Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/D151CFFCEA2A11EFABA9659F762E951A.roa
File: D151CFFCEA2A11EFABA9659F762E951A.roa (raw, json)
Hash identifier: /6OjGPVAoDzPfrttLEpqBPr8Q2SuYloucnUfcUP8/iY=
Subject key identifier: E2:57:F7:5A:9F:A9:AD:CA:59:59:18:E1:FF:B9:4D:14:FB:43:57:F0
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 42
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/D151CFFCEA2A11EFABA9659F762E951A.roa
Signing time: Thu 13 Feb 2025 16:51:49 +0000
ROA not before: Thu 13 Feb 2025 16:51:45 +0000
ROA not after: Sun 31 Dec 2028 16:51:45 +0000
asID: 30985
IP address blocks: 102.221.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 13 16:51:45 2025 GMT
Not After : Dec 31 16:51:45 2028 GMT
Subject: CN=67ae2325-a358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:7f:fe:46:f2:5c:6e:4b:c5:25:e4:93:57:
58:24:10:54:a3:90:1c:8f:97:05:db:2b:47:4b:70:
ed:8f:76:8e:8e:be:ef:44:75:73:07:a2:8e:47:e1:
75:dc:25:df:82:19:7d:7c:2e:8f:d9:0b:46:d1:51:
f0:86:24:63:67:ae:b5:66:fe:bf:d9:4d:9d:12:d0:
92:50:86:c6:6b:7e:8c:21:9f:90:41:02:04:b6:ad:
73:36:93:04:af:a5:91:07:f8:4d:14:33:a0:b4:c3:
cd:31:32:6d:3f:c5:29:36:df:34:ec:9c:c6:6b:06:
55:f7:70:52:e7:8b:a0:7c:77:ed:b5:cc:39:ef:85:
c4:04:ff:63:c3:a8:98:19:24:01:61:08:f0:7b:13:
fb:90:38:7f:0d:e0:82:5b:05:de:fa:b4:4d:77:f3:
15:32:cc:ae:32:46:6d:41:14:46:7c:08:da:d7:ca:
83:ed:df:b7:ec:aa:6d:05:60:42:6f:f8:fa:32:bd:
88:7c:b7:73:8e:aa:ae:ab:ea:4c:31:9d:41:e0:89:
e8:df:36:b0:31:4c:8d:4c:cc:94:60:8f:85:13:63:
6c:a4:7f:ce:ad:7d:f6:9f:1a:c0:0a:bf:88:ac:ee:
70:75:5b:f6:97:82:0d:ad:83:cb:2e:49:19:6c:54:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:F7:5A:9F:A9:AD:CA:59:59:18:E1:FF:B9:4D:14:FB:43:57:F0
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/D151CFFCEA2A11EFABA9659F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:b0:4e:df:fd:65:97:98:2d:cb:68:f6:30:d1:02:24:70:19:
0d:93:20:56:ca:45:b4:67:f5:81:4b:36:ee:89:7d:38:25:d1:
df:53:f1:1e:54:7b:f1:d0:e2:67:4a:fa:77:38:c2:0a:2a:b5:
93:bd:94:c7:f3:36:a7:24:26:33:b4:54:71:33:1c:7f:32:9e:
27:bc:89:cd:83:47:96:85:d7:03:da:24:74:c5:45:02:c8:86:
0d:0e:c7:42:93:e3:1c:67:58:3f:a7:f4:ad:38:99:d5:e6:82:
c7:d1:49:35:8e:3e:28:02:1c:3c:d1:94:fa:84:2b:ae:8d:38:
eb:ac:a5:3d:c2:b6:5d:9e:42:a5:6f:b6:29:b4:0d:37:cf:89:
84:6d:57:c0:ad:ff:41:31:e5:35:51:95:5e:ac:68:29:16:29:
e9:9b:83:58:f9:f2:1f:aa:45:e1:a0:33:b3:7c:5d:e6:5d:85:
98:c5:81:f6:87:4d:06:de:32:a6:69:ac:1d:fb:d2:61:1e:63:
3c:77:99:e4:f1:13:ad:d3:96:5c:a8:8b:a6:e0:87:0e:08:fc:
57:cd:bb:0b:db:dd:7c:21:bf:9b:be:60:6e:52:ed:04:de:c6:
e4:7c:e7:30:3e:66:aa:9f:1a:d5:5e:e7:32:3d:8b:8d:bf:8d:
a5:94:1c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:18 2025 by rpki-client