Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/7C8E887EBFBD11ECA8EAC9875A40D577.roa
File: 7C8E887EBFBD11ECA8EAC9875A40D577.roa (raw, json)
Hash identifier: HbH0iBkZvh0vYBNVJ0lWrkA4ANrfalVkqzxjI+bFpo8=
Subject key identifier: 84:77:BF:24:BD:4E:5B:86:79:7D:64:F6:61:99:C1:EB:93:48:A2:E6
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 82
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/7C8E887EBFBD11ECA8EAC9875A40D577.roa
Signing time: Tue 19 Apr 2022 08:48:30 +0000
ROA not before: Tue 19 Apr 2022 08:48:27 +0000
ROA not after: Fri 19 Apr 2030 08:48:27 +0000
asID: 328992
IP address blocks: 102.215.228.0/22 maxlen: 22
102.215.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Apr 19 08:48:27 2022 GMT
Not After : Apr 19 08:48:27 2030 GMT
Subject: CN=625e775e-8676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fe:16:3d:66:76:f7:67:22:41:c4:57:9f:e3:
5d:29:65:85:a3:96:60:ed:a8:c7:cc:80:e2:87:70:
b1:ef:7a:c7:04:32:82:6c:73:8a:13:9f:5c:df:b6:
0d:94:42:af:9b:e3:16:43:f3:90:c0:c4:00:08:b4:
cb:0a:97:34:bf:8e:03:b0:e4:17:6a:32:b8:4b:42:
d3:60:4c:5a:66:7d:95:48:b9:08:ac:12:eb:28:78:
86:57:9e:1c:b2:39:e8:8e:0b:8a:2d:20:85:4b:84:
22:89:29:86:3e:2a:97:12:21:e8:cd:db:95:39:fd:
18:31:96:53:fb:51:b8:48:bd:53:ae:61:64:eb:0c:
81:f1:28:cf:f1:4c:cd:66:2c:f4:01:19:4d:97:30:
b1:5c:fd:f8:f8:19:a6:25:3b:2c:91:5c:ab:f6:60:
a3:88:f8:fe:bc:d4:3d:cc:0c:43:62:ff:ee:29:a1:
d6:91:94:5c:9c:46:a2:27:61:75:be:01:4d:98:8f:
3b:64:61:28:49:fd:09:07:75:7f:6f:05:27:24:19:
7e:bd:fa:0b:42:d1:ac:4a:1b:61:21:2a:6c:6a:28:
1b:ae:3f:fe:2a:b7:2d:4d:93:1a:d1:40:21:86:f1:
0f:53:73:82:41:ef:8e:d6:dc:80:70:20:77:b8:90:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:BF:24:BD:4E:5B:86:79:7D:64:F6:61:99:C1:EB:93:48:A2:E6
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/7C8E887EBFBD11ECA8EAC9875A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:9a:e9:57:18:f6:8d:37:ed:3e:c6:91:3e:f3:2d:4c:25:3a:
97:fa:4b:e5:b2:e4:9e:ce:86:d4:74:50:04:ff:22:68:1c:5a:
ce:ac:a1:c7:a7:b4:44:1b:af:f4:c1:79:2b:30:45:78:4c:56:
66:28:ef:54:ec:1b:90:5b:9e:02:60:fc:a9:1e:0b:3a:9a:b2:
0a:14:14:02:4d:97:05:4b:ed:21:82:59:13:de:37:de:e4:32:
6c:e5:90:63:51:54:8e:d4:b1:5b:27:ed:a0:65:dd:11:81:03:
59:24:d8:79:68:95:30:6f:2d:c4:50:0c:71:bf:3b:67:53:b7:
99:ab:5e:65:4d:c3:1a:da:2e:de:88:25:3f:74:0a:49:1f:d1:
07:15:82:77:b1:33:eb:a8:cb:b0:88:d3:e1:c9:0d:77:c0:ad:
9a:61:01:71:c1:ef:80:cb:85:8d:33:21:92:e2:49:f9:47:20:
b2:b9:33:29:af:96:2e:a7:7d:3e:46:9d:45:04:0c:c9:d6:ad:
42:d7:db:03:7f:4c:1e:2c:dc:90:83:52:81:e5:3a:a6:3e:bd:
8d:b5:0b:93:bd:85:c6:32:97:3c:09:0b:6d:82:bf:de:56:ed:
85:02:5d:c7:b9:95:62:e3:1c:10:a2:8a:07:6a:91:46:21:a8:
e3:a2:eb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:54 2023 by rpki-client on console-ams.rpki-client.org