Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/26C417406F0611EC9C07B1885A40D577.roa
File: 26C417406F0611EC9C07B1885A40D577.roa (raw, json)
Hash identifier: T1zH4/kI1tPPKppeoF7B0IBfnfq/YPYdDa6SHPDsIgE=
Subject key identifier: 40:73:D8:6D:EE:41:8E:EE:90:E7:99:81:51:6E:41:76:E4:4B:80:E1
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 08
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/26C417406F0611EC9C07B1885A40D577.roa
Signing time: Thu 06 Jan 2022 15:34:35 +0000
ROA not before: Thu 06 Jan 2022 15:34:32 +0000
ROA not after: Sun 06 Jan 2030 15:34:32 +0000
asID: 328992
IP address blocks: 102.217.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jan 6 15:34:32 2022 GMT
Not After : Jan 6 15:34:32 2030 GMT
Subject: CN=61d70c0b-aef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:7d:ee:2f:4f:e7:d4:15:14:ec:39:99:10:
dd:af:c2:3a:aa:94:60:0c:e5:94:c8:77:45:93:ee:
61:86:d6:d3:c2:72:25:1f:84:72:01:6e:27:63:5a:
ba:d7:96:a7:93:bf:31:62:f9:46:04:1f:1d:cf:9f:
71:01:f6:a0:be:16:60:2c:f3:bf:e5:58:4e:2e:54:
4f:ac:73:da:8a:86:7b:9c:78:6a:b0:d6:79:f9:44:
af:29:35:63:52:55:bd:7b:b5:5d:0e:9a:8c:74:43:
9d:0b:57:94:48:9c:34:bd:df:eb:aa:48:24:5e:15:
43:19:a8:32:90:ad:01:0b:34:38:29:a4:f7:83:69:
97:c5:11:2f:2a:04:a1:55:55:23:cd:a9:36:13:5c:
df:18:ad:96:27:d9:2e:ac:21:30:e6:3e:16:b3:27:
30:30:30:f9:98:0a:92:4f:74:2b:ae:b7:67:46:82:
07:2f:b4:5f:c3:79:85:cf:94:be:44:58:bf:22:72:
4e:1a:5e:44:cb:42:bf:39:0b:09:aa:76:42:24:a8:
da:dc:10:3c:dd:cb:f5:45:99:7b:3c:2d:32:2d:a4:
7b:2a:c8:9e:75:12:d5:6b:a3:4e:76:b5:47:fa:fc:
48:2c:d6:1e:b4:c4:20:21:5a:94:d9:f5:f2:82:70:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:73:D8:6D:EE:41:8E:EE:90:E7:99:81:51:6E:41:76:E4:4B:80:E1
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/26C417406F0611EC9C07B1885A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:e6:f1:af:f7:39:a5:23:f8:53:9f:db:ff:66:a2:2b:55:f4:
22:f3:01:bd:c5:28:5f:b7:12:79:51:52:2f:dc:e7:92:2f:53:
fd:cf:ae:5e:4d:3b:11:a9:12:82:f6:08:42:b7:c4:99:db:27:
6f:8a:fc:06:d1:e8:8c:73:7a:a1:31:5d:85:aa:b8:18:9f:47:
94:b6:24:84:3b:9e:dd:42:e3:ac:1b:53:67:37:d3:33:18:ae:
04:ef:8c:42:d6:c7:0d:98:14:9e:3d:fe:5e:b2:c0:40:27:68:
7f:ba:74:25:12:1b:41:52:06:ec:53:da:5f:b8:c2:70:b3:d9:
a0:f7:82:7c:7c:27:2b:35:29:1e:9c:09:67:dc:f0:69:8e:8e:
85:5e:58:b9:47:18:b5:c6:7b:7a:9e:c4:1f:15:0f:af:ad:cb:
95:30:2c:ea:a6:45:4c:33:3c:cf:d4:83:25:8a:eb:db:38:7e:
9a:a3:62:b6:a1:bf:4c:02:f7:7b:c0:c3:be:ee:88:e4:d1:76:
08:e4:5a:58:01:d8:85:06:11:36:c3:34:f0:64:18:58:8e:d2:
90:c7:17:22:49:db:29:aa:3a:2b:60:d6:44:9f:33:b3:16:50:
1a:0a:2b:e0:d5:b9:1c:80:df:b2:d8:b6:c7:b3:65:15:80:b7:
3b:ee:cf:cc
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NDY1OUFGMTEwLwYDVQQFEyg2MEEwRTVEMUFDNjZDOEFFM0I3QzlFNkE4RUY1QkMw
NEI4QkJCODhFMB4XDTIyMDEwNjE1MzQzMloXDTMwMDEwNjE1MzQzMlowGDEWMBQG
A1UEAwwNNjFkNzBjMGItYWVmMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANOGfe4vT+fUFRTsOZkQ3a/COqqUYAzllMh3RZPuYYbW08JyJR+EcgFuJ2Na
uteWp5O/MWL5RgQfHc+fcQH2oL4WYCzzv+VYTi5UT6xz2oqGe5x4arDWeflEryk1
Y1JVvXu1XQ6ajHRDnQtXlEicNL3f66pIJF4VQxmoMpCtAQs0OCmk94Npl8URLyoE
oVVVI82pNhNc3xitlifZLqwhMOY+FrMnMDAw+ZgKkk90K663Z0aCBy+0X8N5hc+U
vkRYvyJyThpeRMtCvzkLCap2QiSo2twQPN3L9UWZezwtMi2keyrInnUS1WujTna1
R/r8SCzWHrTEICFalNn18oJwgW0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRAc9ht
7kGO7pDnmYFRbkF25EuA4TAfBgNVHSMEGDAWgBRgoOXRrGbIrjt8nmqO9bwEuLu4
jjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0MEQ1NzcvWUtEbDBh
eG15SzQ3Zko1cWp2VzhCTGk3dUk0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWUtEbDBheG15SzQ3Zko1cWp2VzhCTGk3dUk0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0
MEQ1NzcvMjZDNDE3NDA2RjA2MTFFQzlDMDdCMTg4NUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbZaDANBgkqhkiG9w0BAQsF
AAOCAQEAOubxr/c5pSP4U5/b/2aiK1X0IvMBvcUoX7cSeVFSL9znki9T/c+uXk07
EakSgvYIQrfEmdsnb4r8BtHojHN6oTFdhaq4GJ9HlLYkhDue3ULjrBtTZzfTMxiu
BO+MQtbHDZgUnj3+XrLAQCdof7p0JRIbQVIG7FPaX7jCcLPZoPeCfHwnKzUpHpwJ
Z9zwaY6OhV5YuUcYtcZ7ep7EHxUPr63LlTAs6qZFTDM8z9SDJYrr2zh+mqNitqG/
TAL3e8DDvu6I5NF2CORaWAHYhQYRNsM08GQYWI7SkMcXIknbKao6K2DWRJ8zsxZQ
Ggor4NW5HIDfsti2x7NlFYC3O+7PzA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-fra.rpki-client.org