Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/737126CA6E0511ECA4CCE39A5A40D577.roa
File: 737126CA6E0511ECA4CCE39A5A40D577.roa (raw, json)
Hash identifier: rD5hTzlpJpX31ekRQxdYuC7Jfty6fEUyimuSuUd8K6Q=
Subject key identifier: 6B:4A:3E:8B:3B:0F:ED:23:2B:2B:CF:AD:6A:55:A1:A4:7F:BE:96:B5
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 04
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/737126CA6E0511ECA4CCE39A5A40D577.roa
Signing time: Wed 05 Jan 2022 08:57:03 +0000
ROA not before: Wed 05 Jan 2022 08:56:58 +0000
ROA not after: Sun 05 Jan 2025 08:56:58 +0000
asID: 61317
IP address blocks: 102.217.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jun 2022 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jan 5 08:56:58 2022 GMT
Not After : Jan 5 08:56:58 2025 GMT
Subject: CN=61d55d5f-8bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:84:7f:eb:13:12:65:a1:5c:01:9e:81:b3:
e0:a7:8a:26:56:2c:9b:f1:5c:82:58:43:30:2b:71:
98:bd:be:ab:d2:fc:44:4f:15:fe:41:07:d2:0a:f5:
9a:1c:93:06:a2:37:7a:46:c1:e6:be:53:a2:2d:3e:
7f:b0:2d:31:94:6c:67:ce:9a:56:87:72:f5:2e:6e:
88:32:1b:ad:07:54:d6:9a:50:a5:7a:24:dd:2c:59:
58:ae:db:1d:2b:d3:f9:96:24:80:95:86:4e:9a:e3:
ce:75:3f:5d:db:3e:93:da:ce:1d:21:d5:4e:27:72:
5b:20:1f:d0:0e:5c:f4:6f:fb:13:23:07:55:7d:40:
c3:77:e2:46:51:33:7f:85:8d:59:fd:0f:3b:6f:9c:
4a:a9:c1:a7:bb:bc:ac:be:cd:49:30:9c:8d:18:cd:
ec:7f:fb:60:62:5c:fa:bc:da:c1:36:1a:ef:bf:8a:
de:6f:2d:67:24:82:8e:dd:65:81:07:4e:4e:e1:8e:
f8:06:c4:e6:f6:ad:66:3d:97:f4:fe:a6:6d:92:89:
f8:98:f1:b2:d3:96:c5:7c:a9:9c:7c:04:96:00:35:
09:32:dc:f4:0f:a8:3b:b0:c1:06:b9:44:ca:b9:ce:
10:14:1f:d9:19:af:48:be:74:ff:9f:f2:06:83:ac:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4A:3E:8B:3B:0F:ED:23:2B:2B:CF:AD:6A:55:A1:A4:7F:BE:96:B5
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/737126CA6E0511ECA4CCE39A5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
95:62:32:a4:e0:2c:8f:37:9e:58:6f:67:5f:7d:5b:c0:79:f8:
b8:35:76:75:f5:96:83:00:7b:04:06:d6:3a:7e:82:78:f5:e0:
29:58:c9:aa:02:55:54:c3:57:95:82:5e:96:29:be:1a:3c:61:
d4:48:54:52:01:f8:4a:90:21:6b:fd:47:3f:d7:73:dd:ce:ed:
73:30:7c:02:73:a2:9d:0a:cd:4c:d9:2b:46:35:fb:b9:46:ad:
d3:36:14:10:21:dd:31:61:76:99:d3:ee:98:32:7b:18:ec:dc:
65:b2:05:72:29:1e:54:d5:dd:76:f9:0e:58:df:48:89:af:09:
f0:65:62:53:fc:7b:2b:f4:65:9e:70:45:9e:bb:52:23:12:90:
83:c1:ae:8a:19:08:0d:b3:85:a6:b4:23:62:48:70:12:30:4f:
f9:0c:36:96:f5:a9:b4:39:79:cc:d0:1f:df:eb:75:63:39:f0:
d1:dc:e7:c7:be:89:e9:78:12:f0:70:13:49:25:7c:89:9b:aa:
ad:93:53:8b:8a:f2:47:bc:b8:05:0b:e1:15:98:88:dd:b3:79:
2a:0b:4e:50:68:9a:d7:5b:fd:dd:b9:e8:3b:03:c5:a1:ff:b7:
5d:b3:ee:68:14:4c:64:02:a9:e9:b0:80:ee:6c:c9:dc:94:42:
c5:7b:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org