Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/0632B44C38D711EC86F7AB7DD8A014CE.roa
File: 0632B44C38D711EC86F7AB7DD8A014CE.roa (raw, json)
Hash identifier: IA3uErSVFAwL87x41ivp9YI5G1Y790RhpfmDezKtKy0=
Subject key identifier: 77:59:FD:04:22:A5:E4:BB:13:D4:C9:D2:36:09:53:4A:15:43:70:DF
Certificate issuer: /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial: 02
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/0632B44C38D711EC86F7AB7DD8A014CE.roa
Signing time: Fri 29 Oct 2021 16:41:12 +0000
ROA not before: Fri 29 Oct 2021 16:41:07 +0000
ROA not after: Tue 01 Oct 2024 16:41:07 +0000
asID: 328961
IP address blocks: 102.217.240.0/22 maxlen: 24
2c0f:4f00::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Dec 2022 06:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Validity
Not Before: Oct 29 16:41:07 2021 GMT
Not After : Oct 1 16:41:07 2024 GMT
Subject: CN=617c2427-ea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:de:8d:04:58:c1:8d:24:2a:97:03:55:04:ba:
29:11:6e:8e:52:d2:ff:65:3f:54:7c:49:00:44:9b:
03:91:fb:df:8f:b3:69:97:f0:7c:98:2f:fc:89:63:
68:6e:6f:37:81:0e:38:82:4e:45:d6:19:a8:db:b1:
42:6a:9c:c8:4d:58:d8:d2:c1:50:a9:ac:49:79:44:
6f:e2:55:11:07:c3:72:5e:5f:b8:b6:29:88:1b:bc:
53:0a:83:5d:61:d5:89:24:15:51:81:2a:51:68:06:
5a:3d:f7:78:35:4e:83:ae:2f:7f:67:37:0d:04:3f:
c5:0c:cb:c4:88:8e:e0:75:91:6f:77:c7:09:eb:68:
43:b9:a4:54:ed:b6:0e:d9:a0:55:5e:f7:a6:8c:54:
4d:2d:aa:d7:12:d6:fc:b4:23:60:c7:0c:59:51:b4:
95:f9:68:98:10:39:d6:d9:ad:d4:f9:3e:e7:46:a2:
53:6a:e0:f9:40:44:7b:19:c7:31:7a:fb:4a:e9:96:
fa:1f:9d:ad:8a:2d:1a:8f:6b:cf:8a:41:f5:55:38:
27:08:75:12:fd:b4:00:86:e8:1c:45:78:f1:02:7a:
32:6a:dc:66:fa:93:8b:a2:b4:0a:57:d1:af:fa:0d:
0a:e6:33:95:71:0d:b9:dd:a2:b1:b4:9a:c4:31:50:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:59:FD:04:22:A5:E4:BB:13:D4:C9:D2:36:09:53:4A:15:43:70:DF
X509v3 Authority Key Identifier:
keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/0632B44C38D711EC86F7AB7DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.240.0/22
IPv6:
2c0f:4f00::/32
Signature Algorithm: sha256WithRSAEncryption
32:28:fa:be:2c:70:06:b6:51:19:b2:90:fe:1d:c3:95:ad:26:
ae:c2:86:62:fe:74:eb:8d:7c:1c:83:be:18:12:c5:6c:96:a7:
45:6f:35:46:b6:58:8a:62:91:13:71:3c:74:17:9a:01:af:63:
