Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D3F45BBE6F4711ECB1AC24C55A40D577.roa
File: D3F45BBE6F4711ECB1AC24C55A40D577.roa (raw, json)
Hash identifier: i+9bQ6fRgeFfTMo+nE3qBjdsBILS6Db3gMH3qx2WYYk=
Subject key identifier: E1:4A:12:47:CF:01:64:0E:93:55:98:2A:48:B8:3F:24:42:8A:F8:93
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0C
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D3F45BBE6F4711ECB1AC24C55A40D577.roa
Signing time: Thu 06 Jan 2022 23:24:43 +0000
ROA not before: Fri 07 Jan 2022 23:24:40 +0000
ROA not after: Mon 07 Jan 2030 23:24:40 +0000
asID: 328992
IP address blocks: 102.217.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jan 7 23:24:40 2022 GMT
Not After : Jan 7 23:24:40 2030 GMT
Subject: CN=61d77a3b-0aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:fc:55:0e:04:91:f0:2a:38:d7:b6:1a:2c:
b8:5c:93:36:c2:28:69:e8:df:ba:5a:f1:ec:81:46:
a3:67:02:59:89:17:dc:44:7e:0e:ad:10:47:45:c6:
d1:06:b9:5a:6f:27:57:9e:41:0d:e8:1b:78:2a:3a:
cc:e4:f4:25:32:4a:b0:34:95:66:5f:2e:45:3c:fc:
89:47:af:61:e0:d1:80:56:d9:2c:8c:3b:42:26:5c:
2e:65:7d:f0:3e:56:87:83:3d:bb:70:3c:c4:11:0a:
76:20:b6:36:00:8a:c0:55:7d:53:f8:a3:d1:91:67:
19:56:a9:77:dd:d3:e2:50:31:61:2a:b2:6d:c4:09:
ec:85:82:ba:65:33:e8:24:25:8f:e5:86:2d:05:d3:
c8:3d:70:a0:9e:bd:e9:68:65:b1:37:ef:d5:7f:67:
ef:52:f3:ca:39:fd:83:88:f0:81:94:2a:fa:4f:23:
be:e9:24:8c:04:6c:af:a8:1f:b1:f7:04:16:93:e8:
69:b1:cf:fc:a6:cd:0e:76:ca:fd:d8:b8:17:ed:cf:
92:fe:17:79:cf:bd:b0:65:9c:38:6f:58:e2:eb:07:
e6:37:f7:ea:39:a7:52:47:be:e8:c4:44:f0:bc:7b:
77:36:c2:a8:cb:e1:5b:c0:20:87:93:37:4c:5f:99:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4A:12:47:CF:01:64:0E:93:55:98:2A:48:B8:3F:24:42:8A:F8:93
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/D3F45BBE6F4711ECB1AC24C55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/24
Signature Algorithm: sha256WithRSAEncryption
31:91:ce:c7:64:3c:2c:b8:87:2f:7a:a2:c7:48:aa:3d:3a:35:
35:f6:c4:db:2c:0b:be:92:60:34:2b:37:2f:72:04:ad:05:4e:
e3:d2:b5:79:b1:0e:ad:df:34:6e:f1:8b:13:ab:d3:8f:06:33:
54:a1:81:5c:51:b7:9f:11:08:f0:01:ad:fe:47:e4:90:a8:99:
48:b1:6e:4f:ac:cc:d6:0a:ca:99:6b:1d:db:23:92:7b:50:2f:
3a:62:2c:d0:15:3c:6f:54:33:b1:7a:6e:cb:e4:5f:66:72:07:
0d:56:c0:99:02:23:28:9a:e2:08:37:2d:c0:b9:7a:9b:5b:d1:
ed:b0:06:45:65:30:88:9b:e3:7d:a9:c2:53:d6:5c:96:26:16:
4a:be:fe:b7:9f:4b:4b:74:b4:d3:f3:b0:ac:f2:54:11:c6:8a:
1f:3a:80:43:38:a8:bd:a5:76:22:f4:9c:79:ea:fe:cb:de:6e:
62:79:10:60:4e:a6:ea:7b:b6:25:94:24:8f:0c:4a:48:51:85:
0c:e8:88:a1:32:1d:1e:69:ac:5c:6f:12:a6:46:76:33:95:37:
7d:b9:9e:53:bc:00:a9:3c:e2:0e:1e:12:1c:f4:09:53:06:10:
fe:9a:d2:c6:fa:c4:50:b9:79:db:b5:b6:da:0c:7e:f0:4f:a2:
b8:6c:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org