Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/57B1F91CE7CE11ECAE4DBBC8F1222468.roa
File: 57B1F91CE7CE11ECAE4DBBC8F1222468.roa (raw, json)
Hash identifier: JQD2oZGexwWgqxTDVbTiEucOQMxfHBCweCb0hsvzlu0=
Subject key identifier: 97:88:67:52:8E:E3:02:9E:F5:36:4F:FC:FD:D0:48:A2:0F:04:1D:1A
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0114
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/57B1F91CE7CE11ECAE4DBBC8F1222468.roa
Signing time: Thu 09 Jun 2022 08:29:56 +0000
ROA not before: Thu 09 Jun 2022 08:29:53 +0000
ROA not after: Sun 09 Jun 2030 08:29:53 +0000
asID: 328992
IP address blocks: 102.215.224.0/22 maxlen: 22
102.215.224.0/22 maxlen: 24
102.215.225.0/24 maxlen: 24
102.215.226.0/24 maxlen: 24
102.215.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Jun 2022 06:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 9 08:29:53 2022 GMT
Not After : Jun 9 08:29:53 2030 GMT
Subject: CN=62a1af84-8301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:70:7d:a6:c8:a1:9a:0b:3f:eb:9f:76:a4:
6f:45:29:72:bc:6c:bb:b1:a4:5e:ff:79:c9:e2:20:
c5:48:c5:ff:5a:9e:5c:36:c2:72:10:2e:33:3c:74:
d6:e1:37:7b:40:46:27:9e:f9:0c:f4:02:58:fe:8b:
5e:6e:02:84:9a:23:6d:73:85:ce:ad:9c:bf:9f:32:
c4:ff:0b:67:61:71:cb:64:6f:52:b9:ce:82:97:62:
39:e6:88:ff:2f:21:06:06:c8:16:1c:d5:84:0f:52:
49:3c:47:c5:a2:c3:d0:c2:23:da:ef:3b:d6:57:52:
2b:b4:6a:a8:e1:45:d0:1f:d3:1c:08:06:29:40:9f:
88:90:47:49:aa:90:e1:f4:45:04:98:e6:20:c5:19:
a7:50:44:9b:94:33:96:f6:f5:e1:03:94:05:44:78:
21:ab:3f:b9:ea:99:7a:fa:93:14:55:78:80:99:cd:
44:60:d3:ef:23:2b:9f:5b:8a:41:22:46:63:46:f7:
5b:d0:25:9c:9c:2d:85:75:95:24:0d:fa:5a:71:6a:
71:68:0e:15:82:73:bf:c5:7a:51:9a:97:19:a5:52:
9e:ac:d3:6d:0f:fe:f3:06:ba:3a:e3:56:73:4f:ef:
61:cd:1d:d1:b9:31:45:a9:dc:56:c4:09:6e:62:06:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:88:67:52:8E:E3:02:9E:F5:36:4F:FC:FD:D0:48:A2:0F:04:1D:1A
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/57B1F91CE7CE11ECAE4DBBC8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:c2:57:26:d6:3a:46:c7:93:57:bb:da:6d:8b:ba:97:2a:2e:
0f:60:cc:23:c5:34:05:29:0e:75:d1:57:17:a1:e7:fa:64:6a:
4e:a1:fb:2d:8e:10:51:1c:67:f4:10:cf:f8:c1:67:30:23:70:
ec:d7:0e:94:47:b2:2a:95:62:8b:5f:8d:28:c7:c8:95:a4:c0:
ec:3b:95:c6:38:5b:47:5c:b6:ef:45:88:4c:52:08:34:32:b6:
da:64:50:39:de:a3:d9:58:66:4c:e3:0c:52:a2:b0:02:dd:2d:
39:bc:ce:5c:e3:2e:ad:ce:40:fe:19:ee:7d:e6:92:fc:9a:46:
f1:d0:9a:42:1a:83:f6:ba:34:08:23:e0:c1:aa:88:87:21:c7:
54:b6:4a:96:15:de:d0:43:25:3c:21:e1:8a:42:66:25:f4:3d:
c5:00:1d:ee:38:3d:38:3a:c6:98:ae:b7:0a:7f:45:69:b8:28:
50:33:6b:23:79:cf:83:fa:6c:e2:83:ac:5d:56:61:fc:f8:8d:
cd:d2:a8:f1:6f:3b:9e:f5:03:1b:5d:51:e1:42:12:55:59:59:
ed:07:d8:14:ee:be:ae:81:a7:4e:7d:60:ce:95:87:47:b5:f0:
36:c3:ba:e9:1f:c9:21:5d:73:7b:75:b8:c6:be:8e:fe:b1:09:
69:ea:5f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org