Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/21ED417AD44311EE9F191B53775412E6.roa
File: 21ED417AD44311EE9F191B53775412E6.roa (raw, json)
Hash identifier: yjH/QDfshN5GvY4hKqIChRW9bW4dTaesNxghIDd/wQQ=
Subject key identifier: 2D:C5:59:D3:1C:4F:F4:90:4B:08:2D:3C:E5:53:89:5A:74:4F:82:AA
Certificate issuer: /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial: 0E
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/21ED417AD44311EE9F191B53775412E6.roa
Signing time: Mon 26 Feb 2024 01:05:29 +0000
ROA not before: Mon 26 Feb 2024 01:05:26 +0000
ROA not after: Thu 26 Feb 2026 01:05:26 +0000
asID: 15704
IP address blocks: 102.214.128.0/22 maxlen: 22
102.216.216.0/22 maxlen: 22
2c0f:2240::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Feb 2024 01:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Validity
Not Before: Feb 26 01:05:26 2024 GMT
Not After : Feb 26 01:05:26 2026 GMT
Subject: CN=65dbe3d9-31d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:85:ea:23:5c:ea:4a:eb:40:ee:dd:36:15:
df:b3:7a:b0:02:05:e1:85:54:ff:b0:82:4b:5c:9d:
82:32:ee:70:c5:73:07:47:f2:ae:1b:b0:e6:16:5d:
13:99:fd:9f:c0:31:ef:64:78:80:cb:61:f4:df:4d:
8b:c6:31:ec:50:18:f2:d2:32:71:8a:10:50:f8:39:
ca:4a:17:95:ba:c1:36:28:19:f0:dc:26:ee:65:d9:
3e:33:78:fc:1b:af:27:a6:fb:65:39:4d:b4:e9:e2:
82:81:04:1f:e6:a5:33:90:bc:a6:30:f3:ee:ce:b6:
ed:d0:0b:e0:ee:bd:e3:b8:bc:c0:dd:a6:39:90:af:
62:0c:bc:e6:69:9b:16:be:2d:63:f1:54:6a:77:09:
f4:f3:a0:0b:56:97:8f:9a:6c:65:15:d1:fe:1b:0c:
08:6a:66:eb:d7:fa:69:df:72:a5:1b:26:8e:5c:34:
50:28:fa:cb:6b:d1:dd:bb:e1:c4:50:e1:1a:33:18:
35:bd:05:19:00:d7:71:86:6e:23:93:f3:27:c2:d6:
b5:d8:06:85:87:0a:8d:ac:75:e0:59:d8:e9:6c:2f:
58:b9:23:6e:3b:ea:cc:db:17:08:b3:13:bc:6f:12:
54:4d:7f:c4:30:ee:9e:3f:e8:44:cd:c4:1d:5f:e2:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:59:D3:1C:4F:F4:90:4B:08:2D:3C:E5:53:89:5A:74:4F:82:AA
X509v3 Authority Key Identifier:
keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/21ED417AD44311EE9F191B53775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.128.0/22
102.216.216.0/22
IPv6:
2c0f:2240::/32
Signature Algorithm: sha256WithRSAEncryption
15:8e:a2:6e:61:de:04:84:0d:b2:e9:43:3c:2e:e0:d3:d9:85:
f6:66:e3:b6:79:be:01:f7:f1:c5:0b:ad:b3:3a:5c:20:48:56:
0d:4a:e2:a2:ba:84:2d:46:30:25:b5:4a:2e:90:ae:7b:7e:62:
40:59:94:16:51:15:9d:fd:f6:53:e8:52:fc:7f:81:99:3d:53:
97:de:26:51:4e:de:da:40:0a:4e:5c:3e:12:cb:c7:91:19:0e:
f3:66:91:0d:91:e7:90:20:ae:e8:c2:03:0f:56:da:17:a0:69:
38:f3:df:8c:a3:43:29:fc:b1:7d:f7:26:28:e8:f9:0f:88:bc:
2a:af:99:f6:87:5d:f3:b9:fb:8a:fe:10:6e:91:09:dd:67:63:
43:cc:c0:e2:d9:c5:d9:ce:6b:64:36:1c:f5:c0:39:5f:76:63:
22:90:9c:63:db:3e:d1:9a:c9:83:0c:de:d5:36:d6:28:18:f5:
94:28:31:2a:80:fe:39:9c:b0:35:04:79:50:90:b0:18:31:0e:
d3:db:a9:c0:9a:5c:ab:9d:1e:2b:d9:1d:57:2b:0a:09:23:37:
cf:e9:56:90:cb:c1:71:15:e8:21:29:de:b3:60:05:fb:50:dd:
8c:21:7d:52:ca:20:3b:cb:35:36:f6:77:5b:b9:e3:bb:8c:c7:
90:a8:82:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:12:07 2025 by rpki-client