cb:af:f3:67:63:c7:c6:81:c7:ae:4c:31:d5:9a:21:c1:32:25:
d1:cd:4f:82:a5:bb:1f:10:3b:44:1e:88:ef:3a:22:a7:ce:3d:
f8:cd:89:c5:ff:af:b0:b9:76:e1:a3:16:7c:d8:07:f3:e3:f0:
54:37:7a:f7:1f:07:8e:39:56:cd:3b:fe:16:2b:38:7b:75:ea:
91:04:4b:a2:ff:81:5c:b7:56:6c:31:37:9d:cd:5b:8d:05:a4:
7b:c2:b0:b6:ef:f1:d4:16:f7:78:13:b8:af:4f:0b:b5:dc:09:
12:00:c3:1a:3d:02:45:5e:b7:07:fc:57:02:44:e0:88:c6:e4:
88:93:c7:44:87:4e:52:44:6c:bc:78:a1:c7:c8:12:1b:d3:22:
f9:33:91:37:e0:43:03:d1:b4:f7:24:3c:1a:e6:52:29:82:20:
a4:65:66:cb:91:2e:5e:8d:db:b4:c3:a3:17:fe:07:8f:c0:8d:
a2:c6:60:df:18:63:73:3a:7c:4d:19:70:eb:ad:ac:5d:a5:91:
bf:e4:0d:06
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY5
RDQ4QUFGMTEwLwYDVQQFEyhCQkZGMjUyNDBCMjA3RjlCQUNDNUNCOTU0QTYyMzA5
QUJCQTUzNjVEMB4XDTIxMTAyOTE2NDEwN1oXDTI0MTAwMTE2NDEwN1owGDEWMBQG
A1UEAwwNNjE3YzI0MjctZWE1ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN3ejQRYwY0kKpcDVQS6KRFujlLS/2U/VHxJAESbA5H734+zaZfwfJgv/Ilj
aG5vN4EOOIJORdYZqNuxQmqcyE1Y2NLBUKmsSXlEb+JVEQfDcl5fuLYpiBu8UwqD
XWHViSQVUYEqUWgGWj33eDVOg64vf2c3DQQ/xQzLxIiO4HWRb3fHCetoQ7mkVO22
DtmgVV73poxUTS2q1xLW/LQjYMcMWVG0lflomBA51tmt1Pk+50aiU2rg+UBEexnH
MXr7SumW+h+drYotGo9rz4pB9VU4Jwh1Ev20AIboHEV48QJ6MmrcZvqTi6K0ClfR
r/oNCuYzlXENud2isbSaxDFQnf0CAwEAAaOCArQwggKwMB0GA1UdDgQWBBR3Wf0E
IqXkuxPUydI2CVNKFUNw3zAfBgNVHSMEGDAWgBS7/yUkCyB/m6zFy5VKYjCau6U2
XTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUQ0OEEvQzQwOTdERDAzOEQ2MTFFQ0E1MDEyNDdERDhBMDE0Q0UvdV84bEpB
c2dmNXVzeGN1VlNtSXdtcnVsTmwwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdV84bEpBc2dmNXVzeGN1VlNtSXdtcnVsTmwwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUQ0OEEvQzQwOTdERDAzOEQ2MTFFQ0E1MDEyNDdERDhB
MDE0Q0UvMDYzMkI0NEMzOEQ3MTFFQzg2RjdBQjdERDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbZ8DANBAIAAjAHAwUALA9P
ADANBgkqhkiG9w0BAQsFAAOCAQEAMij6vixwBrZRGbKQ/h3Dla0mrsKGYv506418
HIO+GBLFbJanRW81RrZYimKRE3E8dBeaAa9jy6/zZ2PHxoHHrkwx1ZohwTIl0c1P
gqW7HxA7RB6I7zoip849+M2Jxf+vsLl24aMWfNgH8+PwVDd69x8HjjlWzTv+Fis4
e3XqkQRLov+BXLdWbDE3nc1bjQWke8Kwtu/x1Bb3eBO4r08LtdwJEgDDGj0CRV63
B/xXAkTgiMbkiJPHRIdOUkRsvHihx8gSG9Mi+TORN+BDA9G09yQ8GuZSKYIgpGVm
y5EuXo3btMOjF/4Hj8CNosZg3xhjczp8TRlw662sXaWRv+QNBg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org