Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/3E85450AE95611EC827103AAF1222468.roa
File: 3E85450AE95611EC827103AAF1222468.roa (raw, json)
Hash identifier: MsuDe/Gv0TuokzNlN2b3nh4CYGyBgGo+yrBHtWpMFrY=
Subject key identifier: 0E:55:F5:B0:7F:50:38:98:FC:B9:C9:81:AF:B9:4C:E7:EE:60:AA:D3
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0132
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/3E85450AE95611EC827103AAF1222468.roa
Signing time: Sat 11 Jun 2022 07:15:17 +0000
ROA not before: Sat 11 Jun 2022 07:15:13 +0000
ROA not after: Tue 11 Jun 2030 07:15:13 +0000
asID: 328992
IP address blocks: 102.215.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 27 Dec 2022 11:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 11 07:15:13 2022 GMT
Not After : Jun 11 07:15:13 2030 GMT
Subject: CN=62a44105-4e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:d4:04:92:af:8b:76:9a:f4:ea:0e:3e:d2:
2c:c6:97:9a:30:45:88:18:a9:95:1f:77:5e:b2:47:
77:18:0c:64:60:7a:50:28:2e:f1:2d:7c:98:ac:b7:
51:8e:cf:3e:80:a6:e9:8e:d0:7a:f5:77:4e:79:30:
c8:be:3f:2d:2f:e1:ce:54:32:81:0c:9a:a2:84:90:
ed:0c:a5:d3:a4:15:ba:52:77:18:f8:e8:05:ac:45:
f6:b9:47:b3:c7:89:26:0e:68:3d:54:a4:2e:18:91:
ca:89:1b:19:4c:ac:34:e6:29:c9:40:6e:cf:ee:d4:
ad:63:21:97:3b:5b:3d:a7:09:1b:64:35:75:e9:02:
92:b0:fd:37:61:bb:d1:fd:ba:ca:d2:44:8f:bf:6a:
f8:61:19:4d:3a:8c:b1:22:d0:10:ff:a5:ce:56:5b:
73:41:20:77:3f:7e:31:bb:0a:b1:3e:6f:f3:88:28:
0e:cd:e8:97:9c:fe:d2:1f:24:aa:f2:71:59:18:a2:
a2:5e:5f:5a:cb:13:e4:29:bf:40:53:0b:a4:e6:2f:
7e:17:48:dc:c0:9f:00:de:61:80:5a:07:fa:63:4a:
61:ac:c3:8a:5e:fe:36:00:9f:88:07:68:7a:61:90:
55:6c:4e:64:f6:a7:0f:5f:52:22:c3:82:c0:70:a3:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:55:F5:B0:7F:50:38:98:FC:B9:C9:81:AF:B9:4C:E7:EE:60:AA:D3
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/3E85450AE95611EC827103AAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
40:61:bf:0a:8c:1b:e2:f9:3c:c6:b1:a2:64:0d:93:9d:9c:27:
fe:6c:30:f0:09:ed:43:48:da:4a:3f:20:0d:47:af:7b:02:d1:
15:8c:d0:f3:c0:37:23:32:f1:af:9b:b2:5e:8d:60:5c:d2:af:
86:ff:cb:18:20:9e:be:e5:a5:95:60:03:da:fb:90:a5:2e:1e:
b5:c1:f6:e3:15:89:1d:79:a3:61:e4:54:f3:a5:f4:43:e0:83:
cc:7a:9c:34:c6:b3:8a:2c:52:24:62:d9:af:36:14:f6:d9:df:
32:1f:87:16:5c:6e:68:6a:64:8b:f4:a8:21:ce:cd:b5:ff:56:
05:cc:0a:33:83:7d:77:db:2d:de:d3:83:06:c3:7d:d4:a5:14:
b3:18:c5:df:93:7a:ed:f0:c1:f1:2d:3a:a1:3b:ec:9a:52:49:
8a:c9:81:06:45:22:e4:ec:70:9d:42:74:71:6c:e5:15:66:4d:
88:50:0e:01:2d:4c:b8:76:ed:ee:51:59:73:50:92:8f:ea:3e:
0e:23:9f:8d:9b:a5:dc:ea:14:e4:a6:c8:08:f8:6d:c9:6c:7b:
1e:02:c9:90:22:dd:9d:84:cc:62:0f:08:2b:3d:b6:ba:3b:d8:
7e:c7:89:01:f7:86:62:29:7e:f4:06:1c:09:86:fd:44:89:29:
60:e3:a9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org