Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4B27C35A4F1B11EFB7AD6EAE762E951A.roa
File: 4B27C35A4F1B11EFB7AD6EAE762E951A.roa (raw, json)
Hash identifier: sgBFqTQSb5AnrURXu2MsqIAcOLZ5tmXqKyrGAQHcdfE=
Subject key identifier: DC:78:A3:F4:92:FB:35:53:54:77:C5:12:7B:09:A6:96:F8:9A:1F:C1
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 04D8
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4B27C35A4F1B11EFB7AD6EAE762E951A.roa
Signing time: Wed 31 Jul 2024 09:00:12 +0000
ROA not before: Wed 31 Jul 2024 09:00:08 +0000
ROA not after: Wed 31 Jul 2030 09:00:08 +0000
asID: 7018
IP address blocks: 102.216.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Nov 2024 15:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jul 31 09:00:08 2024 GMT
Not After : Jul 31 09:00:08 2030 GMT
Subject: CN=66a9fd1c-80ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:59:6a:8a:0a:52:3e:14:bf:12:45:4a:76:
f8:71:aa:84:d9:94:00:d0:49:dc:2f:3a:e9:2c:2d:
e6:6a:64:3b:6d:8a:40:05:08:c3:7f:ab:91:00:18:
bc:40:95:42:a5:6e:30:b3:ee:a5:b6:9a:d4:cd:31:
1d:25:41:b1:2d:53:30:67:59:5a:49:66:9c:84:b8:
79:49:ed:b3:1b:74:db:d8:50:65:e1:78:b5:ca:a6:
de:31:26:c2:9c:d1:2d:62:b0:cb:49:d8:11:32:b5:
62:49:fb:3b:0a:b9:60:07:32:60:f8:98:89:85:4d:
f7:93:ef:42:c6:1b:14:12:e0:9a:6f:ee:e4:15:22:
9b:57:f2:02:fe:5b:85:a8:2f:42:19:3f:82:b5:e4:
51:c6:1b:c6:f1:1c:3a:23:e7:8f:42:8e:98:9c:e8:
91:0f:e4:fe:a2:23:8a:cb:a5:9e:3f:8e:3c:7c:35:
d5:c4:69:eb:37:6f:dd:1d:64:9f:1a:94:cc:ab:67:
30:80:2b:30:c1:3e:25:96:3f:8f:c8:0b:d5:cb:6a:
e2:ea:d2:72:83:1e:f6:5b:35:a7:3a:22:42:65:b7:
9c:80:4e:a4:79:f8:80:1d:86:8f:d0:1c:c5:04:6d:
02:ca:d8:e5:f3:15:16:80:bd:a2:0d:ad:81:50:5d:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:78:A3:F4:92:FB:35:53:54:77:C5:12:7B:09:A6:96:F8:9A:1F:C1
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4B27C35A4F1B11EFB7AD6EAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/24
Signature Algorithm: sha256WithRSAEncryption
93:54:b0:42:0a:a2:43:68:a4:74:7e:64:f6:fe:15:c2:3d:ac:
b4:0f:2b:33:a1:12:67:1b:cc:e8:b5:6f:4f:20:0c:bc:e3:07:
a4:4d:6b:44:3f:28:82:d3:0f:77:30:4a:4c:5d:20:fe:c1:77:
6f:5f:49:10:90:7d:c5:74:1b:d3:2f:8b:a3:fe:5b:fb:7a:9d:
ea:62:ed:72:74:b8:89:2f:3a:11:6d:33:6c:63:f5:e0:14:65:
71:fb:38:4f:3c:54:f1:cb:ad:35:43:4c:2c:28:54:44:5f:16:
e9:e7:ee:9f:55:f7:67:69:bc:ff:35:fc:76:94:20:7b:b3:e9:
8f:8f:92:4c:0d:b6:e7:96:29:9a:a4:a8:17:65:af:28:90:a1:
ee:fc:67:85:71:e1:37:16:ba:b1:9b:56:de:66:40:3b:b9:a7:
bb:17:cd:b5:aa:5a:b7:e3:71:58:c3:8d:73:d9:16:54:df:d5:
0d:f0:4c:c3:c6:87:08:ae:00:45:41:bd:31:11:43:06:df:4a:
31:01:da:f2:0b:2b:1e:bd:9f:b0:35:88:98:06:11:c6:72:44:
38:de:9e:57:16:59:fc:53:70:1c:c1:27:aa:ee:67:b4:de:71:
b6:d5:c5:68:ac:4c:c0:cc:d5:c5:34:7d:5d:a0:fd:6f:73:65:
55:0c:39:49
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yNDA3MzEwOTAwMDhaFw0zMDA3MzEwOTAwMDhaMBgxFjAU
BgNVBAMTDTY2YTlmZDFjLTgwZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDvFlqigpSPhS/EkVKdvhxqoTZlADQSdwvOuksLeZqZDttikAFCMN/q5EA
GLxAlUKlbjCz7qW2mtTNMR0lQbEtUzBnWVpJZpyEuHlJ7bMbdNvYUGXheLXKpt4x
JsKc0S1isMtJ2BEytWJJ+zsKuWAHMmD4mImFTfeT70LGGxQS4Jpv7uQVIptX8gL+
W4WoL0IZP4K15FHGG8bxHDoj549Cjpic6JEP5P6iI4rLpZ4/jjx8NdXEaes3b90d
ZJ8alMyrZzCAKzDBPiWWP4/IC9XLauLq0nKDHvZbNac6IkJlt5yATqR5+IAdho/Q
HMUEbQLK2OXzFRaAvaINrYFQXU57AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3Hij
9JL7NVNUd8USewmmlviaH8EwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzRCMjdDMzVBNEYxQjExRUZCN0FENkVBRTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2FAwDQYJKoZIhvcNAQEL
BQADggEBAJNUsEIKokNopHR+ZPb+FcI9rLQPKzOhEmcbzOi1b08gDLzjB6RNa0Q/
KILTD3cwSkxdIP7Bd29fSRCQfcV0G9Mvi6P+W/t6nepi7XJ0uIkvOhFtM2xj9eAU
ZXH7OE88VPHLrTVDTCwoVERfFunn7p9V92dpvP81/HaUIHuz6Y+PkkwNtueWKZqk
qBdlryiQoe78Z4Vx4TcWurGbVt5mQDu5p7sXzbWqWrfjcVjDjXPZFlTf1Q3wTMPG
hwiuAEVBvTERQwbfSjEB2vILKx69n7A1iJgGEcZyRDjenlcWWfxTcBzBJ6ruZ7Te
cbbVxWisTMDM1cU0fV2g/W9zZVUMOUk=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:41:47 2024 by rpki-client on console-fra.rpki-client.org