Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0282E61ABFBD11EC9ADF4D865A40D577.roa
File: 0282E61ABFBD11EC9ADF4D865A40D577.roa (raw, json)
Hash identifier: pk8+tI54eb6j1kwA26dJM5hNGmI3WHhPRABQLED10uk=
Subject key identifier: 34:AA:12:C5:14:3C:E6:45:4E:8C:17:EF:22:59:D7:44:D9:7B:F3:D0
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 7E
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0282E61ABFBD11EC9ADF4D865A40D577.roa
Signing time: Tue 19 Apr 2022 08:45:05 +0000
ROA not before: Tue 19 Apr 2022 08:45:00 +0000
ROA not after: Sat 19 Jan 2030 08:45:00 +0000
asID: 328992
IP address blocks: 102.215.228.0/22 maxlen: 22
102.215.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Apr 19 08:45:00 2022 GMT
Not After : Jan 19 08:45:00 2030 GMT
Subject: CN=625e7691-fb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:64:91:ff:fb:64:3f:b0:6e:72:89:9a:8c:
3a:d3:0a:71:ac:76:62:41:62:56:56:2d:5e:c2:1a:
f7:c3:e5:88:03:02:31:23:8b:03:53:c2:c7:74:a4:
b6:7c:71:2e:fc:c8:ec:df:8f:07:85:6c:ac:49:ee:
ec:e7:db:d3:e4:d8:cc:ee:8e:dc:0c:d4:92:11:54:
7a:89:ea:db:bb:ef:92:75:46:ae:3c:39:e4:bc:93:
e8:9b:a9:bd:4f:1b:0d:5a:f9:7c:cc:43:9e:bc:f4:
c9:4b:ab:94:69:8a:34:91:dd:2b:c3:aa:4f:a4:fd:
4d:16:b1:d9:88:16:44:6c:96:73:77:31:45:ff:b6:
71:8f:b7:04:50:dd:ab:39:1d:61:02:5a:53:c4:06:
6a:0d:b0:5d:91:15:b9:9c:47:34:2d:20:d7:0e:b8:
da:3b:a6:be:e1:29:be:7b:83:ff:1f:68:57:89:00:
60:6c:98:cc:60:7d:fd:0d:97:2e:4e:84:52:32:d3:
c5:cf:35:47:f7:dc:3f:bb:6b:95:0f:16:c2:34:4b:
aa:f1:51:fd:76:77:4e:f3:b5:02:1d:b1:3e:22:29:
44:e9:11:27:3c:0b:e3:0b:92:2a:d6:87:2c:fc:24:
59:5e:cc:d2:27:2f:65:86:32:1a:72:84:a5:06:44:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:12:C5:14:3C:E6:45:4E:8C:17:EF:22:59:D7:44:D9:7B:F3:D0
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0282E61ABFBD11EC9ADF4D865A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.228.0/22
Signature Algorithm: sha256WithRSAEncryption
09:18:72:08:0d:fa:67:95:e5:01:9e:75:8f:40:79:aa:82:47:
52:b4:aa:a0:1c:4e:32:a5:1c:e2:d1:44:f6:45:12:8a:c7:99:
a6:db:86:21:8e:86:21:44:cb:d4:68:1f:40:16:ff:ac:c9:40:
5f:cf:4a:c7:50:0f:28:bd:f7:95:51:4d:97:a9:48:ac:7f:06:
ed:46:77:bf:ba:d7:f6:c7:28:a8:9e:dc:80:57:79:44:7f:b4:
f2:72:9f:22:04:56:9b:5c:df:e8:c5:68:e8:ad:17:93:2a:8d:
fe:e2:ed:6f:2c:d4:e2:c8:32:b5:da:24:5e:ac:6d:c4:65:cf:
7f:09:ea:9d:85:2f:66:13:b6:20:26:4d:b7:05:2d:89:0b:cd:
1b:fa:04:15:69:1a:10:b7:ae:f7:49:e8:f7:b9:3a:2d:06:90:
33:89:5f:e5:8f:0f:c6:c2:b1:b5:3d:82:65:6c:d0:cd:ec:b5:
48:b0:28:c8:17:5e:c7:60:31:62:da:ff:cd:18:c1:f3:0e:58:
16:75:dc:63:8c:b6:eb:42:5c:7f:bc:f4:93:85:f7:2c:43:f9:
26:21:d8:28:6c:e2:42:37:df:63:54:d0:73:08:31:f4:28:06:
10:6a:35:3c:ab:42:6c:4d:3c:2d:e9:bc:fb:c6:7e:03:76:7c:
3a:49:0e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-fra.rpki-client.org