Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/616AA6AEE97511EC8363808BF1222468.roa
File: 616AA6AEE97511EC8363808BF1222468.roa (raw, json)
Hash identifier: iPwj8HtGlXKPl8JhHqARo+Ym/7mm7ZFRVQK26iUzSDY=
Subject key identifier: 98:D5:9D:92:43:4F:AD:69:7E:CF:60:BB:9D:1A:1E:97:3F:23:D9:4A
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0136
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/616AA6AEE97511EC8363808BF1222468.roa
Signing time: Sat 11 Jun 2022 10:58:10 +0000
ROA not before: Sat 11 Jun 2022 10:58:06 +0000
ROA not after: Tue 11 Jun 2030 10:58:06 +0000
asID: 328992
IP address blocks: 102.217.104.0/24 maxlen: 24
102.217.105.0/24 maxlen: 24
102.217.106.0/24 maxlen: 24
102.217.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Dec 2022 11:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 11 10:58:06 2022 GMT
Not After : Jun 11 10:58:06 2030 GMT
Subject: CN=62a47542-5b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:2f:0a:55:f5:c6:46:d9:ef:fa:8e:f2:f2:
8c:80:bd:89:e5:8b:d6:ca:19:b7:38:04:05:60:03:
90:3c:81:57:59:3b:c9:a6:f5:43:75:30:b0:84:56:
be:6a:86:14:46:67:c0:94:7b:ab:59:96:bc:06:4c:
e7:9f:d7:e0:6d:7e:6d:78:2f:b7:ed:21:2c:de:20:
1b:8d:4b:ff:74:34:b6:28:b3:ea:f7:ed:bd:69:fd:
1c:6e:4f:4d:7d:b9:44:04:e8:87:9a:b7:07:1a:a5:
df:63:21:db:ec:ff:38:31:7c:f9:fc:5d:3c:48:46:
21:f0:10:18:b5:34:13:39:34:cb:e9:30:19:60:32:
30:9c:1a:99:49:20:4b:d1:43:c7:84:c7:11:bb:7a:
8f:8e:ea:c6:47:c1:98:98:da:54:44:72:7b:42:2d:
dc:27:0c:cd:b2:18:18:3a:dd:45:fe:02:eb:5f:36:
ea:2d:19:b5:be:d4:ec:89:44:60:f8:ad:02:6e:f3:
d3:98:16:86:b3:5c:23:d5:27:3b:c1:1d:ad:69:9e:
ef:83:fe:8b:7b:a7:42:76:7e:b9:bf:33:33:04:9e:
8b:55:c2:d9:f1:58:00:2a:5e:86:77:02:e8:85:80:
10:7f:d8:6a:7e:63:c7:cf:a8:32:85:d9:4c:e3:95:
20:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D5:9D:92:43:4F:AD:69:7E:CF:60:BB:9D:1A:1E:97:3F:23:D9:4A
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/616AA6AEE97511EC8363808BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:a1:fe:89:08:9a:4f:32:4d:a3:c4:92:43:2b:15:c7:e0:af:
6e:dd:26:fd:a1:af:96:68:1c:39:3e:72:7c:be:8c:dc:c5:9c:
c8:b2:a3:ac:a0:90:4a:24:ed:48:cd:a4:d1:f9:3a:80:e0:22:
88:16:03:f9:29:3f:af:ca:a4:9c:ff:c6:e0:16:c6:c9:d3:61:
22:cf:f6:8e:07:27:58:39:7d:72:1d:9b:b0:36:78:40:12:b2:
23:90:8e:48:51:cc:5d:a8:b2:cf:8c:c5:34:47:1a:98:5e:17:
3a:14:73:1a:f1:75:eb:ec:b4:9f:6c:d3:7b:55:f7:de:f0:e7:
9c:d2:b0:5d:7e:77:5e:8c:cc:81:08:ef:58:0b:b4:73:38:72:
03:fe:31:40:fc:8f:ae:2f:18:bc:8f:3e:3e:3f:81:16:8a:90:
68:06:73:bb:83:31:6c:b2:64:64:72:5d:b8:db:c3:3d:3d:84:
23:e4:89:e4:c9:d5:23:3b:e7:60:be:3b:b0:3d:06:b1:7a:df:
26:69:2b:39:66:45:67:cc:a4:ff:d5:cf:17:f8:95:58:b2:06:
aa:08:98:44:aa:1d:ec:19:86:ff:e7:a5:3f:63:4e:79:c6:54:
51:95:45:4f:1b:99:c2:b5:f4:a6:38:8b:aa:ff:cc:58:93:a0:
1d:97:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org