Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/11C3A7B8B47E11EBAF210064F8AEA228.roa
File: 11C3A7B8B47E11EBAF210064F8AEA228.roa (raw, json)
Hash identifier: icrFb6ChbTHiTK59VMlGno0toR48T0qU7pqu389ioCg=
Subject key identifier: 40:4A:CA:B2:77:1A:FB:FD:E9:84:90:26:95:4D:36:56:49:4F:94:1F
Certificate issuer: /CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Certificate serial: 03
Authority key identifier: C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/11C3A7B8B47E11EBAF210064F8AEA228.roa
Signing time: Fri 14 May 2021 06:31:52 +0000
ROA not before: Fri 14 May 2021 06:31:47 +0000
ROA not after: Wed 14 May 2031 06:31:47 +0000
asID: 328576
IP address blocks: 102.22.240.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Validity
Not Before: May 14 06:31:47 2021 GMT
Not After : May 14 06:31:47 2031 GMT
Subject: CN=609e1958-f0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:24:68:a1:48:3d:9c:22:fa:cb:6e:8d:82:
c7:ae:8e:46:f7:4e:06:89:77:f2:a5:de:e8:5b:39:
4c:9a:05:ad:0b:0b:cf:d6:7d:f0:02:85:d8:53:f6:
3b:1b:23:bf:00:38:25:67:9b:19:d7:3f:72:4d:e1:
c6:e5:2d:73:e2:4c:cc:55:ce:dd:4e:77:40:c7:06:
ce:f6:8d:24:4d:3b:9f:91:c6:55:9b:96:da:4c:ad:
41:69:7f:3b:d5:db:79:f0:50:c7:4e:8c:5c:b1:62:
da:e6:4e:4f:82:ea:2e:59:89:c7:94:c3:18:e1:0b:
c8:1d:0d:bb:66:06:dd:45:bb:d1:e9:91:7d:fb:ef:
b4:bb:77:f2:08:60:b7:ff:ad:c3:7c:f6:8a:2e:7f:
a6:2b:28:39:a0:94:2d:19:fa:c6:f0:ab:9d:4e:af:
8a:b9:bf:c5:a7:7c:8b:7a:f3:d7:76:93:0a:41:13:
8b:01:4f:90:ed:53:64:84:4d:fe:fc:51:3f:bb:07:
a6:56:27:ab:18:c3:95:54:22:e6:7b:51:56:6e:71:
66:fa:08:d0:95:00:89:fd:22:3d:0e:95:f0:a6:6d:
77:0e:d9:a9:70:57:cc:44:db:9b:7a:24:d4:b7:c5:
b9:75:e5:20:20:bc:57:9c:4a:dc:57:41:bd:76:4d:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4A:CA:B2:77:1A:FB:FD:E9:84:90:26:95:4D:36:56:49:4F:94:1F
X509v3 Authority Key Identifier:
keyid:C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/11C3A7B8B47E11EBAF210064F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.240.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:cd:c2:76:c0:c1:bc:5d:ef:d0:84:ff:50:27:8e:97:2f:f8:
8f:8e:07:12:f4:74:59:e1:78:30:bb:6f:f4:29:d7:e1:a8:b8:
fb:fb:3e:bc:ad:fc:3a:e2:0b:54:57:39:ad:b3:8a:f0:ab:30:
09:29:f5:a9:c0:d3:02:6e:22:38:1a:50:28:4f:ae:9e:09:dd:
1b:b4:cf:db:c4:9b:8b:f0:71:a7:ad:e9:14:ce:9a:0c:dc:85:
70:dd:86:c9:cf:79:b2:21:f0:dd:dc:4b:f3:9e:f2:e7:7c:70:
4b:35:aa:0a:5c:d5:e3:07:c9:90:2b:8d:76:b7:9a:da:a2:02:
2b:2e:bf:93:11:ff:2c:a2:b3:83:11:f6:c3:99:0b:c4:f1:5a:
ad:41:9d:4d:56:7b:24:70:c1:2d:f2:b2:a9:96:c7:77:3a:22:
cb:d5:65:ec:9f:47:06:37:10:68:97:f2:90:72:97:cb:30:13:
1f:ad:38:a7:2c:8f:34:b8:cb:e9:80:89:c5:f4:21:a8:8a:f0:
1d:be:90:f6:eb:cf:31:73:75:b8:b4:aa:83:04:1c:0c:50:b8:
0b:70:14:92:b8:1d:81:bf:e6:52:7d:c9:11:34:27:59:d9:7e:
b2:ea:75:ba:21:a5:de:f8:dd:c9:4f:fa:cc:d0:1a:6f:46:a7:
da:b0:f7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org