Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/15066ECAE92111EFB816A365762E951A.roa
File: 15066ECAE92111EFB816A365762E951A.roa (raw, json)
Hash identifier: ypFKZUXbrcQpQbc0w/jccL5oxk1IOuJdbXathuoFOFY=
Subject key identifier: 29:76:15:6E:D9:1D:D0:2B:26:DC:98:F2:41:96:43:30:05:99:15:EC
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 2F
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/15066ECAE92111EFB816A365762E951A.roa
Signing time: Wed 12 Feb 2025 09:09:37 +0000
ROA not before: Wed 12 Feb 2025 09:09:33 +0000
ROA not after: Sun 31 Dec 2028 09:09:33 +0000
asID: 30985
IP address blocks: 102.217.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 12 09:09:33 2025 GMT
Not After : Dec 31 09:09:33 2028 GMT
Subject: CN=67ac6551-0f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:49:f3:4e:d8:95:08:84:51:eb:b3:36:a8:
f5:17:de:6b:3f:9e:15:c3:02:f9:f3:2b:b7:61:98:
6d:bc:23:da:e7:57:5a:19:08:0d:ed:3b:ce:07:07:
7d:14:cb:05:9a:cb:b8:76:0e:1b:95:ac:e2:37:4f:
22:50:85:99:5e:0d:c4:47:a0:8c:f2:5d:4f:25:43:
5b:96:b7:fb:0e:44:a2:24:7d:3c:82:a0:dd:30:d9:
d1:c4:44:56:5e:f6:1a:db:77:09:fb:42:cb:bf:c6:
c7:5f:0a:57:8d:d2:d1:bd:db:fa:8f:b3:72:af:cf:
2f:fd:d4:1f:cd:c6:ac:d1:93:d7:4b:b2:c1:c6:7a:
00:33:48:b9:a2:fb:8d:c5:47:6a:80:82:2f:d9:87:
75:3a:cb:09:15:67:0d:53:9c:0b:3d:68:c6:30:a8:
b7:b8:83:0f:e6:17:d9:54:ca:4c:89:88:6f:5c:17:
16:6a:e5:b7:03:e9:cd:81:74:f0:37:8b:00:80:8d:
bd:ed:a7:85:b1:23:e6:71:57:8d:3b:be:ea:3d:b3:
58:6b:53:0b:e1:81:a7:b7:f7:4c:a7:77:52:02:29:
09:ef:b5:07:ac:69:f4:ed:6c:2b:64:59:77:4f:18:
c1:4b:4a:c6:1a:f9:46:77:17:91:4d:b8:94:c6:b4:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:15:6E:D9:1D:D0:2B:26:DC:98:F2:41:96:43:30:05:99:15:EC
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/15066ECAE92111EFB816A365762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:99:76:de:11:0f:6c:df:74:00:bc:29:1c:a9:c6:45:f9:3f:
4b:5a:b4:3d:7c:f9:b6:c2:76:38:29:de:c7:95:5d:19:8c:af:
07:1e:39:05:0b:8e:66:d7:b1:8a:44:26:fd:0c:b0:11:29:5a:
95:77:7c:87:d5:22:ca:0f:c3:f6:be:2c:02:50:ed:b1:8e:47:
fb:2c:06:4c:bf:ac:5e:7c:f9:b9:d8:aa:ea:55:54:e6:c7:72:
ed:5a:88:a4:43:da:d2:bd:c3:4f:1e:0a:e4:c7:c9:d3:1a:65:
c9:8c:9c:c2:9b:d6:f4:d7:e9:be:0a:9d:67:cf:00:32:c5:77:
98:b9:f7:51:db:da:d8:03:36:3b:81:7e:aa:b2:42:01:10:74:
3d:64:d9:e7:20:28:6e:7c:ed:f9:36:5e:99:aa:c8:df:1e:3e:
8e:45:33:cd:ac:50:70:52:ee:e4:1f:73:ce:df:09:46:90:fe:
6a:bf:82:da:c0:a1:95:be:f1:97:c5:ca:75:ee:76:40:4b:68:
74:5e:27:91:cd:8a:f6:62:39:c1:46:96:cf:32:45:28:db:f6:
20:d9:13:79:9f:63:b9:d1:84:81:76:2b:3d:ed:0f:e9:13:93:
b1:d2:d4:92:10:ff:ac:cc:7b:51:bc:b5:6a:af:bd:87:95:ee:
e6:6a:63:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:55:22 2025 by rpki-client