Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/7F607D46E7D611ECA826CCE2F1222468.roa
File: 7F607D46E7D611ECA826CCE2F1222468.roa (raw, json)
Hash identifier: jtrbLxK32gabRvuJUwAGWmL2uH6qLZc6HJSwM/ZkH1A=
Subject key identifier: 16:63:5B:3E:6F:F8:ED:41:68:9D:50:EF:8B:8E:BD:A8:5E:53:58:E8
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 011C
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/7F607D46E7D611ECA826CCE2F1222468.roa
Signing time: Thu 09 Jun 2022 09:28:19 +0000
ROA not before: Thu 09 Jun 2022 09:28:15 +0000
ROA not after: Sun 09 Jun 2030 09:28:15 +0000
asID: 328992
IP address blocks: 102.217.104.0/22 maxlen: 22
102.217.104.0/22 maxlen: 24
102.217.105.0/24 maxlen: 24
102.217.106.0/24 maxlen: 24
102.217.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Jun 2022 06:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 9 09:28:15 2022 GMT
Not After : Jun 9 09:28:15 2030 GMT
Subject: CN=62a1bd33-6d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:e2:08:ee:27:c5:6f:a3:00:7c:a8:ec:c1:
c5:9a:7e:2c:b9:da:a7:9a:5a:0d:fc:04:b4:10:d5:
e2:e8:1a:a9:94:07:c6:02:84:bd:18:5e:76:f6:f8:
c7:2f:44:68:65:6e:75:de:7c:11:9f:8d:0d:a7:1b:
ac:78:39:20:96:6d:0e:d5:29:10:2b:1c:86:cd:f2:
ff:52:c6:fa:fa:71:a9:f7:4f:dd:66:ec:0e:65:db:
93:e0:68:1d:87:72:7d:f2:4d:a2:68:8a:37:2a:cd:
82:ad:7f:65:81:56:b5:1e:f6:7c:e9:a5:98:22:61:
d4:6e:e4:9c:a3:52:f9:e2:d5:a5:5a:30:82:ec:6a:
71:2b:8a:a2:9e:74:cd:58:a2:7a:0b:7f:66:c0:f9:
2b:dd:54:de:76:c5:26:11:a5:e5:ac:66:47:6d:0c:
0f:2a:e1:a3:2a:59:62:81:d3:73:65:ea:88:37:40:
58:01:8b:ff:f9:00:e9:7a:74:31:0b:7a:ac:37:14:
36:d5:f9:e1:5f:6a:67:1a:ca:ab:13:df:c8:5a:0b:
96:bc:e6:71:05:1f:5e:ca:5f:e8:ea:e6:7d:01:0d:
f3:53:e3:20:6a:a5:5b:28:e9:44:45:e8:77:a5:90:
62:bd:93:77:2d:03:a1:11:66:03:ab:5c:c9:6d:93:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:63:5B:3E:6F:F8:ED:41:68:9D:50:EF:8B:8E:BD:A8:5E:53:58:E8
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/7F607D46E7D611ECA826CCE2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
25:4d:4f:10:62:51:d7:5e:40:51:6c:aa:b6:ed:91:b0:20:99:
95:7e:71:e2:bc:6d:41:e5:d0:3d:c0:f9:5e:16:cd:79:ed:c2:
d2:a2:f8:ea:46:1f:bf:b3:c2:fd:1f:a5:76:69:a2:fb:d5:97:
6c:a8:85:66:9d:78:72:ee:8b:d0:5c:7f:b8:ec:bd:41:66:03:
6d:c0:86:82:11:ff:6c:1c:6f:47:68:f7:d8:24:49:d3:56:e1:
9b:5f:b3:9e:b0:3a:29:e0:95:56:8b:5c:bb:29:9c:e9:3b:99:
51:fd:60:65:1c:5c:a9:9d:2f:22:51:5d:ff:f3:82:9b:1f:7a:
65:76:bd:a4:6e:b9:e7:cd:cc:fd:d9:c4:09:23:ec:1e:58:ee:
70:63:9d:6f:5e:3b:7b:29:6a:7a:c6:30:25:16:02:89:ac:1d:
be:31:e8:e0:8b:a1:ef:af:59:0c:6c:fe:71:97:9e:21:3d:17:
4a:6e:e6:a9:e8:90:45:5f:13:84:89:8d:30:40:d4:d2:e8:b8:
4c:09:58:8e:59:e8:b3:09:f7:ed:47:43:f4:18:8a:fe:15:06:
a5:79:56:71:cc:be:8b:88:43:92:6f:91:5f:72:22:65:bb:4d:
58:2f:c0:74:02:7d:56:18:9d:3c:05:b0:42:04:07:6f:f0:d8:
32:62:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org