Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/E6AF3E56058E11EF9FB32730017001B1.roa
File: E6AF3E56058E11EF9FB32730017001B1.roa (raw, json)
Hash identifier: o4Y24z04JIZm0UtUj7w2CTOMSHxxeDgpEIpN7prq7SI=
Subject key identifier: DE:6B:F2:E9:8B:AE:1E:E9:8E:8D:BA:A5:69:8C:A0:58:4A:4D:A0:A9
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 13
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/E6AF3E56058E11EF9FB32730017001B1.roa
Signing time: Sun 28 Apr 2024 18:41:18 +0000
ROA not before: Sun 28 Apr 2024 18:41:15 +0000
ROA not after: Tue 31 Dec 2030 18:41:15 +0000
asID: 328586
IP address blocks: 102.22.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 10 May 2024 14:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Validity
Not Before: Apr 28 18:41:15 2024 GMT
Not After : Dec 31 18:41:15 2030 GMT
Subject: CN=662e984e-53c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:d5:7c:5c:14:00:b3:1c:f1:c9:3d:d2:de:
f3:57:ab:99:49:64:49:2e:bd:43:ae:db:cb:b6:9d:
cb:8d:78:9a:f6:f3:8f:80:b0:01:92:45:f4:ee:13:
fb:03:40:e8:c6:cb:af:68:fa:4a:09:63:d7:dd:28:
bd:b7:bf:e6:1f:a0:72:0f:3e:36:f3:a7:25:20:aa:
cc:fa:f7:dd:66:1b:b1:d2:13:a7:dc:31:19:5e:68:
87:26:f2:3c:c5:60:35:01:20:22:19:2a:0e:41:a4:
fa:51:6f:ac:9f:fc:f6:d9:65:f1:50:f7:84:60:5f:
d9:8a:a6:21:f2:ad:fa:56:f8:11:26:70:a9:da:dc:
b6:6b:d0:07:a7:c6:c4:f2:d2:e5:5c:f1:58:a7:48:
a8:7a:5a:22:59:b3:27:8d:70:53:2e:6f:0f:19:80:
4d:5e:d2:ea:53:ed:f1:31:7d:13:9d:aa:79:5f:fe:
26:33:03:6e:85:ca:53:8e:fb:9d:cd:87:4c:0e:9f:
39:c7:40:1f:c2:93:02:2e:8f:0e:60:bf:e2:2b:dc:
3d:c6:44:a5:ed:65:3c:54:17:bb:8f:65:12:91:b2:
b8:a8:5c:9f:0f:23:30:35:32:b3:b6:9e:b1:c3:8a:
e5:d4:e4:b8:b4:9b:2e:66:48:c0:ab:f0:5c:ee:1c:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:F2:E9:8B:AE:1E:E9:8E:8D:BA:A5:69:8C:A0:58:4A:4D:A0:A9
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/E6AF3E56058E11EF9FB32730017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:e1:e1:de:24:e4:7f:03:5f:31:1f:a1:f2:e2:c4:e4:90:bd:
71:08:0d:e2:d7:06:62:a8:77:f0:33:f3:8e:82:05:d7:8e:87:
c8:1d:10:ce:9e:c7:3b:22:6a:db:ff:61:a3:14:b3:bd:19:b7:
e7:3a:08:d0:2e:5f:cb:0f:4c:d5:e8:72:b7:82:66:29:1c:73:
4c:49:f9:13:0a:25:4d:77:6d:cf:83:5a:a7:8d:5a:17:be:cc:
00:5e:18:ae:33:37:82:20:bd:a2:00:60:3e:ff:15:8d:b0:fc:
28:34:e8:b9:1c:19:c9:93:a5:8f:51:f2:5d:7f:38:de:74:7c:
9e:9c:75:f1:78:ab:4f:fc:72:07:fd:8d:5e:66:65:bb:77:20:
3c:1c:07:01:14:67:b3:ec:b1:e8:d7:08:49:c5:be:1b:21:8f:
9d:8c:08:81:f6:d4:b6:e0:95:63:3e:99:18:98:40:25:19:94:
7d:e9:f4:3c:0b:eb:88:a4:e7:e9:6e:6b:89:95:81:ed:05:9a:
e8:ed:fc:35:53:f7:d7:98:d6:12:1e:e1:52:67:e5:e5:a3:b0:
3e:fb:4f:86:78:cd:2c:a9:56:9b:aa:fe:b3:e6:aa:38:51:aa:
e7:0d:18:b9:37:d3:2d:0f:6c:56:ae:11:71:67:2d:df:cc:63:
2c:cd:e0:eb
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBEzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
M0FFMEFGMTEwLwYDVQQFEygwOUIzNEUxMzM2MzlEM0I0RUUzNTE2MTNCOEE2MEQ2
QjE5MDJBRDYzMB4XDTI0MDQyODE4NDExNVoXDTMwMTIzMTE4NDExNVowGDEWMBQG
A1UEAxMNNjYyZTk4NGUtNTNjMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpi1XxcFACzHPHJPdLe81ermUlkSS69Q67by7ady414mvbzj4CwAZJF9O4T
+wNA6MbLr2j6Sglj190ovbe/5h+gcg8+NvOnJSCqzPr33WYbsdITp9wxGV5ohyby
PMVgNQEgIhkqDkGk+lFvrJ/89tll8VD3hGBf2YqmIfKt+lb4ESZwqdrctmvQB6fG
xPLS5VzxWKdIqHpaIlmzJ41wUy5vDxmATV7S6lPt8TF9E52qeV/+JjMDboXKU477
nc2HTA6fOcdAH8KTAi6PDmC/4ivcPcZEpe1lPFQXu49lEpGyuKhcnw8jMDUys7ae
scOK5dTkuLSbLmZIwKvwXO4cYH0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTea/Lp
i64e6Y6NuqVpjKBYSk2gqTAfBgNVHSMEGDAWgBQJs04TNjnTtO41FhO4pg1rGQKt
YzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTNBRTAvQkJFNTJGRjIwMEUxMTFFRkFGODRENjA3MDE3MDAxQjEvQ2JOT0V6
WTUwN1R1TlJZVHVLWU5heGtDcldNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQ2JOT0V6WTUwN1R1TlJZVHVLWU5heGtDcldNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTNBRTAvQkJFNTJGRjIwMEUxMTFFRkFGODRENjA3MDE3
MDAxQjEvRTZBRjNFNTYwNThFMTFFRjlGQjMyNzMwMDE3MDAxQjEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmYW6DANBgkqhkiG9w0BAQsF
AAOCAQEAbeHh3iTkfwNfMR+h8uLE5JC9cQgN4tcGYqh38DPzjoIF146HyB0Qzp7H
OyJq2/9hoxSzvRm35zoI0C5fyw9M1ehyt4JmKRxzTEn5EwolTXdtz4Nap41aF77M
AF4YrjM3giC9ogBgPv8VjbD8KDTouRwZyZOlj1HyXX843nR8npx18XirT/xyB/2N
XmZlu3cgPBwHARRns+yx6NcIScW+GyGPnYwIgfbUtuCVYz6ZGJhAJRmUfen0PAvr
iKTn6W5riZWB7QWa6O38NVP315jWEh7hUmfl5aOwPvtPhnjNLKlWm6r+s+aqOFGq
5w0YuTfTLQ9sVq4RcWct38xjLM3g6w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org