Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/07D02BD26F4511ECBCA34ABD5A40D577.roa
File: 07D02BD26F4511ECBCA34ABD5A40D577.roa (raw, json)
Hash identifier: yvJOVP/Vw7DfTnYM6S3nFtKJTZZ1FVlO5T9IJOVI7kY=
Subject key identifier: C4:AE:E0:89:08:A8:70:AB:92:C8:B2:F7:73:98:31:F8:FC:C9:3F:D7
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0A
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/07D02BD26F4511ECBCA34ABD5A40D577.roa
Signing time: Thu 06 Jan 2022 23:04:42 +0000
ROA not before: Fri 07 Jan 2022 23:04:37 +0000
ROA not after: Mon 07 Jan 2030 23:04:37 +0000
asID: 328992
IP address blocks: 102.217.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jan 7 23:04:37 2022 GMT
Not After : Jan 7 23:04:37 2030 GMT
Subject: CN=61d7758a-0ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:10:de:05:6d:b6:07:50:5b:a5:bc:ff:a4:a2:
c3:a7:22:6b:a4:12:6a:62:df:7c:90:bd:8a:6d:8a:
8f:13:08:60:95:ce:6e:85:33:59:6a:cc:2e:d6:e5:
a4:be:79:6c:c8:91:e6:e2:fb:6d:fb:cf:54:3a:1f:
a7:80:c0:d6:59:14:cd:b0:4e:2a:1b:66:44:c9:74:
09:1e:37:04:91:70:5d:c8:69:71:5c:de:13:7f:5e:
50:4e:0b:14:8a:b3:9c:db:ee:20:42:79:52:11:64:
4e:ba:2e:e8:48:4a:90:73:f0:cf:ff:a5:c0:67:63:
ec:f3:3f:99:11:15:40:df:89:32:20:e9:50:bf:c1:
f6:3f:7e:68:68:14:77:3d:ee:f8:17:f4:4b:62:2a:
99:4d:ba:14:1c:42:ab:59:a1:07:65:0e:74:54:90:
60:27:bb:f9:29:24:ca:a5:a9:4a:2f:29:89:b5:13:
55:8e:53:57:49:a8:e1:3b:56:fc:2f:15:d8:e8:e2:
a8:4a:2e:07:d0:d2:5a:dd:18:e8:04:70:b0:53:11:
70:43:77:af:d3:c2:fd:b4:42:29:df:6e:a5:dd:57:
e5:6b:39:0f:3b:fe:5f:f5:5f:88:54:d7:26:6e:d4:
9f:1d:a2:f7:6a:78:99:e0:cc:65:b9:ce:4d:af:39:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:E0:89:08:A8:70:AB:92:C8:B2:F7:73:98:31:F8:FC:C9:3F:D7
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/07D02BD26F4511ECBCA34ABD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:4d:bf:6a:42:94:4a:4c:6b:be:41:bf:47:41:cc:df:bf:12:
6f:c4:ca:3b:05:f8:c8:9b:d1:6f:42:16:07:33:af:a2:3d:8a:
6d:e6:fc:d9:d6:01:65:d9:06:f9:e5:f8:23:5c:56:71:3e:c7:
eb:63:75:80:22:e1:04:1d:2f:4e:2b:1e:c8:5b:c6:77:77:ca:
fd:d8:65:45:68:e6:ae:1a:88:91:cd:42:71:c1:b5:c5:22:63:
46:14:90:a4:58:e5:bc:45:8f:cf:31:e2:bc:93:93:06:7e:bd:
16:9c:b1:49:fb:24:a1:94:a5:9c:55:ba:a1:a9:a8:e8:e1:e1:
b0:37:d1:e7:3d:b2:ca:48:53:34:5c:a8:fc:b5:d0:65:03:e0:
94:b5:5c:70:39:4a:b3:b9:29:c8:49:82:00:71:35:a8:62:8e:
3e:bc:77:e8:d9:95:e6:ab:0a:16:ec:6f:1b:59:7a:dd:a1:38:
47:79:e4:09:c6:4a:84:2d:69:3f:bd:75:f2:f1:95:3f:7c:dd:
fe:33:c8:59:b4:9d:a0:51:4b:73:ae:a2:7a:13:39:dd:1c:76:
6e:27:60:e0:14:85:77:b4:46:a1:7c:24:57:ba:29:30:14:0c:
3b:c9:9d:0c:f2:0c:ff:0b:49:2b:b9:fa:09:31:46:88:9c:8e:
e7:92:26:ee
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NDY1OUFGMTEwLwYDVQQFEyg2MEEwRTVEMUFDNjZDOEFFM0I3QzlFNkE4RUY1QkMw
NEI4QkJCODhFMB4XDTIyMDEwNzIzMDQzN1oXDTMwMDEwNzIzMDQzN1owGDEWMBQG
A1UEAwwNNjFkNzc1OGEtMGNjYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOwQ3gVttgdQW6W8/6Siw6cia6QSamLffJC9im2KjxMIYJXOboUzWWrMLtbl
pL55bMiR5uL7bfvPVDofp4DA1lkUzbBOKhtmRMl0CR43BJFwXchpcVzeE39eUE4L
FIqznNvuIEJ5UhFkTrou6EhKkHPwz/+lwGdj7PM/mREVQN+JMiDpUL/B9j9+aGgU
dz3u+Bf0S2IqmU26FBxCq1mhB2UOdFSQYCe7+SkkyqWpSi8pibUTVY5TV0mo4TtW
/C8V2OjiqEouB9DSWt0Y6ARwsFMRcEN3r9PC/bRCKd9upd1X5Ws5Dzv+X/VfiFTX
Jm7Unx2i92p4meDMZbnOTa85lj0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTEruCJ
CKhwq5LIsvdzmDH4/Mk/1zAfBgNVHSMEGDAWgBRgoOXRrGbIrjt8nmqO9bwEuLu4
jjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0MEQ1NzcvWUtEbDBh
eG15SzQ3Zko1cWp2VzhCTGk3dUk0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWUtEbDBheG15SzQ3Zko1cWp2VzhCTGk3dUk0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0
MEQ1NzcvMDdEMDJCRDI2RjQ1MTFFQ0JDQTM0QUJENUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbZaDANBgkqhkiG9w0BAQsF
AAOCAQEAf02/akKUSkxrvkG/R0HM378Sb8TKOwX4yJvRb0IWBzOvoj2Kbeb82dYB
ZdkG+eX4I1xWcT7H62N1gCLhBB0vTiseyFvGd3fK/dhlRWjmrhqIkc1CccG1xSJj
RhSQpFjlvEWPzzHivJOTBn69FpyxSfskoZSlnFW6oamo6OHhsDfR5z2yykhTNFyo
/LXQZQPglLVccDlKs7kpyEmCAHE1qGKOPrx36NmV5qsKFuxvG1l63aE4R3nkCcZK
hC1pP7118vGVP3zd/jPIWbSdoFFLc66iehM53Rx2bidg4BSFd7RGoXwkV7opMBQM
O8mdDPIM/wtJK7n6CTFGiJyO55Im7g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-fra.rpki-client.org