Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/6669B60C200D11EEBA1D89494AD9E6FC.roa
File: 6669B60C200D11EEBA1D89494AD9E6FC.roa (raw, json)
Hash identifier: ZZqwzffFI+bTomulX3rIIWdRfjeqv3IfEwpWMmNniFs=
Subject key identifier: 1E:C4:4C:C8:C0:B3:0C:5C:F3:45:09:D0:D5:39:7C:91:DE:9D:90:AD
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 02FE
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/6669B60C200D11EEBA1D89494AD9E6FC.roa
Signing time: Tue 11 Jul 2023 17:07:22 +0000
ROA not before: Tue 11 Jul 2023 17:07:19 +0000
ROA not after: Thu 01 Jul 2027 17:07:19 +0000
asID: 328840
IP address blocks: 102.220.18.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 10 Oct 2023 09:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 766 (0x2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF
Validity
Not Before: Jul 11 17:07:19 2023 GMT
Not After : Jul 1 17:07:19 2027 GMT
Subject: CN=64ad8c4a-dd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:f8:a0:d1:e3:05:75:66:f6:32:8a:3c:68:
a0:1f:c7:8f:90:75:bf:2c:bd:87:a9:43:0b:2b:7d:
ef:2c:7c:35:27:31:e6:5c:b0:aa:24:cb:16:e8:b3:
98:b3:c3:8b:ba:aa:3c:5e:23:0a:e3:7d:7a:72:81:
4a:fc:22:af:54:37:4a:da:ec:89:6a:b5:60:b5:ff:
d7:08:5b:1e:6f:4c:55:cb:70:f7:c3:e6:36:5d:d2:
29:e6:c8:dd:f9:86:dd:ed:16:b4:0b:70:3a:de:87:
ee:a9:b0:21:73:e2:db:c1:c1:31:fc:db:5e:b9:6c:
6c:a3:17:a7:36:ae:8c:50:01:cc:df:1f:fa:11:3f:
03:46:8e:da:74:2e:34:1f:3d:55:7b:09:6d:db:5e:
22:ff:29:e1:28:60:3f:a3:00:ed:01:df:ae:d7:6e:
db:5e:1d:e5:fd:00:df:72:5b:e4:50:72:94:64:89:
27:85:e3:dc:ba:b2:08:0f:6a:af:ad:f8:f3:7e:5f:
59:e3:bd:8a:b2:6f:8d:a8:91:5d:1b:97:e8:a1:02:
3d:55:74:99:e0:bf:59:f7:aa:de:2b:e1:8b:0a:33:
7b:e0:55:52:f6:08:89:7d:37:d4:87:b8:bc:f2:3f:
dc:46:87:66:77:d8:8a:3d:57:96:1f:13:25:55:62:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C4:4C:C8:C0:B3:0C:5C:F3:45:09:D0:D5:39:7C:91:DE:9D:90:AD
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/6669B60C200D11EEBA1D89494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.18.0/23
Signature Algorithm: sha256WithRSAEncryption
07:77:ea:13:71:fc:c1:27:78:8e:61:9a:3b:61:7b:fc:7c:b8:
91:62:f0:08:15:63:ff:a9:ac:cd:bb:4a:66:43:2c:fe:d4:31:
97:5e:83:b0:d0:57:ac:73:6f:5c:15:b3:46:87:e8:1d:a9:ef:
59:66:5b:22:92:a1:9c:d0:a7:9e:f2:db:ef:14:7e:db:ed:b6:
46:b1:28:1d:8d:67:d8:c8:12:61:ba:ae:7b:39:a9:ff:3e:76:
b4:a4:b0:5c:9a:df:fe:ef:54:fd:15:54:02:83:d8:de:8e:8c:
66:93:17:a2:28:4f:2b:98:39:96:a3:c5:24:e8:c2:c5:eb:e3:
9a:28:4c:dc:39:32:bf:55:01:ee:66:fc:1b:db:5b:df:93:ab:
7a:90:18:a8:77:fb:ab:54:ac:bc:ec:2e:6d:2f:e5:b3:3e:51:
7a:9c:cf:2a:82:e8:11:81:35:ad:ed:88:39:20:23:6b:08:44:
a6:69:fb:36:f0:8f:e7:be:64:79:12:49:4b:b4:c3:8b:54:fd:
58:33:78:f9:06:ea:04:d6:af:f1:08:82:16:67:65:4f:3d:f0:
d4:e6:07:4b:20:78:c0:e0:af:18:57:21:00:88:d0:cd:f2:23:
72:36:77:1e:e5:dc:8c:9a:a0:46:a9:4e:2b:de:a7:e2:6c:91:
2d:63:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:30 2025 by rpki-client