Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A55474E6E97311EC8E271786F1222468.roa
File: A55474E6E97311EC8E271786F1222468.roa (raw, json)
Hash identifier: 8GOQNrx89k46beKu+O/qHdcFIXp8ao+dUNv23KsMAMA=
Subject key identifier: 8C:71:78:42:87:85:BF:98:F3:B4:15:44:65:82:C1:13:E2:B6:74:67
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0134
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A55474E6E97311EC8E271786F1222468.roa
Signing time: Sat 11 Jun 2022 10:45:45 +0000
ROA not before: Sat 11 Jun 2022 10:45:40 +0000
ROA not after: Tue 11 Jun 2030 10:45:40 +0000
asID: 328992
IP address blocks: 102.217.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 11 10:45:40 2022 GMT
Not After : Jun 11 10:45:40 2030 GMT
Subject: CN=62a47259-00c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:88:8d:99:14:51:c3:22:a5:2f:32:49:59:
f3:34:58:dc:96:32:70:8c:76:8b:27:2f:b9:4e:f2:
bf:bf:90:27:61:e5:55:90:44:a8:19:08:34:33:99:
8b:2b:44:8f:ba:49:50:99:55:0f:da:bd:56:26:88:
20:30:57:a9:98:9e:42:28:42:37:0a:8b:5e:bd:8d:
04:7f:5d:5e:16:3d:76:85:eb:62:c2:47:44:1c:a3:
ba:e7:ab:9f:ee:19:6c:d2:5e:30:ca:bb:f3:3e:3d:
43:8f:d8:73:91:64:76:79:ee:92:f4:aa:99:5d:9a:
bf:49:d2:d3:7c:9a:a5:c1:3f:95:34:25:3b:f4:f8:
d3:f8:af:90:6f:b3:88:b2:b2:c5:03:9f:4b:1b:72:
3a:c6:4d:84:49:69:4a:19:e1:04:be:61:8e:23:7f:
8c:77:ed:5a:12:d1:aa:bb:26:a1:0b:3d:f5:10:f6:
1f:f7:b0:f7:27:ee:7e:46:d1:0b:cd:a2:4f:8d:7e:
e7:5b:93:4b:c2:27:a5:0f:41:24:d8:cc:b5:e9:cd:
d3:95:59:14:e4:3c:c4:98:97:6e:67:13:d4:12:da:
53:7b:33:73:a6:aa:16:08:74:68:d1:9b:91:eb:6d:
47:ea:5a:04:67:fd:56:33:67:e7:76:ff:b7:74:73:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:78:42:87:85:BF:98:F3:B4:15:44:65:82:C1:13:E2:B6:74:67
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A55474E6E97311EC8E271786F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
68:b2:37:bc:6e:9a:51:e8:44:aa:a8:50:1d:ea:65:ba:95:9e:
95:22:f8:9c:2d:f7:94:16:25:e8:76:32:f8:f7:16:ae:2a:8b:
10:cf:bd:50:4d:85:a6:5f:20:2d:a0:90:6f:20:4b:1b:3c:4f:
59:e1:9d:66:ac:25:1b:48:ce:bf:7d:01:03:c2:6c:e2:84:59:
be:4f:6c:66:13:58:69:90:a5:20:d1:83:1f:81:d7:33:94:a8:
e7:62:51:14:78:6d:f6:41:87:e7:5e:f6:81:28:e9:3c:1f:6c:
e8:a6:c5:13:48:f3:38:83:9b:f0:2b:fe:c6:15:d4:d3:7a:28:
3d:70:1c:67:29:30:79:0e:af:80:f0:2f:e4:0b:95:26:0a:c0:
8d:fc:7b:3a:96:f1:2d:0b:83:68:9b:11:1b:4a:23:09:e0:85:
03:ff:83:29:b5:f8:c6:28:e2:73:04:e6:a9:8a:90:d0:79:2e:
7c:81:f4:78:71:12:6f:82:ce:9a:46:c0:3d:3d:8c:08:1c:ba:
49:49:14:33:9d:7b:73:08:7e:7a:3b:2d:ca:84:b6:8c:13:46:
13:8e:da:33:95:6a:3e:92:8d:54:cd:6c:e4:f2:3e:9e:24:85:
fb:b8:28:05:6c:64:46:fe:1d:65:bf:75:93:4f:78:10:8a:a4:
4b:b1:3a:ad
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICATQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yMjA2MTExMDQ1NDBaFw0zMDA2MTExMDQ1NDBaMBgxFjAU
BgNVBAMMDTYyYTQ3MjU5LTAwYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTm4iNmRRRwyKlLzJJWfM0WNyWMnCMdosnL7lO8r+/kCdh5VWQRKgZCDQz
mYsrRI+6SVCZVQ/avVYmiCAwV6mYnkIoQjcKi169jQR/XV4WPXaF62LCR0Qco7rn
q5/uGWzSXjDKu/M+PUOP2HORZHZ57pL0qpldmr9J0tN8mqXBP5U0JTv0+NP4r5Bv
s4iyssUDn0sbcjrGTYRJaUoZ4QS+YY4jf4x37VoS0aq7JqELPfUQ9h/3sPcn7n5G
0QvNok+Nfudbk0vCJ6UPQSTYzLXpzdOVWRTkPMSYl25nE9QS2lN7M3OmqhYIdGjR
m5HrbUfqWgRn/VYzZ+d2/7d0cwZhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjHF4
QoeFv5jztBVEZYLBE+K2dGcwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3L0E1NTQ3NEU2RTk3MzExRUM4RTI3MTc4NkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2WgwDQYJKoZIhvcNAQEL
BQADggEBAGiyN7xumlHoRKqoUB3qZbqVnpUi+Jwt95QWJeh2Mvj3Fq4qixDPvVBN
haZfIC2gkG8gSxs8T1nhnWasJRtIzr99AQPCbOKEWb5PbGYTWGmQpSDRgx+B1zOU
qOdiURR4bfZBh+de9oEo6TwfbOimxRNI8ziDm/Ar/sYV1NN6KD1wHGcpMHkOr4Dw
L+QLlSYKwI38ezqW8S0Lg2ibERtKIwnghQP/gym1+MYo4nME5qmKkNB5LnyB9Hhx
Em+CzppGwD09jAgcuklJFDOde3MIfno7LcqEtowTRhOO2jOVaj6SjVTNbOTyPp4k
hfu4KAVsZEb+HWW/dZNPeBCKpEuxOq0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org