Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/B37F7E90901111EDB947D89EF1222468.roa
File: B37F7E90901111EDB947D89EF1222468.roa (raw, json)
Hash identifier: KvspOviotc8m1u1d6vuTqd/7Y55FK45eNG69KLK+nNA=
Subject key identifier: 26:24:D3:B0:CE:A0:AB:A7:A0:3D:47:2E:3A:A2:68:69:BF:D6:8D:08
Certificate issuer: /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial: 02
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/B37F7E90901111EDB947D89EF1222468.roa
Signing time: Mon 09 Jan 2023 11:35:22 +0000
ROA not before: Mon 09 Jan 2023 11:35:18 +0000
ROA not after: Sat 01 Jan 2033 11:35:18 +0000
asID: 24757
IP address blocks: 102.218.0.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Validity
Not Before: Jan 9 11:35:18 2023 GMT
Not After : Jan 1 11:35:18 2033 GMT
Subject: CN=63bbfbfa-2fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:52:5c:2c:31:ff:d4:56:45:05:fb:49:25:
4b:bf:9a:ac:2b:aa:f1:48:9c:77:83:e4:73:46:67:
5a:a1:5f:6c:4d:da:b7:ac:7a:62:b9:20:9d:59:df:
1e:eb:c8:76:30:7e:6a:f9:7f:22:35:43:aa:7d:0e:
e4:38:ab:d4:2e:5d:0d:fe:12:e3:ee:0b:ca:ed:77:
c0:ee:c1:56:2b:b0:dc:cf:f9:0d:61:41:16:6e:2b:
ab:1a:48:77:31:8a:29:d3:eb:10:3d:0c:2f:f7:d7:
b2:0e:67:5e:b9:e6:e1:cf:ea:c2:c2:c0:7c:6a:47:
0a:87:d1:55:69:b9:1e:5c:35:92:4a:c6:2c:53:4a:
a8:ad:93:4f:05:5b:7c:55:da:f3:45:2e:1d:7d:c1:
fc:af:df:95:2d:d8:c2:df:ec:1c:b3:31:96:47:dc:
26:bf:e7:9f:34:d7:a5:ca:9c:41:5f:97:bc:a5:2b:
f8:5d:01:b5:53:af:bb:78:32:e6:3a:d0:88:c8:bc:
cc:70:a0:b3:72:73:96:4e:76:15:7d:24:08:3b:4c:
de:ed:84:e5:e3:35:fd:eb:0a:ab:03:1b:e6:78:0c:
e5:48:47:50:15:96:f0:0f:0b:4e:41:8f:53:0f:d7:
80:70:cc:cd:89:be:bd:be:0a:45:4c:9f:e7:02:cb:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:D3:B0:CE:A0:AB:A7:A0:3D:47:2E:3A:A2:68:69:BF:D6:8D:08
X509v3 Authority Key Identifier:
keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/B37F7E90901111EDB947D89EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:96:e4:f3:11:d0:06:05:ad:f0:8a:34:c2:55:1f:15:ff:ce:
b3:f7:6e:c5:c5:21:ef:7f:33:6f:3c:95:d2:87:d8:e5:b7:36:
91:1b:8c:2c:98:04:0f:31:ab:79:33:66:99:54:aa:5d:8c:21:
13:7e:d1:67:84:51:e8:1f:37:dd:98:de:a8:77:be:73:5b:f7:
f4:5a:9d:4a:1c:a3:dc:61:87:3b:4d:49:ab:47:dd:dc:a3:7d:
28:61:2d:c3:3d:e8:c0:6c:21:a3:8b:e0:e0:06:61:19:b5:87:
a4:5a:91:95:29:3c:35:b3:f5:86:da:56:a8:4e:6e:2a:07:d1:
99:56:bb:92:2f:81:0d:d5:e2:52:bb:50:d0:54:89:6d:44:19:
75:5e:7d:46:fa:b2:ed:1b:0c:31:81:c2:44:8a:e4:88:24:50:
be:cc:d0:c2:1d:d8:e1:a0:08:1a:46:fa:f9:ee:79:09:f6:68:
a8:94:b7:46:73:9e:b6:48:e6:97:06:ec:e1:56:e6:36:d2:2c:
46:92:4f:e6:55:1c:07:0a:60:02:f0:94:0a:36:e8:f9:7d:6d:
17:58:e9:36:36:d9:68:22:0f:6e:4f:17:1d:7c:db:90:c3:a8:
35:bf:a0:32:df:21:c9:d8:e0:2b:4d:54:96:74:de:dc:0c:af:
3e:98:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org