Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/F56E5044C52611EC9CD5DCA4F1222468.roa
File: F56E5044C52611EC9CD5DCA4F1222468.roa (raw, json)
Hash identifier: mVOtH7NodSw2mxvANWLw9gc61M1UANXa+jEcGzl8Sa0=
Subject key identifier: 87:2E:C4:0B:18:62:8C:76:5F:8F:BC:AF:F9:8A:A2:8C:D2:F4:2E:81
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 8E
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/F56E5044C52611EC9CD5DCA4F1222468.roa
Signing time: Tue 26 Apr 2022 06:06:06 +0000
ROA not before: Tue 26 Apr 2022 06:06:02 +0000
ROA not after: Fri 26 Apr 2030 06:06:02 +0000
asID: 328992
IP address blocks: 102.215.224.0/22 maxlen: 22
102.215.224.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Apr 26 06:06:02 2022 GMT
Not After : Apr 26 06:06:02 2030 GMT
Subject: CN=62678bce-e88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:ad:ef:e5:23:b5:ae:45:ba:d2:7b:fc:26:
ed:24:36:ee:28:ab:ef:50:45:4d:12:34:98:4f:82:
e3:8a:b1:13:c1:d2:34:9a:03:9f:21:8d:f4:30:b2:
71:83:0a:65:bb:d2:92:fe:5c:cf:aa:21:c8:1d:25:
68:75:f1:49:4b:42:6e:41:e1:89:35:4e:3b:ed:5c:
31:d6:5d:f1:60:2b:d0:ef:0c:84:09:ce:9c:c9:f2:
fa:7a:da:70:5d:3c:b3:87:d2:4e:b1:ac:ca:1b:0b:
b1:5b:1f:41:54:c4:bf:93:2d:3e:37:f0:d4:87:cf:
ef:bc:ab:b5:bb:46:ce:c5:4d:2e:6c:8e:34:0d:e6:
f9:c6:ba:0c:75:ca:18:d2:94:f7:f4:6b:79:27:80:
f5:1c:48:65:30:d2:2f:79:11:80:11:9a:c8:d1:14:
48:f9:6f:c2:a3:d8:2a:42:4c:bf:0f:84:7e:a8:73:
c4:49:23:53:f1:6d:5c:a8:b5:66:77:1c:66:2c:87:
ef:09:80:68:fc:2c:97:d1:4f:0a:98:5f:e7:eb:3c:
60:3e:ae:da:92:06:01:ce:6d:d5:fb:32:5f:42:9c:
b5:65:b1:3c:3b:a3:aa:4d:72:6c:b3:fb:0f:46:8a:
fb:89:c6:2f:64:c1:53:9e:f9:2f:de:e3:3d:3f:d0:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:C4:0B:18:62:8C:76:5F:8F:BC:AF:F9:8A:A2:8C:D2:F4:2E:81
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/F56E5044C52611EC9CD5DCA4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
89:10:f4:3b:31:ed:a3:b1:04:c3:af:d3:58:1b:2b:b2:51:66:
5d:d5:c6:17:91:fc:33:6a:7f:7c:6e:38:7b:99:70:3d:c5:4b:
34:ab:89:02:76:bd:9c:27:29:9a:b1:e2:28:01:7b:32:fe:31:
e5:4a:cf:cb:f6:11:61:a2:68:99:a5:a2:f3:77:a9:e1:ea:17:
e1:79:70:57:03:0d:90:ec:16:88:4d:20:04:1a:ea:a2:6a:b0:
42:03:4f:d8:97:8a:ba:7e:7a:f3:eb:8a:61:13:2a:25:43:50:
4f:82:ac:0a:bf:c5:c1:5e:2c:9d:6b:69:b9:04:5a:d9:0e:2a:
d3:39:93:0b:6e:bf:fa:9a:ee:90:45:7a:57:25:39:cb:67:de:
68:8b:91:7b:6f:dd:85:05:68:9c:e2:37:15:e3:ae:97:e0:f7:
59:af:22:25:fa:ea:0a:ee:a2:ca:94:1e:5d:d6:9c:4b:82:4f:
38:f9:0b:40:26:97:a9:d8:0c:cf:a9:32:98:43:00:e1:01:a3:
c5:ee:43:ec:51:7d:ed:d7:0a:1d:59:a6:9c:e4:a5:23:e5:f5:
c8:f7:83:12:ac:13:04:a3:78:23:af:dc:12:90:02:f4:6d:5a:
6d:9d:e6:f8:85:82:a9:13:ce:ca:27:76:1d:db:8a:ab:9a:91:
99:83:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org