Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D110D366C52611EC988575A4F1222468.roa
File: D110D366C52611EC988575A4F1222468.roa (raw, json)
Hash identifier: RrZQOW8u6UwBOA1U7GXP+iBqTmSaAbEFZmtti6Z8n3w=
Subject key identifier: DC:E2:A9:07:6F:CD:26:10:19:86:30:F8:C8:B1:B6:01:1B:13:FF:7C
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 8C
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D110D366C52611EC988575A4F1222468.roa
Signing time: Tue 26 Apr 2022 06:05:05 +0000
ROA not before: Tue 26 Apr 2022 06:05:00 +0000
ROA not after: Fri 26 Apr 2030 06:05:00 +0000
asID: 61317
IP address blocks: 102.215.224.0/22 maxlen: 22
102.215.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jun 2022 13:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Apr 26 06:05:00 2022 GMT
Not After : Apr 26 06:05:00 2030 GMT
Subject: CN=62678b91-7441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:17:75:94:e2:98:2e:e3:14:52:4a:01:55:
87:7a:b2:f6:e3:ca:c2:6c:95:49:ee:0c:0a:19:65:
1e:e4:da:a0:18:ab:31:4b:fb:18:d1:4a:50:ab:01:
2a:44:bd:0f:87:11:9c:64:84:fc:b8:04:7e:d8:c7:
a2:6a:78:6a:ae:d5:c7:b3:10:41:6b:39:06:19:f6:
33:25:12:0a:41:df:72:b1:f7:51:8c:3e:54:3b:63:
ae:a9:07:86:1d:60:14:72:92:18:6a:eb:eb:96:7e:
ce:f6:69:24:36:e4:b7:dd:64:f7:35:e3:05:97:b5:
b0:59:28:6b:d0:30:14:7e:73:4e:84:a7:90:bc:9d:
7e:75:d6:2c:48:68:ee:91:bb:f2:e4:57:53:0b:59:
4a:3a:49:5a:f0:77:2b:96:31:ba:6f:1d:f5:8b:0a:
8e:31:3b:c0:fb:e0:f8:fd:d5:39:74:37:35:2c:48:
f1:1f:72:fd:aa:81:8d:59:24:41:17:d2:c5:fa:24:
f4:1e:20:dd:fc:41:10:a5:ea:e7:f3:e8:75:7d:fb:
0e:d4:48:7d:51:59:ce:34:18:0a:92:77:c7:97:f6:
fd:c7:fe:05:39:8a:65:25:1b:d3:c5:da:3f:d9:56:
f3:40:a3:d7:1b:df:7a:7f:dc:fe:57:96:9a:ba:8c:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:A9:07:6F:CD:26:10:19:86:30:F8:C8:B1:B6:01:1B:13:FF:7C
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D110D366C52611EC988575A4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
73:3f:99:be:c2:6e:81:6f:a2:66:a6:4e:55:b2:0b:d4:8a:a2:
8e:d8:5c:1b:23:c8:c2:58:f9:63:8c:1d:84:b6:1a:48:1c:a7:
99:2d:46:06:ee:12:e0:51:44:f4:89:38:cb:a0:18:d0:49:a4:
06:5e:da:2b:2c:cd:c1:07:03:91:5d:6e:cf:9b:39:60:a2:5a:
50:6c:16:ad:b8:89:46:c3:ae:5c:ae:34:ec:db:0f:c3:41:41:
ef:46:13:11:3b:ca:9c:c9:3a:fb:bf:25:25:5b:4a:8e:6e:10:
86:81:f0:fd:6f:9a:b8:5c:10:7f:92:68:bb:73:43:66:d8:7e:
b2:a8:fe:af:06:4d:e6:f3:f7:ed:c1:b4:a5:f8:ba:70:ee:12:
22:c4:ef:85:90:e1:37:8e:15:8d:53:44:ac:23:b1:d0:69:6e:
50:9d:8f:bc:cf:ad:f8:f1:1f:b7:db:c7:cc:c7:a1:ed:de:f7:
96:c1:bd:3d:c6:8d:f3:66:cf:a6:de:0f:aa:fa:ff:53:64:3f:
3e:e9:d3:69:4c:b4:58:a2:69:b6:74:24:f3:2f:52:98:40:57:
3b:be:ea:91:67:7c:29:84:6a:b5:38:c9:11:5d:76:e9:65:11:
c0:c4:27:8b:0a:3a:45:e3:d7:45:17:ae:d3:bd:2a:63:62:de:
21:aa:c2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org