Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/EFD6B3E4E92011EFAEA84A65762E951A.roa
File: EFD6B3E4E92011EFAEA84A65762E951A.roa (raw, json)
Hash identifier: 9zBQ/HalIQeapQzeOVHNKpmuwNbiBsyYCyZ+QjKwDMA=
Subject key identifier: 19:E0:D8:9E:96:FE:35:31:2E:C8:B2:10:46:30:F9:F2:B9:99:3F:C2
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 2D
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/EFD6B3E4E92011EFAEA84A65762E951A.roa
Signing time: Wed 12 Feb 2025 09:08:34 +0000
ROA not before: Wed 12 Feb 2025 09:08:30 +0000
ROA not after: Sun 31 Dec 2028 09:08:30 +0000
asID: 30985
IP address blocks: 102.221.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 12 09:08:30 2025 GMT
Not After : Dec 31 09:08:30 2028 GMT
Subject: CN=67ac6512-6ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:e8:e4:df:a8:14:53:79:d7:7b:e6:14:b3:
53:e6:a8:be:36:19:2a:3c:63:29:a1:06:42:94:3e:
db:c7:05:81:5d:40:bf:d9:a9:f7:08:84:76:a9:25:
5d:1d:59:a5:92:66:2f:64:ef:b3:36:00:d1:c8:8f:
b5:5a:ae:ee:b2:af:4a:5b:07:c6:d2:8d:d9:d6:41:
9f:f2:69:41:74:f4:72:df:a5:57:50:95:45:31:59:
10:be:4e:18:8e:9b:7c:16:30:cc:7b:fe:88:2e:e7:
7e:2b:82:8a:c3:4b:a8:dd:20:cd:9f:15:c2:62:7a:
a2:fa:dc:bc:0f:b9:1c:c9:ab:bf:f2:92:5c:be:9e:
35:87:f5:06:a0:e7:34:b2:43:2a:cb:8a:08:40:9b:
0a:36:2d:94:61:89:0f:e4:6e:2d:e8:0b:d1:2f:0a:
bc:ce:bd:86:6f:0a:ba:c2:e7:e0:9b:cc:ee:95:94:
29:36:42:99:82:24:c0:c7:23:df:84:cb:e5:ad:38:
10:4d:b8:ba:a4:e5:73:7c:bb:ae:dd:a9:44:68:90:
ed:d5:ac:be:87:d4:99:55:e9:68:dd:9c:51:6d:fa:
85:cf:bb:8c:8c:03:13:a4:38:1a:b7:dd:d2:a4:9b:
15:85:96:3b:10:c2:bf:85:26:67:40:51:7c:50:fb:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E0:D8:9E:96:FE:35:31:2E:C8:B2:10:46:30:F9:F2:B9:99:3F:C2
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/EFD6B3E4E92011EFAEA84A65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.132.0/22
Signature Algorithm: sha256WithRSAEncryption
61:71:b1:f6:a8:48:85:0d:8e:e6:78:6d:ba:78:8d:79:53:21:
0a:69:f9:cd:9d:8a:e8:25:89:37:3c:17:30:79:dc:e6:53:3a:
9e:ce:a0:28:94:46:b0:a1:ee:51:af:e5:d4:fb:50:bd:99:27:
ce:85:a2:36:89:ef:13:08:3f:9d:be:24:c5:ee:d5:38:bc:de:
8c:e2:d9:af:65:64:63:08:3e:be:3b:d2:91:c7:9e:13:61:ca:
ab:41:80:fa:0b:e1:b0:95:c9:a2:49:3d:0b:67:c3:1c:8e:1a:
88:03:4a:c3:e9:c7:49:32:30:5b:df:ff:6a:02:0e:cc:94:be:
62:7c:18:cf:d3:2d:b4:fe:2b:4c:e0:04:ea:b0:00:54:c4:6b:
a0:47:eb:c1:65:01:f1:83:8b:d1:70:cf:02:67:3f:02:1b:bb:
47:b5:cb:05:37:62:bd:53:a3:b8:83:a3:41:fc:84:c5:a7:49:
12:e6:11:c6:54:07:32:d0:e8:8f:61:b4:dc:8a:90:f8:75:82:
ef:17:b9:e0:4d:65:97:02:d2:90:48:06:f6:9f:d0:b6:60:4e:
46:da:db:34:6c:bd:86:d7:d4:0d:80:8e:9f:19:fe:64:e3:99:
fa:9b:b7:aa:b8:cb:90:57:50:2e:84:23:b1:df:5d:55:c6:1e:
49:67:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:05:23 2025 by rpki-client