Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/2E26D920BFBD11EC8169C4865A40D577.roa
File: 2E26D920BFBD11EC8169C4865A40D577.roa (raw, json)
Hash identifier: ruUbdhDLG+M0tZIHzHVUQSAxAf/DBDlVC7udngjtgWM=
Subject key identifier: 1C:B8:8F:30:E1:1F:42:72:19:06:FC:B3:A9:0D:F8:A6:98:90:75:C7
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 80
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/2E26D920BFBD11EC8169C4865A40D577.roa
Signing time: Tue 19 Apr 2022 08:46:19 +0000
ROA not before: Tue 19 Apr 2022 08:46:15 +0000
ROA not after: Fri 19 Apr 2030 08:46:15 +0000
asID: 61317
IP address blocks: 102.215.228.0/22 maxlen: 22
102.215.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jun 2022 13:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Apr 19 08:46:15 2022 GMT
Not After : Apr 19 08:46:15 2030 GMT
Subject: CN=625e76da-c095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:ec:1e:92:d6:e5:3b:27:2b:1e:42:c1:3d:
17:6e:c6:89:31:a2:56:76:bd:21:0b:75:ad:6f:02:
94:e9:1e:43:94:a9:d6:30:38:73:a6:44:bc:1a:b4:
e5:68:76:fa:c5:21:6e:be:c2:1a:8e:6b:6d:66:ec:
fa:3a:c7:b6:50:87:ce:b2:0e:c3:da:6b:49:d2:82:
71:6e:90:5b:29:5b:c8:d2:36:e4:2d:db:fd:a0:49:
de:35:9e:cd:a8:ed:9b:cf:e2:3d:14:ed:26:a2:62:
bd:cb:25:2c:38:5b:4f:d6:f2:51:e5:53:3d:cb:b4:
93:ec:17:aa:7b:ff:4f:19:2f:8f:02:fe:84:ed:d5:
9a:71:21:ae:b5:56:a5:28:8f:d8:c4:ee:f5:ca:2e:
74:b5:60:89:2a:86:ee:03:35:f2:f9:f6:a2:52:38:
e8:5f:7e:8b:9e:05:9f:25:63:71:3e:c4:1c:fd:de:
7e:cc:80:3d:8c:3a:ae:71:4d:27:22:a1:1a:bd:19:
e6:ba:22:f3:98:8d:e3:a6:53:38:f3:9b:a6:15:c5:
2f:50:e1:0d:94:8b:76:ee:50:61:13:82:18:29:b6:
5a:f2:01:30:3e:30:2c:16:cd:64:3c:cc:6f:43:cb:
e8:5d:e2:b9:27:ba:cd:61:6b:1a:86:4a:3f:76:05:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B8:8F:30:E1:1F:42:72:19:06:FC:B3:A9:0D:F8:A6:98:90:75:C7
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/2E26D920BFBD11EC8169C4865A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:6e:a5:54:39:24:03:29:fe:61:2c:74:dc:58:ca:9c:fc:cd:
c8:13:b1:1b:c1:3a:59:c6:e7:fd:fa:61:0d:17:08:f8:5c:89:
99:5b:22:56:0b:37:30:17:41:91:a6:99:a0:78:6d:7f:2a:49:
e8:57:43:1b:d7:70:aa:a9:21:e8:19:4d:45:7a:1a:9d:29:2d:
d4:cf:44:8d:80:91:2c:cc:8e:6b:2e:b0:08:0f:b1:d6:b7:8b:
95:0a:f7:bd:14:79:34:75:53:08:eb:d3:7c:d0:e0:23:b9:96:
91:82:f2:ea:1c:b0:d3:b2:f7:81:ef:da:c1:29:87:2e:d3:42:
12:1e:90:bd:56:a0:06:bd:c7:ce:33:ef:84:38:84:b5:27:ee:
44:03:0e:92:88:f3:98:06:fd:28:49:2a:32:14:41:bf:28:1f:
9c:eb:78:c3:14:35:54:3c:7a:bb:d6:37:06:95:9f:d0:cb:ce:
70:08:04:a1:50:18:78:7e:41:38:91:23:66:cf:51:55:17:60:
10:41:37:1c:e2:c7:bf:cf:2a:94:56:88:73:e8:7f:cf:56:16:
a6:76:de:59:3e:3d:63:58:89:b8:e9:7e:b3:99:00:b4:46:70:
e5:6a:b5:41:e9:4b:6c:b5:de:bf:7a:5a:9c:f6:04:d8:77:87:
f5:fa:c6:12
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yMjA0MTkwODQ2MTVaFw0zMDA0MTkwODQ2MTVaMBgxFjAU
BgNVBAMMDTYyNWU3NmRhLWMwOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkGuwektblOycrHkLBPRduxokxolZ2vSELda1vApTpHkOUqdYwOHOmRLwa
tOVodvrFIW6+whqOa21m7Po6x7ZQh86yDsPaa0nSgnFukFspW8jSNuQt2/2gSd41
ns2o7ZvP4j0U7SaiYr3LJSw4W0/W8lHlUz3LtJPsF6p7/08ZL48C/oTt1ZpxIa61
VqUoj9jE7vXKLnS1YIkqhu4DNfL59qJSOOhffoueBZ8lY3E+xBz93n7MgD2MOq5x
TScioRq9Gea6IvOYjeOmUzjzm6YVxS9Q4Q2Ui3buUGETghgptlryATA+MCwWzWQ8
zG9Dy+hd4rknus1haxqGSj92BSy9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHLiP
MOEfQnIZBvyzqQ34ppiQdccwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzJFMjZEOTIwQkZCRDExRUM4MTY5QzQ4NjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1+QwDQYJKoZIhvcNAQEL
BQADggEBAAtupVQ5JAMp/mEsdNxYypz8zcgTsRvBOlnG5/36YQ0XCPhciZlbIlYL
NzAXQZGmmaB4bX8qSehXQxvXcKqpIegZTUV6Gp0pLdTPRI2AkSzMjmsusAgPsda3
i5UK970UeTR1Uwjr03zQ4CO5lpGC8uocsNOy94Hv2sEphy7TQhIekL1WoAa9x84z
74Q4hLUn7kQDDpKI85gG/ShJKjIUQb8oH5zreMMUNVQ8ervWNwaVn9DLznAIBKFQ
GHh+QTiRI2bPUVUXYBBBNxzix7/PKpRWiHPof89WFqZ23lk+PWNYibjpfrOZALRG
cOVqtUHpS2y13r96Wpz2BNh3h/X6xhI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org