be:7a:66:13:1d:0d:33:51:d7:3f:5f:97:94:c7:
f4:ce:f5:af:ce:07:bf:83:64:7d:37:db:92:19:36:ce:4e:6f:
2c:30:a1:d9:bf:75:ac:39:a1:58:59:91:c7:22:fb:59:30:02:
10:5d:7c:ba:0d:f1:88:46:82:80:fb:6f:f4:1a:28:8f:8c:d2:
74:5e:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 11:27:31 2025 by rpki-client on console.sobornost.net