Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0FD99A08D80311EC8FE7F5F3F1222468.roa
File: 0FD99A08D80311EC8FE7F5F3F1222468.roa (raw, json)
Hash identifier: kvRtt1vYxH6U7QcU2pZ27V0NWb7ZA7qA4ReRjyzPmdY=
Subject key identifier: FE:9E:AB:F6:E9:D5:82:9E:BD:C1:86:1D:78:E5:59:6B:89:46:78:BB
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: C8
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0FD99A08D80311EC8FE7F5F3F1222468.roa
Signing time: Fri 20 May 2022 06:07:00 +0000
ROA not before: Fri 20 May 2022 06:06:57 +0000
ROA not after: Mon 20 May 2030 06:06:57 +0000
asID: 7018
IP address blocks: 102.217.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 May 2022 07:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: May 20 06:06:57 2022 GMT
Not After : May 20 06:06:57 2030 GMT
Subject: CN=62873004-53d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:1b:0c:6f:4e:4f:15:e9:f0:43:99:7d:d5:
89:ca:3f:91:01:9c:a0:0d:70:ed:dc:86:14:bf:11:
e8:40:84:e3:0e:81:0f:84:ec:97:68:65:ed:5b:f9:
33:71:75:77:bf:b9:f3:9a:95:4d:f2:8d:38:39:27:
f4:a7:b7:84:e8:86:4c:73:27:f0:61:2e:a4:79:f8:
52:97:ff:75:27:23:d5:35:12:8f:32:97:fb:36:ce:
55:6c:33:3e:18:41:fb:24:6f:0d:76:f5:89:bc:7b:
5d:ef:9a:d3:8e:e2:3f:0e:7e:80:a2:69:8d:be:87:
ee:f7:3b:87:2f:c1:9f:13:4b:24:c0:c1:8b:d8:3f:
bd:71:0e:13:2c:f5:2a:36:a8:6b:5f:c4:77:3a:e9:
33:a2:7c:13:53:57:0c:66:26:f6:3d:5d:0c:13:29:
c6:f4:9f:d6:c2:1d:fd:e0:8c:bb:0e:f3:11:48:ce:
1e:5f:ea:c9:46:99:ee:16:d1:8a:f7:f0:2b:23:cb:
13:c0:0c:51:ed:88:31:0f:72:ba:4c:34:da:69:b7:
3e:b7:96:48:5e:23:68:1b:5d:ae:6c:f1:fc:de:77:
26:7f:c5:ca:17:50:11:d4:26:4d:fc:e1:40:ba:34:
79:bb:2d:4a:0d:f3:3d:5b:08:53:9f:68:d6:14:69:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9E:AB:F6:E9:D5:82:9E:BD:C1:86:1D:78:E5:59:6B:89:46:78:BB
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0FD99A08D80311EC8FE7F5F3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.106.0/24
Signature Algorithm: sha256WithRSAEncryption
32:34:f3:f7:f0:7d:58:14:1f:05:a7:11:6e:b6:0c:d3:b1:98:
12:62:f8:1a:72:32:ea:8a:d8:d8:59:e4:e3:34:54:20:ea:39:
ef:82:0c:75:3a:fe:1c:b1:70:ba:05:96:28:f7:a5:47:d5:fa:
36:8d:15:bd:03:dd:82:cf:a4:6a:59:30:61:f5:cb:7f:93:f9:
bd:72:b3:8f:e0:7a:e1:ed:e5:11:b8:33:58:72:d5:af:d3:a7:
db:ee:66:b5:7b:1e:83:75:36:42:3a:ce:be:4d:e3:e2:24:69:
53:13:87:08:8f:f2:f8:04:03:e1:60:b1:74:17:2e:0b:db:38:
08:c8:87:47:1b:8b:d4:46:95:65:fa:46:fc:65:26:1e:0b:e3:
74:d2:40:cd:4e:fc:92:96:b0:0b:79:85:39:13:1c:cb:50:2c:
70:43:5e:27:3e:cf:bc:d0:b4:1e:67:3f:a9:9a:8a:d9:d7:04:
66:d1:2f:f4:40:2e:7d:fb:b1:ae:3a:a1:69:8a:32:79:7d:40:
09:b1:32:58:63:8c:cb:c9:94:bf:93:9a:3f:91:3f:b4:cb:d3:
fc:15:6c:bc:c5:ce:33:6b:48:bc:53:4c:d6:88:b4:7f:f0:24:
a7:9c:0b:02:80:7b:4d:56:c3:26:52:96:0e:ec:40:ae:a9:a4:
aa:de:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org