Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/F9FC1CF64A6011EF9B942393762E951A.roa
File: F9FC1CF64A6011EF9B942393762E951A.roa (raw, json)
Hash identifier: MwLYLo9ecQae+p82noVS/phJBYgIH39gVydimgv3AX8=
Subject key identifier: D0:01:B4:1A:7A:1D:60:0E:47:48:93:0B:84:63:A5:E7:88:57:52:90
Certificate issuer: /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial: 02
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/F9FC1CF64A6011EF9B942393762E951A.roa
Signing time: Thu 25 Jul 2024 08:36:24 +0000
ROA not before: Thu 25 Jul 2024 08:36:21 +0000
ROA not after: Sat 28 Sep 2024 08:36:21 +0000
asID: 329130
IP address blocks: 102.214.164.0/22 maxlen: 22
102.214.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 22:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Validity
Not Before: Jul 25 08:36:21 2024 GMT
Not After : Sep 28 08:36:21 2024 GMT
Subject: CN=66a20e88-6824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:33:82:96:ef:a0:f6:3f:90:a4:9c:e8:ef:c1:
cd:ba:17:40:a7:1f:97:91:4c:81:aa:87:76:bb:3c:
e1:0e:47:36:50:cc:f4:d5:1c:58:72:0f:e1:fe:42:
30:7a:03:7c:d6:06:bb:50:cc:67:a5:0a:05:45:da:
56:34:ed:29:61:28:de:af:07:54:be:c5:30:36:32:
3d:75:f0:46:b3:8a:82:ef:ff:54:20:42:ff:28:b7:
16:6f:a2:ea:4e:fb:b8:17:35:f3:04:0c:30:dd:8d:
94:17:c0:e1:ef:5e:fc:51:29:9a:5f:0b:61:f5:3d:
5d:f9:ef:6b:93:62:b8:f2:71:d7:c0:c9:c5:8c:90:
ce:88:f1:14:f9:56:a1:da:c7:26:40:17:7a:b4:df:
8b:62:11:52:4d:26:cc:6d:23:e7:16:32:e4:5f:c2:
a1:4d:34:1b:00:e5:d7:71:e7:34:0e:9a:db:f6:e7:
f4:3e:1e:eb:e5:0c:b0:31:3d:64:44:80:db:ac:39:
56:f1:0c:12:0b:e3:aa:6b:fa:39:17:f5:40:c1:df:
a3:48:dd:33:81:40:3b:23:17:41:82:0b:e9:b6:ef:
b5:6c:79:3e:e4:e1:3d:00:4c:22:15:fb:4c:18:af:
c0:b1:b2:8f:f9:bb:27:eb:ac:1e:14:95:6d:f5:27:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:01:B4:1A:7A:1D:60:0E:47:48:93:0B:84:63:A5:E7:88:57:52:90
X509v3 Authority Key Identifier:
keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/F9FC1CF64A6011EF9B942393762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.164.0/22
Signature Algorithm: sha256WithRSAEncryption
36:98:6e:18:e0:cb:54:ff:95:44:88:46:44:0f:3e:37:ca:a4:
25:95:dd:cf:21:f6:4f:98:25:e4:61:d8:af:ab:38:53:bb:0d:
b4:97:a5:d4:6e:3c:a0:6b:94:1c:c9:cf:dd:8d:ff:b7:e2:bb:
d9:56:88:26:14:ba:17:70:58:6e:77:98:8f:00:3b:c3:74:c8:
bf:eb:83:0e:19:a8:6c:06:77:28:f5:21:1a:d6:4a:fe:5b:23:
e4:59:52:b2:6b:04:74:9a:a5:3e:1b:3c:f5:8f:b6:e4:19:e6:
c8:af:78:78:db:63:09:e1:72:b0:fd:4d:c1:3b:83:6a:63:24:
05:32:a4:65:82:1d:ae:26:54:82:11:08:80:21:72:27:8e:1b:
09:11:10:3f:1a:37:bb:e7:77:9c:69:1e:c5:d0:3b:43:68:93:
d7:ef:fa:0e:82:e4:d9:b4:41:ab:fd:08:4b:7f:6e:ed:4c:d0:
22:aa:50:af:05:c0:76:b8:15:94:0c:88:bf:c7:25:93:94:81:
ea:b3:69:dc:b0:10:64:31:08:6e:a2:6e:f6:d9:76:17:4b:b3:
b3:e0:41:2e:48:88:fa:c7:a1:ad:fd:1d:56:88:a3:eb:4a:f6:
c1:7f:ca:90:8e:eb:70:35:4a:1b:03:af:0b:a1:85:12:5a:68:
70:a3:2a:40
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
N0U2OEFGMTEwLwYDVQQFEyhDRTFFQ0RBNEYwNTY5NjcwQjU4NkUyQ0QzNTJCRDcy
MDZGRDg3ODA0MB4XDTI0MDcyNTA4MzYyMVoXDTI0MDkyODA4MzYyMVowGDEWMBQG
A1UEAxMNNjZhMjBlODgtNjgyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOozgpbvoPY/kKSc6O/BzboXQKcfl5FMgaqHdrs84Q5HNlDM9NUcWHIP4f5C
MHoDfNYGu1DMZ6UKBUXaVjTtKWEo3q8HVL7FMDYyPXXwRrOKgu//VCBC/yi3Fm+i
6k77uBc18wQMMN2NlBfA4e9e/FEpml8LYfU9Xfnva5NiuPJx18DJxYyQzojxFPlW
odrHJkAXerTfi2IRUk0mzG0j5xYy5F/CoU00GwDl13HnNA6a2/bn9D4e6+UMsDE9
ZESA26w5VvEMEgvjqmv6ORf1QMHfo0jdM4FAOyMXQYIL6bbvtWx5PuThPQBMIhX7
TBivwLGyj/m7J+usHhSVbfUntCkCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTQAbQa
eh1gDkdIkwuEY6XniFdSkDAfBgNVHSMEGDAWgBTOHs2k8FaWcLWG4s01K9cgb9h4
BDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTdFNjgvNUIzMjVCMjY0QTYwMTFFRjg2MDE4MjhFNzYyRTk1MUEvemg3TnBQ
QldsbkMxaHVMTk5TdlhJR19ZZUFRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvemg3TnBQQldsbkMxaHVMTk5TdlhJR19ZZUFRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTdFNjgvNUIzMjVCMjY0QTYwMTFFRjg2MDE4MjhFNzYy
RTk1MUEvRjlGQzFDRjY0QTYwMTFFRjlCOTQyMzkzNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbWpDANBgkqhkiG9w0BAQsF
AAOCAQEANphuGODLVP+VRIhGRA8+N8qkJZXdzyH2T5gl5GHYr6s4U7sNtJel1G48
oGuUHMnP3Y3/t+K72VaIJhS6F3BYbneYjwA7w3TIv+uDDhmobAZ3KPUhGtZK/lsj
5FlSsmsEdJqlPhs89Y+25BnmyK94eNtjCeFysP1NwTuDamMkBTKkZYIdriZUghEI
gCFyJ44bCREQPxo3u+d3nGkexdA7Q2iT1+/6DoLk2bRBq/0IS39u7UzQIqpQrwXA
drgVlAyIv8clk5SB6rNp3LAQZDEIbqJu9tl2F0uzs+BBLkiI+sehrf0dVoij60r2
wX/KkI7rcDVKGwOvC6GFElpocKMqQA==
-----END CERTIFICATE-----
Generated at Sat Jul 27 02:03:47 2024 by rpki-client on console-ams.rpki-client.org