Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/57B3D6EAECB211EC8DCDFCD1F1222468.roa
File: 57B3D6EAECB211EC8DCDFCD1F1222468.roa (raw, json)
Hash identifier: B9iO9RPa/sLJ2ot+KJ/Lt3aZyzEwsLA+6nJMHUORYCo=
Subject key identifier: DE:B3:81:A2:8E:DB:E7:75:42:3B:7C:79:7F:10:76:AB:C4:A1:6D:94
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 014F
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/57B3D6EAECB211EC8DCDFCD1F1222468.roa
Signing time: Wed 15 Jun 2022 13:52:06 +0000
ROA not before: Wed 15 Jun 2022 13:52:03 +0000
ROA not after: Sat 15 Jun 2030 13:52:03 +0000
asID: 210574
IP address blocks: 102.217.105.0/24 maxlen: 24
102.217.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Dec 2022 11:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 15 13:52:03 2022 GMT
Not After : Jun 15 13:52:03 2030 GMT
Subject: CN=62a9e406-1b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:a0:45:7d:5c:b2:99:f8:9f:1a:ec:a9:31:
dc:d7:ae:c5:7e:f2:3b:18:3f:5f:68:15:69:c0:bf:
09:17:97:42:b1:36:9f:08:7d:58:22:a6:79:c4:55:
18:3c:3d:e2:e3:e1:a6:98:c8:02:b1:5a:03:7b:1a:
b4:94:67:c6:bf:07:e5:2f:ef:e0:3c:5f:41:26:dd:
97:8f:41:9e:d1:79:12:8e:4f:1d:92:ef:1c:6c:36:
55:ed:ba:1a:5b:64:b3:93:a2:11:43:74:b4:08:81:
9e:91:92:9e:89:60:ef:26:22:bb:fb:89:45:74:ae:
7b:26:96:0d:dd:b6:c4:1a:6d:19:02:a4:69:df:be:
a9:c3:db:1b:71:48:fe:02:1d:a1:77:9d:7b:63:74:
8f:64:99:e3:c5:fa:b6:0b:c9:36:ac:7b:a1:e0:2b:
64:82:5a:76:21:93:0f:d7:c3:b1:01:a4:2a:d0:53:
7e:64:76:07:91:4e:c3:52:44:34:71:42:28:42:bc:
b7:a2:5d:ef:e0:4b:95:1e:1b:af:62:28:db:d3:2e:
33:87:b5:71:d3:5a:f0:4c:9f:d8:e6:56:29:1c:3a:
e5:e4:4d:89:6a:e6:a2:d9:37:2d:af:e9:c7:4b:9d:
bb:7e:60:37:7d:70:1d:ed:52:90:e0:91:bd:b5:c2:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B3:81:A2:8E:DB:E7:75:42:3B:7C:79:7F:10:76:AB:C4:A1:6D:94
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/57B3D6EAECB211EC8DCDFCD1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.105.0/24
102.217.107.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e1:d9:fc:5b:82:33:74:6e:b3:4a:72:24:6e:81:ac:9c:5d:
00:a3:ec:ce:1a:44:50:fc:ff:d2:4a:da:6f:96:c0:38:9d:bd:
60:0d:97:74:f1:84:4e:49:4f:3a:bb:7b:55:7d:d5:bb:76:84:
12:98:f6:cf:c4:33:cb:94:3e:9f:63:df:16:dc:7a:dd:ec:e2:
8b:12:89:ac:9b:50:f9:8a:62:49:4c:86:2a:75:7c:e3:ad:e3:
8d:81:43:5a:f3:88:e9:1b:4c:a3:a0:ad:3b:08:46:ff:c5:2c:
f9:25:87:88:58:77:55:76:23:ee:a7:93:e0:b2:dc:6b:2b:35:
31:da:7e:71:c8:ee:60:ea:08:55:cb:24:84:b7:01:85:57:19:
f7:b1:7b:68:b4:f0:3a:3d:28:7b:83:72:4e:59:3f:f7:86:95:
46:6b:05:92:ce:30:a1:b9:ef:7d:36:32:fe:20:15:6a:2f:6d:
e2:61:f5:d3:f8:34:ad:68:5e:20:2a:ba:c6:21:14:cf:6e:60:
58:0b:37:cd:45:34:cc:0d:7c:28:d5:6d:a3:e5:dd:fe:ac:56:
50:d9:da:be:7e:50:bf:da:60:c0:ac:86:2d:e4:9b:33:be:4d:
8f:c2:4a:88:d3:cd:d6:c1:27:b2:a6:f9:10:9a:f9:34:57:c7:
ac:5e:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org