Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/04B7C07E6F4811EC82F5C9C55A40D577.roa
File: 04B7C07E6F4811EC82F5C9C55A40D577.roa (raw, json)
Hash identifier: 7/KG9PxwVaflavYH6o01AegwCzVaf/OnvCvP/lBgzN8=
Subject key identifier: BB:32:51:E2:27:3F:FA:66:C0:52:54:33:8E:46:3C:0F:BB:3F:BF:08
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0E
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/04B7C07E6F4811EC82F5C9C55A40D577.roa
Signing time: Thu 06 Jan 2022 23:26:05 +0000
ROA not before: Fri 07 Jan 2022 23:26:01 +0000
ROA not after: Sun 07 Jan 2029 23:26:01 +0000
asID: 61317
IP address blocks: 102.217.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 May 2022 13:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jan 7 23:26:01 2022 GMT
Not After : Jan 7 23:26:01 2029 GMT
Subject: CN=61d77a8d-3cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:ab:d4:90:7f:ec:2c:96:84:2d:43:96:18:
59:f7:48:49:14:a9:b8:ea:a0:f9:5d:d7:7a:c0:5a:
20:83:f5:26:33:28:b1:3b:05:c7:c2:a5:8d:b2:e3:
91:b7:0c:6e:98:cf:c6:50:37:86:9e:02:a0:d8:2e:
df:10:96:d2:3c:be:ea:44:68:05:b1:db:7c:81:85:
aa:15:7d:a6:6e:e2:2e:29:08:dc:ef:3d:31:57:f1:
3a:27:9e:b8:2a:cb:84:72:39:71:e5:32:30:51:ff:
da:93:78:18:0a:bb:fa:e2:c4:96:47:5a:33:9e:6e:
0c:83:7c:e7:0d:fe:1a:44:46:7d:65:c3:e3:b3:1e:
a7:d7:89:ce:10:82:09:35:50:e2:48:dc:b0:ee:76:
87:e0:f0:d9:32:8d:f2:d9:20:0a:48:34:52:3a:f9:
87:df:03:a8:cb:47:f8:6c:3c:75:4a:3f:67:47:fc:
41:e6:9e:8e:67:26:d9:3d:85:b7:fc:e7:8a:10:1d:
be:b8:c0:e5:0a:0e:ef:64:f8:d0:64:e7:8e:44:19:
cf:f7:39:ab:f5:02:a5:29:54:98:0a:b1:25:34:8b:
80:48:92:43:47:0b:93:8f:1e:4b:6b:e3:bc:84:ae:
50:b0:ba:a8:27:2f:29:da:d8:ba:ca:3a:fe:21:1a:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:51:E2:27:3F:FA:66:C0:52:54:33:8E:46:3C:0F:BB:3F:BF:08
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/04B7C07E6F4811EC82F5C9C55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6f:21:36:76:78:e3:9d:38:90:a5:1c:53:d1:a5:21:88:a3:
72:d7:71:1a:26:52:43:9b:91:1d:67:26:04:ef:ed:09:2f:65:
73:16:79:ca:00:51:42:7a:f2:58:e4:9d:14:9d:72:55:78:70:
90:b8:9e:98:5a:8a:e8:5c:b1:e4:12:17:8b:27:9c:d3:a4:aa:
e2:20:07:95:d2:b0:6b:ba:05:11:1e:ac:d3:23:8a:36:e6:a1:
c6:7a:9b:3b:d8:93:a3:8c:34:aa:a2:4c:3d:ff:ad:43:7f:5b:
d3:09:7e:e2:f0:aa:95:12:ae:7e:c9:21:8b:a5:87:07:59:80:
e2:e2:17:97:dc:bc:68:15:45:d5:d1:fc:e4:a5:3a:c8:b1:68:
d0:48:97:6d:6e:e7:7d:bd:7d:3f:51:f3:f3:42:50:19:3b:05:
1d:a7:ee:9b:f0:4e:59:7f:11:05:e8:f6:bc:19:05:e7:b4:77:
cf:fc:f6:71:70:86:d4:75:b1:d6:cc:bd:63:65:86:36:f7:ca:
e4:c7:e0:e3:fe:f5:5c:b4:a0:f0:81:58:5f:00:b7:10:47:d3:
63:f5:f0:63:05:be:71:3d:7c:5f:4c:27:87:85:e4:e4:6d:bd:
54:f6:29:e7:fa:45:7b:b8:ee:4f:18:c7:a1:eb:5d:17:47:6d:
a3:f4:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org