Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/DB67F1D4A91C11ED8A08EA86F1222468.roa
File: DB67F1D4A91C11ED8A08EA86F1222468.roa (raw, json)
Hash identifier: u+BA1oaYge0vja1MQzq5bU5wJsWOT7lralne+xZ8xjA=
Subject key identifier: 59:DF:8E:87:60:5E:04:B8:CF:EE:67:A3:48:56:8A:B1:1E:C0:11:E9
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: B5
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/DB67F1D4A91C11ED8A08EA86F1222468.roa
Signing time: Fri 10 Feb 2023 08:28:13 +0000
ROA not before: Fri 10 Feb 2023 08:28:09 +0000
ROA not after: Wed 09 Feb 2033 08:28:09 +0000
asID: 329063
IP address blocks: 102.215.132.0/22 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Validity
Not Before: Feb 10 08:28:09 2023 GMT
Not After : Feb 9 08:28:09 2033 GMT
Subject: CN=63e6001d-a8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:32:c1:8f:f4:14:e2:4a:97:59:24:45:92:
de:14:96:3c:ea:0c:6e:69:57:b9:80:73:58:26:02:
4e:8e:a3:b6:e4:dc:8c:1a:26:99:d0:8d:de:e9:7a:
82:96:71:06:55:bd:ce:8e:08:bc:10:05:15:fb:72:
1e:ed:43:2f:79:c6:7f:92:a5:3b:ff:4b:79:c7:77:
2c:02:7b:56:01:f6:8d:2d:cd:f5:36:1d:dd:3b:3b:
4c:0c:f3:47:03:2a:5c:6c:0b:9f:3a:ba:7c:4e:03:
97:da:75:a1:fd:61:be:0b:89:ab:b4:fc:7c:f3:65:
5a:16:73:b8:91:32:4f:9f:93:10:ce:72:84:29:be:
02:62:49:73:0c:0c:f7:b7:11:45:44:27:75:2e:b0:
0c:0d:3a:74:e3:76:b0:e9:31:af:68:9f:2c:25:f9:
36:39:19:11:87:1a:43:bd:8a:57:11:c8:cb:0a:e2:
f1:6c:6b:76:34:b0:6e:97:93:3a:40:1b:d0:26:42:
e1:30:39:03:23:2e:65:fe:88:98:03:89:b5:96:45:
0f:6a:29:8b:4c:79:3b:c6:6d:d3:7f:9b:f1:de:c9:
c6:68:b0:b3:0a:6c:ed:15:7a:4a:ac:09:a3:1d:2f:
66:d7:5d:ab:09:51:6e:49:cd:77:20:b1:19:ce:38:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DF:8E:87:60:5E:04:B8:CF:EE:67:A3:48:56:8A:B1:1E:C0:11:E9
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/DB67F1D4A91C11ED8A08EA86F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.132.0/22
Signature Algorithm: sha256WithRSAEncryption
51:7f:47:5c:45:f5:20:84:07:b9:87:4a:89:3a:30:24:9a:88:
84:24:4a:60:b3:05:05:d7:6b:60:7a:ed:ae:4d:3e:8a:97:87:
cd:c0:b4:36:32:9b:9c:7d:0b:50:39:0f:58:3f:1b:3e:00:26:
0e:82:55:29:ec:ed:35:ff:45:22:58:6b:2e:16:70:3b:f5:a9:
f0:e5:24:e2:0b:18:ab:1b:58:9d:de:aa:c2:d0:84:39:4a:08:
dc:45:e2:2e:64:16:2f:4e:cc:ea:5a:8c:4f:64:33:ab:73:33:
44:0e:ad:5b:a3:df:37:47:0c:ed:c0:3a:c5:5d:90:7e:c1:c9:
bb:b2:c9:cc:c1:75:d5:22:cc:93:e8:52:ca:ac:6b:65:eb:e7:
57:8b:f6:15:29:4e:2a:58:c2:dd:2e:13:22:26:0b:b7:3a:95:
a8:e3:4d:84:df:53:d6:7a:3d:2e:d5:0e:50:4a:7e:83:bc:e2:
c9:52:b4:39:03:cc:ed:a1:82:48:da:d3:19:fd:b1:37:ed:6b:
5d:df:9b:54:47:dd:5f:69:18:be:50:a4:7f:0e:55:af:db:94:
d3:e6:88:19:99:63:19:6f:be:3c:69:68:b6:fb:9c:1e:2e:12:
d8:9c:b0:2b:b8:48:9a:d7:4b:bc:29:82:08:26:20:76:51:d1:
a8:06:de:80
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICALUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MTREMURBRjExMC8GA1UEBRMoMjc3OTNEMjE1RjA4ODA1REI4RDBCQTg5MkQzMzZG
MjlBQjdCQjA1QjAeFw0yMzAyMTAwODI4MDlaFw0zMzAyMDkwODI4MDlaMBgxFjAU
BgNVBAMMDTYzZTYwMDFkLWE4ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpkDLBj/QU4kqXWSRFkt4UljzqDG5pV7mAc1gmAk6Oo7bk3IwaJpnQjd7p
eoKWcQZVvc6OCLwQBRX7ch7tQy95xn+SpTv/S3nHdywCe1YB9o0tzfU2Hd07O0wM
80cDKlxsC586unxOA5fadaH9Yb4Liau0/HzzZVoWc7iRMk+fkxDOcoQpvgJiSXMM
DPe3EUVEJ3UusAwNOnTjdrDpMa9onywl+TY5GRGHGkO9ilcRyMsK4vFsa3Y0sG6X
kzpAG9AmQuEwOQMjLmX+iJgDibWWRQ9qKYtMeTvGbdN/m/HeycZosLMKbO0Vekqs
CaMdL2bXXasJUW5JzXcgsRnOOAvVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWd+O
h2BeBLjP7mejSFaKsR7AEekwHwYDVR0jBBgwFoAUJ3k9IV8IgF240LqJLTNvKat7
sFswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0RDFELzU4Q0YzMEU0MjkyODExRUQ4RTY4RThGOEYxMjIyNDY4L0ozazlJ
VjhJZ0YyNDBMcUpMVE52S2F0N3NGcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ozazlJVjhJZ0YyNDBMcUpMVE52S2F0N3NGcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0RDFELzU4Q0YzMEU0MjkyODExRUQ4RTY4RThGOEYx
MjIyNDY4L0RCNjdGMUQ0QTkxQzExRUQ4QTA4RUE4NkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm14QwDQYJKoZIhvcNAQEL
BQADggEBAFF/R1xF9SCEB7mHSok6MCSaiIQkSmCzBQXXa2B67a5NPoqXh83AtDYy
m5x9C1A5D1g/Gz4AJg6CVSns7TX/RSJYay4WcDv1qfDlJOILGKsbWJ3eqsLQhDlK
CNxF4i5kFi9OzOpajE9kM6tzM0QOrVuj3zdHDO3AOsVdkH7BybuyyczBddUizJPo
Usqsa2Xr51eL9hUpTipYwt0uEyImC7c6lajjTYTfU9Z6PS7VDlBKfoO84slStDkD
zO2hgkja0xn9sTfta13fm1RH3V9pGL5QpH8OVa/blNPmiBmZYxlvvjxpaLb7nB4u
EticsCu4SJrXS7wpgggmIHZR0agG3oA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org