Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/C589A864416A11EC80DD2803D8A014CE.roa
File: C589A864416A11EC80DD2803D8A014CE.roa (raw, json)
Hash identifier: 9DUNYjkMYwZNYMg0Tc8LZiI18Ge/3cAZDZomEcv7Xok=
Subject key identifier: C0:F7:10:EA:2C:27:89:60:1A:F4:23:21:4B:59:0A:46:E6:07:C3:A5
Certificate issuer: /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial: 0255
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/C589A864416A11EC80DD2803D8A014CE.roa
Signing time: Tue 09 Nov 2021 14:38:58 +0000
ROA not before: Tue 09 Nov 2021 14:38:54 +0000
ROA not after: Sun 09 Nov 2031 14:38:54 +0000
asID: 328633
IP address blocks: 102.217.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 21 Mar 2024 11:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Validity
Not Before: Nov 9 14:38:54 2021 GMT
Not After : Nov 9 14:38:54 2031 GMT
Subject: CN=618a8802-8430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:69:d8:bb:78:b4:15:a5:09:27:d5:b3:5c:
7d:3a:10:34:32:62:69:86:f3:d4:12:da:08:65:c1:
c1:39:ad:88:e4:b7:74:b8:3e:18:75:8c:40:14:f3:
a1:5e:36:6b:86:bd:28:bb:2c:43:e8:58:6f:15:4f:
fe:cc:74:ca:e8:bf:28:a8:52:58:9d:3c:92:6e:71:
bd:67:8a:c5:5d:af:6f:53:0d:8c:84:9c:af:e7:fc:
a2:65:84:5e:8d:16:cb:6c:99:c2:f0:63:8c:d6:fc:
d5:f1:fa:44:bc:38:7d:a9:3e:53:cd:6e:3f:fb:de:
e7:35:41:93:36:02:84:81:bb:ea:46:9f:ea:e7:b6:
7a:c9:1c:9c:ae:29:04:0f:c7:3d:c9:dc:ab:a9:ef:
cc:84:25:c7:2d:6c:7e:fc:cf:ef:16:9e:23:0f:48:
53:65:42:a3:fe:ec:69:a4:b9:81:a9:e7:15:5a:06:
36:30:fb:36:60:f8:0a:c6:ef:d3:6a:b6:0c:f2:c2:
61:f5:8a:df:9a:7f:87:8c:32:5d:61:db:e3:9d:a6:
c4:78:26:76:b4:70:04:d1:44:7d:da:83:2b:88:66:
7d:07:e1:06:a5:ce:25:23:9e:07:9e:03:77:0a:79:
c4:9b:06:55:17:0c:98:20:66:97:16:ea:6b:c7:ed:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F7:10:EA:2C:27:89:60:1A:F4:23:21:4B:59:0A:46:E6:07:C3:A5
X509v3 Authority Key Identifier:
keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/C589A864416A11EC80DD2803D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:18:78:d5:a1:a4:ff:a5:69:76:2e:3f:63:78:5b:fd:04:29:
0e:5f:23:71:b0:0b:a6:4c:ec:1c:72:97:3f:c8:f1:b5:4b:c9:
54:86:24:86:75:33:5f:c0:8c:85:e5:89:4e:6c:b2:40:bd:74:
5f:e3:86:fb:34:35:ca:bb:a7:29:22:3a:a4:11:d0:28:38:42:
c8:62:09:85:1d:27:11:f3:d3:c6:3b:03:94:94:03:63:ab:d6:
2a:4f:ba:7f:ad:b9:1d:be:e7:68:63:9a:df:87:58:8c:c0:98:
6d:e3:64:1d:0e:81:bc:da:8b:77:ac:2f:92:a2:b0:52:f1:40:
d0:c6:e1:c7:9d:e2:b4:81:42:ac:77:c2:ef:ea:2a:f2:83:0f:
d6:fe:83:15:29:78:53:ee:03:05:1f:e9:d9:2d:6f:d7:a2:5d:
2f:b4:ad:a6:61:11:61:da:23:92:37:d2:36:b2:85:96:e0:df:
94:8a:54:15:38:ff:0e:f3:9d:c0:ed:68:f2:2e:c1:03:88:03:
f6:9b:93:0e:e0:0d:21:44:bb:b0:83:f1:98:68:4c:be:04:1f:
b4:00:b0:67:46:cb:e2:a6:0c:30:e0:62:80:2c:a8:05:30:24:
d7:ca:7d:f2:a8:84:f1:66:db:1b:4e:d6:60:a9:00:95:a0:63:
7e:26:35:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 15:31:07 2024 by rpki-client on console-fra.rpki-client.org