Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9BE84BBEE59811EC9B7BFBBEF1222468.roa
File: 9BE84BBEE59811EC9B7BFBBEF1222468.roa (raw, json)
Hash identifier: +uLertwEjsUxpFocUfNvl9jrydZ2Ib8Fc6BIxA/BuSs=
Subject key identifier: 29:58:0B:65:70:59:9C:FF:6F:08:78:92:65:2B:1C:27:F1:F7:8A:F1
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: F8
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9BE84BBEE59811EC9B7BFBBEF1222468.roa
Signing time: Mon 06 Jun 2022 13:00:15 +0000
ROA not before: Mon 06 Jun 2022 13:00:12 +0000
ROA not after: Thu 06 Jun 2030 13:00:12 +0000
asID: 61317
IP address blocks: 102.215.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 11 Jun 2022 06:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 6 13:00:12 2022 GMT
Not After : Jun 6 13:00:12 2030 GMT
Subject: CN=629dfa5f-7dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8c:f7:a4:44:6a:52:da:89:ac:cf:fd:1f:bb:
9f:b5:31:7d:db:d5:9f:90:2c:68:1a:67:bb:4c:dd:
53:02:1a:63:fd:f0:63:17:95:4e:ba:02:ae:3f:5d:
4f:b6:ef:5d:6e:67:52:c4:3a:0d:83:2e:02:6d:1d:
fa:94:52:f7:69:4b:7f:5b:96:24:f8:20:02:10:fc:
94:df:20:74:f9:f3:35:ea:a1:cf:99:b2:7b:ae:eb:
15:d8:fa:c7:bc:cb:be:e6:c4:72:3f:8d:f2:75:08:
9a:8a:28:50:25:7b:2d:03:02:ad:b2:1a:e4:69:55:
63:4e:02:f4:bf:44:a0:ab:2b:ef:56:3c:85:0b:44:
c6:c8:94:e3:67:b6:ac:03:a2:01:4a:2d:e3:fd:7a:
e7:cb:c0:d1:d0:1c:1f:7a:dd:11:66:21:b3:c3:01:
5e:d3:c2:ef:07:46:ea:c6:a5:ae:68:1c:06:12:76:
f3:74:a2:de:c5:82:3c:c4:7a:35:4e:12:26:82:d9:
f1:82:17:d2:a7:f9:03:5e:f7:23:22:91:45:3d:5c:
38:ac:b0:85:08:06:16:6c:f4:0f:0d:53:6c:61:c9:
bc:f4:0d:52:93:f1:c7:c2:b6:72:ec:ef:0a:c4:5f:
75:bd:9f:5c:50:16:05:e1:c0:7a:a1:fb:9e:8d:c2:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:58:0B:65:70:59:9C:FF:6F:08:78:92:65:2B:1C:27:F1:F7:8A:F1
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9BE84BBEE59811EC9B7BFBBEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b5:f9:14:b4:d4:df:42:f3:3f:ff:f4:a9:3b:a6:b2:e3:dc:
6b:22:7a:07:df:52:4f:91:ad:72:9a:46:8f:85:fd:33:85:82:
fa:4f:e5:c6:05:f4:d3:4d:13:b3:ae:0c:59:17:ec:19:ff:95:
b4:c2:6d:bb:5c:f2:eb:1f:4d:9a:80:52:b1:fa:ce:c0:d2:43:
0c:29:4d:33:0d:32:7c:d1:ad:a4:d0:b8:b5:26:58:e5:27:12:
f1:fc:49:1a:8a:29:4b:c6:eb:b8:1e:5e:00:a6:42:60:4a:24:
8f:78:dd:30:c0:a2:32:ba:00:f5:63:c4:23:ad:44:bf:56:1e:
fb:2c:0a:b3:31:bf:fa:ac:28:85:43:1c:2a:dd:de:6b:1b:da:
a4:d4:2e:5e:40:e6:48:4a:54:67:d7:d9:ec:c0:8a:ac:3c:0d:
57:c1:58:03:bb:07:81:aa:38:f8:e7:d4:6c:78:36:e9:1e:63:
da:ef:72:1e:eb:5d:f9:4a:e5:31:8b:d6:55:74:0f:0e:b9:10:
14:1c:f8:e8:89:e3:94:0c:73:05:5c:80:0e:d5:44:91:05:c1:
2c:5e:42:36:d7:9a:20:76:58:50:32:cb:71:66:72:8d:73:ae:
0e:48:bc:21:bc:8d:28:42:4b:d2:17:39:f5:5c:b5:74:11:db:
6d:38:b0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org