Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/D6E4775A05C111F0A4017861762E951A.roa
File: D6E4775A05C111F0A4017861762E951A.roa (raw, json)
Hash identifier: WXZiip/EkPa2gdvCd1ECRdSDJh5HYqg5z7A5xuqsn4M=
Subject key identifier: 72:12:F1:D4:17:A0:E6:D3:67:4F:40:15:18:58:1D:C1:2E:A0:52:8B
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0306
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/D6E4775A05C111F0A4017861762E951A.roa
Signing time: Thu 20 Mar 2025 19:30:54 +0000
ROA not before: Thu 20 Mar 2025 19:30:50 +0000
ROA not after: Wed 20 Mar 2030 19:30:50 +0000
asID: 834
IP address blocks: 102.211.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 00:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: Mar 20 19:30:50 2025 GMT
Not After : Mar 20 19:30:50 2030 GMT
Subject: CN=67dc6cee-7fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:e9:0c:cc:a8:08:93:e5:13:bf:bd:c8:19:
3d:b4:f7:c6:58:ed:bc:80:68:22:6f:f3:af:98:3d:
63:15:52:58:7b:9f:bd:b8:7d:2d:65:40:19:4e:57:
2f:a6:d4:0e:d1:b4:19:29:82:8b:35:e4:1e:12:fb:
a8:97:e4:8d:22:8d:98:99:c5:ef:dd:2c:8e:fc:40:
d9:cf:35:c5:59:bb:84:7f:e7:92:72:68:77:11:00:
ad:30:a7:f4:e2:9a:7e:e7:93:75:2f:e5:1f:a3:e0:
91:dd:67:67:6a:b7:de:cc:37:1b:cd:1b:e6:b8:e5:
78:94:12:17:66:f9:5e:ae:be:49:32:0a:c9:df:c4:
41:cf:ed:e2:2f:2a:af:a2:c5:d0:2c:16:34:37:49:
1b:a3:4e:bc:b0:0f:7d:dd:0b:5a:08:b3:34:00:bd:
15:22:9e:63:19:8c:f0:5b:db:2b:9c:9b:f7:c4:e5:
2c:91:c5:23:68:01:fc:c3:42:dd:a7:a8:97:54:39:
65:a2:7e:6b:fc:19:7e:19:6a:92:dd:13:de:f1:03:
02:42:a9:a1:11:b3:ad:f4:0d:29:d7:91:ea:46:ca:
bb:1b:fb:28:19:0f:98:d5:0f:b3:ba:79:65:11:69:
72:49:e1:1e:63:bf:85:4c:30:f8:b6:d5:d7:05:b9:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:12:F1:D4:17:A0:E6:D3:67:4F:40:15:18:58:1D:C1:2E:A0:52:8B
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/D6E4775A05C111F0A4017861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
36:39:8b:77:b8:ff:bb:a5:f5:49:f0:17:db:71:dd:83:e1:2a:
9a:eb:18:de:da:6b:59:53:eb:b3:21:0d:33:12:d1:b7:ab:80:
9a:ba:b9:76:5b:4a:b8:34:fe:9a:7c:79:9a:58:f8:40:1d:66:
e4:20:ee:72:e7:92:24:99:23:84:27:50:b4:88:42:1b:6f:24:
f3:f3:3a:39:4c:50:52:9c:e0:b8:14:63:63:d4:bb:e8:94:13:
de:66:70:a9:35:29:3d:2f:a0:ca:9a:ca:3d:c5:a1:a1:79:67:
49:8c:d3:8f:f4:98:1a:b9:5d:86:48:31:c4:a0:92:a0:17:71:
ed:ab:32:cb:21:a0:2a:b7:80:df:cc:ed:30:6b:5a:47:1e:2d:
bf:06:07:08:ef:f9:b2:df:54:b8:5e:62:97:d6:0a:32:1f:47:
73:29:bd:15:1d:98:b9:f2:3c:ca:e6:a2:0e:d2:49:0c:fe:56:
10:94:12:94:6f:fb:70:bf:99:83:6e:c5:5a:41:76:6e:54:ff:
78:34:ef:ca:a3:a3:f4:66:c1:a6:16:2b:a8:a9:bb:c0:d5:97:
30:cc:55:d4:bd:43:45:b8:49:14:f1:ef:16:15:78:b6:11:d3:
0b:10:fc:1c:8a:1a:c4:0c:9b:3d:0a:2f:7a:21:81:9e:c4:0d:
4a:19:43:ca
-----BEGIN CERTIFICATE-----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Generated at Sun Mar 23 02:54:18 2025 by rpki-client on console.sobornost.net