Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/AF7699CCE7CF11EC947EF5CCF1222468.roa
File: AF7699CCE7CF11EC947EF5CCF1222468.roa (raw, json)
Hash identifier: Jn3aUZ7y3Cq7cZQoFYVRq1WSLfvw4FHedvUkwnKnJBg=
Subject key identifier: ED:CA:A4:3C:A7:2F:DA:4A:71:DA:71:5F:C8:04:8C:33:53:25:53:25
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 011A
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/AF7699CCE7CF11EC947EF5CCF1222468.roa
Signing time: Thu 09 Jun 2022 08:39:33 +0000
ROA not before: Thu 09 Jun 2022 08:39:29 +0000
ROA not after: Sun 09 Jun 2030 08:39:29 +0000
asID: 61317
IP address blocks: 102.216.80.0/22 maxlen: 22
102.216.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Jun 2022 06:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 9 08:39:29 2022 GMT
Not After : Jun 9 08:39:29 2030 GMT
Subject: CN=62a1b1c5-6773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:3a:9c:c9:84:6c:b1:e8:eb:a3:d3:63:91:
99:0c:1c:27:59:de:8e:bd:55:09:f3:47:6b:8b:0f:
97:74:a7:73:65:f5:bb:84:78:2e:34:c2:35:6d:49:
03:a0:d9:e6:83:6c:67:b3:54:2e:66:ac:1c:ff:80:
9d:67:1c:33:5e:e5:34:57:28:3c:da:64:31:79:17:
b5:08:3c:7f:0f:38:61:86:d3:9a:3c:c9:56:c1:82:
83:6e:99:d6:25:aa:e4:dc:7e:9b:81:b7:6a:f9:18:
fe:df:e9:5b:2b:ab:63:8e:f5:34:71:08:ac:e0:cf:
56:c5:52:e0:fc:cc:b0:18:86:01:2d:90:5c:e6:94:
62:f3:f3:0f:03:05:b9:b2:84:c0:fa:38:d8:4c:35:
1b:0b:c4:90:34:60:ec:d1:30:68:b0:35:42:93:b5:
a4:0e:73:0f:6a:a4:4d:15:a6:2a:7d:6d:3e:d7:fc:
7e:7f:4e:41:70:ee:b9:b4:d0:95:62:ac:d7:56:09:
5d:cb:5f:ce:5b:6c:61:60:ea:c3:75:5f:04:5f:69:
5f:0a:40:98:c9:b9:7d:e2:c1:f0:45:1c:5f:df:a4:
3a:7a:e7:9e:f7:1d:43:26:da:ab:b1:b7:92:c4:35:
14:fb:1f:0d:ba:01:9b:8d:1f:11:97:34:1a:8c:fe:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:A4:3C:A7:2F:DA:4A:71:DA:71:5F:C8:04:8C:33:53:25:53:25
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/AF7699CCE7CF11EC947EF5CCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/22
Signature Algorithm: sha256WithRSAEncryption
28:4d:d0:25:8d:8e:da:3d:63:46:56:06:6f:a1:73:2b:e7:9f:
9e:2c:16:24:85:57:81:53:9c:8e:9f:46:db:4b:ae:d3:b0:93:
fe:a6:a2:45:03:bc:d3:f8:ce:ea:e5:d2:f2:2e:a0:92:50:95:
30:9e:c7:5f:50:a1:73:c2:86:3d:ec:35:b0:a8:bf:b8:52:54:
ff:70:bd:2b:ed:ba:38:31:e6:d3:60:ea:85:d6:d9:67:58:c9:
f5:27:39:37:2f:c9:92:bf:8b:81:63:f6:cc:80:f9:4a:3e:ab:
3c:8c:33:14:f4:49:2f:e8:2e:28:ba:3b:cc:07:8b:61:3d:1b:
ea:24:ca:f3:a5:39:c8:7c:e7:6c:8b:ae:ef:70:d2:c3:8a:01:
94:8c:35:32:51:9e:a4:67:f2:0e:67:02:a6:26:d0:bc:95:e8:
4a:48:f9:ba:68:3a:aa:9c:6f:5a:c8:d5:2b:f6:6e:48:71:fd:
88:4a:4b:47:4e:37:df:33:6f:96:56:74:fb:f6:04:10:f7:29:
b4:c6:5f:b5:46:d5:98:8b:f7:df:ef:d8:ef:73:c0:91:e9:0d:
1b:66:72:c1:64:ec:fa:86:bb:47:d8:04:99:c0:62:48:a1:b1:
2c:0f:8f:03:fe:ba:97:4e:ae:40:f8:91:3f:8e:d5:38:92:d0:
ad:0b:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org