Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C963AF7621CA11ECBC9A4440D8A014CE.roa
File: C963AF7621CA11ECBC9A4440D8A014CE.roa (raw, json)
Hash identifier: JLbSePrDjSLocsvKzdT1LkR2MMv66WfDD/2B7bCwDpc=
Subject key identifier: 05:F1:46:08:70:85:39:A0:BB:41:8C:FD:45:7B:47:7F:EC:77:EE:5D
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 11
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C963AF7621CA11ECBC9A4440D8A014CE.roa
Signing time: Thu 30 Sep 2021 08:45:39 +0000
ROA not before: Thu 30 Sep 2021 08:45:35 +0000
ROA not after: Sat 30 Sep 2023 08:45:35 +0000
asID: 328327
IP address blocks: 102.140.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 08:45:35 2021 GMT
Not After : Sep 30 08:45:35 2023 GMT
Subject: CN=61557933-9cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:cc:99:b1:19:6b:de:9c:0f:4c:f9:c4:b1:
0b:3b:f4:07:a1:e3:8c:e0:94:b4:95:db:02:ee:8a:
65:ce:2d:82:82:ce:f1:49:98:cb:2e:d0:b7:14:69:
38:06:fa:92:71:29:a8:15:aa:c6:ab:11:d8:23:5f:
f7:28:42:2c:32:70:aa:40:87:ce:99:5a:43:94:61:
6d:5d:4a:cb:08:47:29:76:76:cf:91:81:52:a7:5d:
8b:f1:d1:e6:be:fe:5f:62:ab:43:3d:42:b8:33:2d:
e3:00:f7:b1:2e:06:3d:4e:de:f3:76:77:00:e0:80:
62:67:0d:32:e7:0a:aa:9c:6e:e5:58:9f:f1:0e:ac:
cb:75:e7:ef:3b:76:27:5b:79:b8:85:b1:41:de:d7:
cd:b5:e5:2e:8f:85:21:36:36:71:9f:b2:92:b2:cf:
1b:e5:78:d4:81:af:c3:c0:f5:9d:99:d3:cc:ad:0e:
b4:97:7b:a8:5c:3f:f7:4a:15:ba:8c:54:c6:98:7d:
c2:cf:2d:69:3c:31:50:d8:24:71:69:51:40:3a:d2:
47:1d:b0:69:17:2a:9f:10:65:8c:d5:bd:87:c3:2c:
15:ad:e2:26:29:eb:2f:87:4c:5a:5c:81:28:67:0e:
d9:d5:66:17:5d:43:dc:c9:2f:dd:5b:a8:f0:19:75:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F1:46:08:70:85:39:A0:BB:41:8C:FD:45:7B:47:7F:EC:77:EE:5D
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C963AF7621CA11ECBC9A4440D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.70.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:11:d6:f6:70:a2:9e:2f:0d:df:d8:19:ce:9a:ab:f2:49:5f:
b5:f4:58:20:63:b2:85:91:50:8b:64:e7:db:cd:57:42:7c:81:
6c:ed:59:d8:67:c9:b2:8b:a6:fb:9c:6e:9f:19:ed:6b:10:d5:
d6:64:81:75:e9:52:90:43:66:cd:82:60:71:ff:b1:09:de:4c:
da:62:18:28:41:97:0c:a5:fc:77:9e:fa:ce:d8:bc:d3:ed:30:
2f:7d:71:2c:bf:89:38:87:79:a0:6d:0f:aa:b9:15:88:27:d2:
6c:f1:dd:42:13:c0:18:16:bc:fa:63:05:18:01:52:a9:95:7d:
0b:2d:5f:c3:d1:45:fa:90:77:ef:ef:22:56:7b:0a:15:ca:98:
dd:b2:7b:38:43:53:1e:53:e2:a8:03:72:8c:bc:42:6f:d1:ac:
fc:60:83:34:39:71:dd:7a:f5:f5:a9:bc:c9:74:b0:0d:5d:06:
46:36:05:d4:1b:af:dc:2c:90:36:42:02:2c:9c:ab:1f:2d:e0:
75:74:a3:6a:33:c2:35:75:c4:fb:cd:21:35:09:5a:d3:78:be:
d1:e8:13:9b:cd:87:ae:09:24:8e:6b:1e:9d:6c:9d:1c:c4:99:
44:c8:37:34:8e:58:1a:3d:1a:d8:18:4d:68:62:06:88:d4:bd:
90:48:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 07:27:23 2023 by rpki-client on console-ams.rpki-client.org