Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CA5A4F7428CB11EFBD5FA1357DDC24C2.roa
File: CA5A4F7428CB11EFBD5FA1357DDC24C2.roa (raw, json)
Hash identifier: FljkIQFMribbW/tGujAhukxt8onZV5HQwh5rWRTIklM=
Subject key identifier: 8E:A6:10:86:E2:E8:9E:A3:AF:19:EC:13:F3:64:8F:AD:4D:66:64:22
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0488
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CA5A4F7428CB11EFBD5FA1357DDC24C2.roa
Signing time: Wed 12 Jun 2024 14:55:21 +0000
ROA not before: Wed 12 Jun 2024 14:55:16 +0000
ROA not after: Wed 12 Jun 2030 14:55:16 +0000
asID: 834
IP address blocks: 102.215.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 19:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160 (0x488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 12 14:55:16 2024 GMT
Not After : Jun 12 14:55:16 2030 GMT
Subject: CN=6669b6d9-2389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:f4:93:5b:14:28:65:a1:f1:0a:dc:3c:0b:
3b:4f:e1:1c:6e:fa:0d:82:af:08:0e:33:ee:dd:06:
4d:4b:63:58:4a:1c:72:e7:1c:33:45:66:58:ee:c1:
41:66:2a:5d:24:8f:22:e6:85:d5:da:3c:2c:69:73:
76:52:48:c5:33:d6:36:05:24:c3:28:8c:74:d9:4d:
9d:d5:b4:93:c7:ce:ef:c8:b7:0d:ca:e5:ed:eb:47:
77:f9:8b:a7:cb:a0:24:ab:0d:e6:21:37:41:61:e1:
b6:46:07:6a:dd:47:80:63:e6:73:c9:40:2d:aa:8f:
81:90:90:1c:d8:cf:9c:e8:31:0a:95:39:63:94:f1:
e5:b2:e5:f8:43:eb:35:be:a0:bf:37:cb:78:18:94:
a5:09:9c:69:af:37:bc:46:e1:1d:99:18:23:de:85:
d6:e0:8b:c4:92:4c:28:18:3b:a1:f5:75:80:e9:b1:
64:5a:3c:06:5b:37:1f:b3:d8:e7:ed:12:85:aa:dc:
a4:63:fd:79:16:04:c4:1d:74:29:e6:bb:6b:62:07:
c6:bf:4f:76:b0:07:83:55:1a:16:78:a7:1b:ce:e9:
a4:f8:2b:f5:dc:8f:71:72:44:00:3a:c6:ab:27:1e:
2f:77:58:3a:97:68:bd:5d:dc:35:58:a0:6a:db:3a:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A6:10:86:E2:E8:9E:A3:AF:19:EC:13:F3:64:8F:AD:4D:66:64:22
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CA5A4F7428CB11EFBD5FA1357DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:48:6e:22:06:86:5f:b5:70:3f:d6:11:ae:1c:98:e3:d2:2f:
9b:71:5c:ea:c2:b6:a3:cf:ff:37:bb:1b:87:4e:61:c3:18:fc:
4f:82:90:ec:33:d0:28:38:05:f6:9b:08:fb:81:25:a9:49:8e:
05:de:63:16:5f:04:e6:60:4c:3c:d5:61:12:4e:21:fc:06:53:
44:07:69:f2:cb:2f:84:cb:d0:bd:56:e2:1a:86:84:60:67:5d:
86:9c:92:fb:bb:0b:6d:35:02:ed:27:4d:cc:4b:0b:d4:a9:5e:
a5:6d:b7:3e:73:12:6b:61:ca:a3:8d:84:27:78:78:01:20:98:
69:fb:df:e9:68:4b:9b:45:1b:a2:4b:ea:79:2f:a9:07:c0:86:
89:49:eb:0d:a4:07:bc:a0:d4:4b:11:ad:bf:1f:34:ee:e8:7f:
a5:64:9e:dd:1e:ca:76:bd:3c:70:f0:df:cd:6e:aa:82:8b:ed:
38:ef:c4:03:12:76:4c:14:4b:de:ab:95:50:84:d7:0b:50:ee:
22:b5:b4:d6:7d:49:f6:44:0c:ca:47:88:8a:f7:36:a4:08:25:
5a:10:ed:e0:a0:99:5c:ca:01:81:5b:fd:f2:cf:a0:8e:de:16:
2d:7d:51:70:a8:88:b6:81:99:c2:9d:47:20:c4:73:f0:af:48:
f1:de:0e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 21:56:40 2024 by rpki-client on console-fra.rpki-client.org