Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/7D098FB89CCB11EF8023CF56762E951A.roa
File: 7D098FB89CCB11EF8023CF56762E951A.roa (raw, json)
Hash identifier: qkIOEIAo0lSoXcwLRll33j3G681UW4qZrkv2mD1ZT6o=
Subject key identifier: D3:CE:4E:BC:7F:DB:38:6E:CB:F1:0E:92:CC:FE:01:5A:2A:0C:05:52
Certificate issuer: /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial: 0549
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/7D098FB89CCB11EF8023CF56762E951A.roa
Signing time: Thu 07 Nov 2024 05:45:26 +0000
ROA not before: Thu 07 Nov 2024 05:45:23 +0000
ROA not after: Sun 31 Dec 2034 05:45:23 +0000
asID: 328528
IP address blocks: 102.220.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 14 Nov 2024 15:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1353 (0x549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Validity
Not Before: Nov 7 05:45:23 2024 GMT
Not After : Dec 31 05:45:23 2034 GMT
Subject: CN=672c53f6-b2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:30:de:34:06:be:e8:b1:60:91:9e:05:84:
6f:96:b4:a1:99:cc:cf:83:61:be:06:bc:93:e8:8c:
d7:a3:68:03:b9:f2:67:79:1f:ba:1b:71:0f:72:d1:
1c:46:6d:4f:d4:d2:73:ec:8b:c4:85:b1:72:35:6e:
c4:42:e6:6c:97:d6:bf:61:29:b9:7a:3c:b6:cb:97:
6a:3d:f6:95:ec:e3:46:88:cb:94:9e:44:1b:ed:1e:
a6:f2:96:c0:79:81:0b:1c:53:c3:8a:2b:2b:4b:ab:
d3:1e:86:3c:d8:d6:89:af:d1:af:79:22:c9:7f:56:
e4:60:44:8d:0f:6a:1d:4b:41:41:0d:a8:09:fc:a0:
0f:a3:0d:c2:5e:b7:1b:8c:bd:f6:5f:19:be:f7:82:
75:28:12:e5:50:9f:bc:4e:0e:2d:9d:e4:1a:3b:2d:
fd:98:ef:8c:46:9a:23:bd:2f:0d:9e:af:f2:5d:d1:
93:94:04:31:23:03:b2:7e:7b:97:83:32:02:6f:9b:
5d:63:9d:37:b9:3c:cd:cb:dd:8d:c4:e6:e3:d5:17:
77:ef:79:1a:81:ab:21:c6:53:18:6d:39:e7:eb:82:
56:84:9f:01:62:84:11:35:69:ca:51:e2:c5:11:4a:
22:92:f4:2f:1e:64:8b:8f:7f:00:8d:aa:40:24:3c:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CE:4E:BC:7F:DB:38:6E:CB:F1:0E:92:CC:FE:01:5A:2A:0C:05:52
X509v3 Authority Key Identifier:
keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/7D098FB89CCB11EF8023CF56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:66:a8:1d:97:92:c7:1c:fc:87:7b:b1:ad:c3:fd:41:04:8e:
18:59:f9:63:5b:ad:c9:d5:c0:c6:56:f9:2a:4d:2d:cd:ed:54:
27:4b:c4:37:e2:c8:e1:99:25:ee:49:eb:2b:7b:f0:43:a9:f5:
e2:b6:d7:60:f1:3d:8e:eb:82:38:1f:7a:4a:88:72:5b:43:13:
81:c3:4b:4e:09:a3:c7:e6:4c:91:a9:17:27:ff:72:29:ec:3b:
86:ea:98:ca:df:ce:a2:8a:29:41:4e:b4:bc:31:ec:ab:c0:b3:
a0:5b:88:0d:4f:7b:f5:73:f3:70:1c:14:94:ce:78:b8:24:43:
60:e4:ce:00:d8:3c:65:0c:41:91:82:f4:1e:e2:1e:08:89:2c:
79:02:2d:d4:d7:3b:93:0f:6e:4f:b9:8b:5b:05:24:e1:b6:0e:
72:cf:60:86:56:01:74:16:77:98:ce:5b:aa:97:0c:a3:d4:fb:
cc:04:56:04:7e:81:11:1f:a0:9c:5d:4f:ef:86:2a:3d:04:d4:
d9:bb:1f:7d:c4:cc:9e:7c:82:c9:e0:41:25:c3:3d:ff:3d:cd:
46:c3:d1:b3:cc:27:24:bc:12:0c:1b:d7:ac:d8:74:98:d3:96:
21:42:e5:2e:f5:0e:4e:52:e7:31:a2:52:71:f6:cd:ba:2a:34:
95:82:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 18:30:08 2024 by rpki-client on console-fra.rpki-client.org