Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/4FC0B18888D911ED953D4EC0F1222468.roa
File: 4FC0B18888D911ED953D4EC0F1222468.roa (raw, json)
Hash identifier: hTFBoPB44+JEFbJgcGBxPvnr8+PWl1AB0dXNK4lMrCM=
Subject key identifier: C8:91:CA:2D:36:7C:95:B1:6E:98:EA:D4:15:8D:0F:70:E3:E7:4E:71
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 033D
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/4FC0B18888D911ED953D4EC0F1222468.roa
Signing time: Sat 31 Dec 2022 07:04:05 +0000
ROA not before: Sat 31 Dec 2022 07:03:59 +0000
ROA not after: Tue 31 Dec 2024 07:03:59 +0000
asID: 62579
IP address blocks: 102.216.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829 (0x33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Validity
Not Before: Dec 31 07:03:59 2022 GMT
Not After : Dec 31 07:03:59 2024 GMT
Subject: CN=63afdee4-b518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:98:50:02:14:97:e6:ab:8c:5a:f0:8b:d9:c9:
e7:18:03:7f:13:5c:69:d5:68:8c:fc:94:79:c9:61:
67:2f:3f:d8:a0:94:70:85:a0:42:77:8a:ac:fc:39:
88:4d:ce:77:5f:e0:ab:ac:97:e7:0c:75:7e:a4:1f:
46:ca:9f:71:c6:c2:62:89:04:0c:d8:ed:47:88:8d:
2a:df:57:fa:19:9d:65:f1:1b:a3:41:10:c3:81:ed:
12:5d:fb:80:0a:2c:f6:6e:8b:5a:84:bf:8c:f9:49:
bd:cb:2e:c7:34:3b:e7:46:c6:ea:ea:5a:5d:67:a2:
c6:87:8a:24:09:e1:48:8f:6f:78:97:d3:96:f9:64:
05:70:dc:03:2c:2b:ec:fc:c1:12:a2:96:fe:b7:ed:
1e:6c:95:6d:a5:0a:70:b9:a2:23:2b:10:60:f3:0c:
6d:39:5d:c7:8f:8d:e5:aa:ce:ae:c0:18:96:2f:6a:
f7:b1:a4:51:c3:4e:92:d1:c6:b5:4e:b8:c4:61:ec:
68:ef:11:4a:5d:1c:01:18:a3:22:e6:89:84:bb:fc:
ca:48:e8:76:fe:b2:a7:a8:57:4f:35:bc:ba:db:83:
1f:e5:0f:8d:8e:33:7c:95:2d:8e:d9:11:f1:35:46:
48:bc:8e:21:62:b5:9c:08:bf:bf:57:d8:23:4f:e5:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:91:CA:2D:36:7C:95:B1:6E:98:EA:D4:15:8D:0F:70:E3:E7:4E:71
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/4FC0B18888D911ED953D4EC0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.158.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d6:10:91:a1:bb:75:6d:6a:93:29:f7:3a:ef:56:55:48:84:
2d:68:06:ad:ca:fb:55:20:1f:97:a3:f9:7e:0f:77:98:fd:54:
94:da:1b:9d:6c:21:16:1b:98:a4:46:41:9f:c3:e1:e7:0e:74:
25:97:92:fd:0f:76:59:21:5b:f0:4f:f1:06:7c:19:84:2d:cf:
15:71:02:3a:9e:d1:93:2d:76:81:62:97:19:5e:3e:63:1a:32:
af:aa:cf:70:40:17:88:78:7b:db:8d:a5:1a:a8:70:40:7a:25:
58:2b:5d:9f:5a:b4:2f:c5:60:81:43:bd:a6:13:49:67:f3:e3:
3a:85:30:33:75:fe:bd:5f:6f:96:44:32:17:2f:b9:7b:29:95:
43:67:e0:0c:0f:3f:ea:90:4f:58:d5:1d:e6:ef:9b:e0:03:00:
df:8c:69:0f:47:68:bf:94:48:8d:36:53:ab:af:ee:58:b9:a5:
b8:c9:b7:28:89:66:3c:37:2d:7c:25:e2:95:35:6b:df:98:91:
e1:35:68:fb:f2:fe:ea:4c:9d:6c:36:d4:a1:0e:2b:0f:ef:0a:
25:e3:8a:3b:84:8b:2d:92:a5:13:c8:92:c7:dd:64:2e:25:c4:
7f:ca:d8:6c:c2:0d:f8:57:2b:9b:ee:b4:67:f7:ad:a4:03:47:
8e:31:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 05:54:39 2023 by rpki-client on console-ams.rpki-client.org