Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8A3D08D8EBCD11EC8BF16F7DF1222468.roa
File: 8A3D08D8EBCD11EC8BF16F7DF1222468.roa (raw, json)
Hash identifier: BtJmVZSD5qSEU7TE9o7iKym0gsBDeHNvk7nfnWHC8As=
Subject key identifier: 24:CA:76:03:D2:19:BE:CC:26:ED:FA:4D:DA:F6:99:C3:23:D8:DC:54
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0144
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8A3D08D8EBCD11EC8BF16F7DF1222468.roa
Signing time: Tue 14 Jun 2022 10:34:16 +0000
ROA not before: Tue 14 Jun 2022 10:34:12 +0000
ROA not after: Fri 14 Jun 2030 10:34:12 +0000
asID: 328992
IP address blocks: 102.216.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Dec 2022 11:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 14 10:34:12 2022 GMT
Not After : Jun 14 10:34:12 2030 GMT
Subject: CN=62a86428-87fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:29:69:0f:0c:39:b9:10:35:b2:42:04:91:
2d:73:06:42:20:9e:ca:da:4e:17:11:84:40:b3:2e:
55:83:ee:62:8c:a3:48:65:46:4c:fd:0a:65:8c:60:
93:ee:eb:c9:c2:68:f6:00:86:58:99:ad:9e:93:58:
7c:a8:fe:19:d4:d4:ca:b3:50:cc:49:d3:ed:fa:f4:
b2:ca:2c:ec:55:da:71:dc:0d:52:14:b7:d0:a1:2b:
a2:d9:22:3b:1d:39:b3:3d:81:79:75:ee:7c:d0:71:
73:56:4c:58:6a:6d:fa:6a:50:30:86:5a:d8:9d:1d:
b9:7c:84:18:fc:60:c6:49:10:3b:ef:9e:9c:08:a9:
28:77:7a:51:81:bd:57:4f:c1:cf:8a:63:ea:87:dd:
21:9b:35:d5:e6:17:24:ba:af:81:f6:bc:d8:4e:44:
32:63:cd:5a:90:e9:a2:eb:24:81:a7:93:9d:66:03:
94:76:99:d0:b9:29:6e:3f:00:1e:28:e1:50:31:77:
63:11:3a:64:73:31:76:21:80:60:8f:0f:e3:7f:85:
bf:94:8a:7b:64:da:7f:66:a9:bb:76:a1:2d:9d:be:
f5:41:8b:b2:c7:08:3e:62:ec:5b:71:17:8c:78:2b:
16:5a:27:20:d3:a9:e7:02:3f:f8:3b:68:2b:05:82:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:76:03:D2:19:BE:CC:26:ED:FA:4D:DA:F6:99:C3:23:D8:DC:54
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8A3D08D8EBCD11EC8BF16F7DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.82.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:95:94:2d:a3:bc:ce:fe:c6:d2:db:cf:eb:c8:36:23:3a:a5:
91:77:b7:f9:40:79:74:27:3f:9f:46:ef:91:36:4f:79:a3:04:
c5:a7:ef:aa:0e:e4:3a:2e:e4:4e:f1:c0:03:d3:2c:bb:cd:dc:
f5:83:1d:1c:17:75:58:f1:a0:f2:0d:cf:7b:47:b7:47:28:93:
35:91:a5:87:4a:00:80:27:61:9f:37:52:c3:3e:2d:6e:2d:85:
23:4e:29:90:a3:0c:80:99:44:b8:09:d8:96:1c:6d:e3:23:09:
f3:46:32:3c:7b:e1:5d:53:33:b0:a6:9b:97:44:bc:c2:44:2c:
04:9e:0d:91:e6:9f:4e:92:d1:b5:55:56:df:3e:56:0e:30:a3:
ce:8c:e9:49:62:41:22:ca:eb:19:d7:ca:66:5d:57:17:08:63:
42:b1:f3:ee:72:0c:dc:17:7a:ed:d1:ab:09:da:af:70:51:24:
09:f2:9b:35:e8:b2:ad:e0:56:87:89:e2:30:52:39:16:e7:cd:
3c:61:21:ac:31:df:35:56:90:1a:89:19:d4:81:50:fc:2f:e6:
da:47:a4:60:7a:bf:68:9d:92:58:f7:06:e6:6d:26:50:6f:ef:
4a:f6:3b:50:01:b5:40:94:e4:b0:8d:fe:71:e4:9a:40:24:d6:
5f:9a:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org