Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1D53EFAED0F011ECB2AD53B7F1222468.roa
File: 1D53EFAED0F011ECB2AD53B7F1222468.roa (raw, json)
Hash identifier: T0fgXiFVDyXgbo7f5CzW2S0I5X8N5AcP8LS62oP0vzc=
Subject key identifier: D2:D3:C2:9B:2C:72:3F:CC:2D:EB:C2:38:40:93:CA:F7:93:A0:E1:A0
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: A3
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1D53EFAED0F011ECB2AD53B7F1222468.roa
Signing time: Wed 11 May 2022 06:03:44 +0000
ROA not before: Wed 11 May 2022 06:03:41 +0000
ROA not after: Sat 11 May 2030 06:03:41 +0000
asID: 328992
IP address blocks: 102.216.80.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: May 11 06:03:41 2022 GMT
Not After : May 11 06:03:41 2030 GMT
Subject: CN=627b51c0-0411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:97:98:fa:34:b0:9b:18:b9:02:6b:8b:78:
9d:75:74:70:25:0e:62:e0:37:3b:63:db:be:1d:8d:
ca:48:23:0d:76:50:a7:cb:c2:95:6b:43:72:e8:51:
bb:06:39:53:61:82:09:a5:a2:6a:6e:f8:0f:d8:b8:
18:63:7e:11:ea:3c:37:00:b6:fc:9b:88:ca:19:02:
94:48:18:b8:c5:9f:72:2a:dc:83:b8:32:51:8f:32:
6c:0c:b4:dd:8b:4b:30:c2:28:6a:a5:a9:05:4c:91:
64:96:8f:a1:31:df:82:52:b8:21:15:4e:d4:d4:cc:
5a:92:3e:8d:18:a6:bd:d7:8a:a2:b6:48:34:44:f8:
3d:72:c8:c6:75:7f:36:fb:35:6b:28:98:cd:e9:fe:
a0:eb:4f:98:65:4c:9e:12:f7:dc:b4:4c:df:4c:03:
7e:f9:c1:80:33:cb:72:fa:30:ff:5a:6d:98:5d:49:
46:4d:49:2c:63:05:ff:1b:0b:e2:5a:e0:e7:ed:b6:
ae:0b:9a:8e:7f:36:72:15:b0:c0:7d:af:d9:fc:66:
c1:2f:d2:e2:8b:64:4e:1e:04:2e:25:b7:04:6e:c7:
63:ea:8a:c1:4f:b6:f8:07:da:16:af:9b:4c:e0:65:
33:bb:b4:71:85:e1:c2:ec:fb:3c:95:b4:8d:e1:8e:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D3:C2:9B:2C:72:3F:CC:2D:EB:C2:38:40:93:CA:F7:93:A0:E1:A0
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1D53EFAED0F011ECB2AD53B7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:71:2d:85:dd:f7:14:9b:57:46:b6:ee:05:95:f8:07:5c:0e:
09:fa:bd:f0:2e:34:bb:1a:a0:9c:38:f7:f7:c3:0a:94:01:ad:
92:1b:91:5f:63:80:2f:28:ba:f9:17:5a:16:e8:a6:80:cd:a7:
bc:02:85:74:29:e5:94:87:6f:50:2e:59:f9:3c:25:be:03:50:
7c:c0:77:95:20:32:be:fe:9f:2c:30:4f:49:32:b4:00:86:eb:
e3:11:2d:bf:7d:df:78:c3:98:0b:6b:f1:a3:6c:e5:e8:b5:c9:
2e:c5:1f:94:cb:e7:e9:27:d3:5f:62:b4:87:99:0f:35:a2:4d:
98:30:8b:f3:af:8c:9c:3b:05:ee:d5:1f:7c:d4:63:95:9b:3c:
b4:f3:6c:61:68:04:1b:a9:db:71:91:1f:f6:b8:71:95:df:37:
7a:1e:a5:db:e4:f6:26:70:a7:83:30:89:f5:ae:1e:fb:8f:05:
5c:ca:4a:cb:c6:06:a3:4b:34:6c:4b:33:4f:3a:71:d3:56:7c:
07:2a:56:aa:99:05:c7:75:f1:94:63:2d:d2:22:6f:f7:9f:36:
06:cb:8a:74:a7:ee:5a:18:e9:c0:3e:a2:51:89:2e:d7:f1:09:
30:a5:9a:29:29:68:91:ce:e4:7e:a7:29:85:a0:94:5d:a2:d2:
4b:12:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-fra.rpki-client.org