Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/32FB0FB04FA111ED9B5AF4A9F1222468.roa
File: 32FB0FB04FA111ED9B5AF4A9F1222468.roa (raw, json)
Hash identifier: xqRaFw8p+xrxj8Lie6rc4c5ODypLtZCCvQyK0V1gkAE=
Subject key identifier: 88:A0:BE:59:64:51:5E:96:7B:EA:78:A1:87:30:96:EA:41:9E:83:80
Certificate issuer: /CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Certificate serial: 0224
Authority key identifier: C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/32FB0FB04FA111ED9B5AF4A9F1222468.roa
Signing time: Wed 19 Oct 2022 11:28:48 +0000
ROA not before: Wed 19 Oct 2022 11:28:45 +0000
ROA not after: Sun 19 Oct 2025 11:28:45 +0000
asID: 328576
IP address blocks: 102.22.240.0/21 maxlen: 24
102.218.156.0/22 maxlen: 24
102.219.60.0/22 maxlen: 24
102.220.60.0/22 maxlen: 24
102.221.200.0/22 maxlen: 24
2c0f:eb48::/32 maxlen: 64
Validation: Failed, certificate revoked on Thu 21 Sep 2023 06:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Validity
Not Before: Oct 19 11:28:45 2022 GMT
Not After : Oct 19 11:28:45 2025 GMT
Subject: CN=634fdf70-eec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:75:ed:31:2c:61:54:1a:d1:07:45:fa:01:
86:f3:9f:3f:d7:e1:3a:cd:72:99:bb:49:fe:30:cf:
e1:b9:45:01:a9:b1:6f:cc:35:02:b5:df:4a:0c:89:
2e:6f:0e:98:b0:e6:b3:e1:76:62:cd:e3:b1:ce:eb:
73:57:11:27:9d:25:4b:5d:13:1b:60:44:c1:18:fd:
0e:53:de:70:d7:88:ee:0a:a1:ca:c5:c0:da:ad:37:
f0:cf:75:01:22:46:43:2d:a8:4b:1a:52:40:f1:8a:
64:ba:c0:79:03:c1:8c:1d:c2:26:1b:2a:4c:38:29:
8a:ce:41:bd:cc:ff:f9:31:90:7b:fd:d6:f7:7c:63:
83:28:2e:5f:95:96:68:8e:36:48:db:9c:e8:0b:4c:
95:c3:40:3f:83:66:a9:a8:ec:9e:7d:cb:70:b1:27:
74:d1:53:c9:d2:86:d9:34:1b:de:14:8d:9e:35:05:
ec:d9:80:99:74:e1:a7:0b:b7:84:cd:93:76:33:74:
6f:eb:fb:11:38:91:55:af:4f:8d:8c:86:3c:9c:67:
f3:49:d5:d9:fd:a0:ab:05:b6:e4:2f:1f:69:e8:3f:
a6:25:29:43:9c:9b:33:e9:e9:9d:73:72:3d:6f:95:
90:82:6a:64:27:b9:86:ef:57:d7:81:bc:cd:8b:55:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A0:BE:59:64:51:5E:96:7B:EA:78:A1:87:30:96:EA:41:9E:83:80
X509v3 Authority Key Identifier:
keyid:C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/32FB0FB04FA111ED9B5AF4A9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.240.0/21
102.218.156.0/22
102.219.60.0/22
102.220.60.0/22
102.221.200.0/22
IPv6:
2c0f:eb48::/32
Signature Algorithm: sha256WithRSAEncryption
b3:e6:c5:f4:55:56:84:98:85:5b:6d:5f:5e:28:a1:64:69:00:
24:c4:dd:ef:fa:30:b7:15:fa:6d:31:7d:d0:b1:f8:0a:e1:ff:
ca:3e:f2:d3:76:25:a3:78:65:50:b4:dd:11:08:a7:02:9a:02:
36:30:6d:c8:9b:52:9d:e3:ae:70:b5:d9:7b:b8:b5:5f:08:8d:
49:60:29:78:88:ee:b7:96:64:e1:d4:ee:20:4b:fa:76:50:4d:
c0:27:60:dc:c0:8f:16:21:a1:95:83:5c:98:c3:ed:1d:84:05:
ca:56:3a:c8:80:75:55:7b:55:ca:f5:67:28:79:a6:e1:8d:7e:
71:3a:c2:55:97:8f:c4:d7:b8:40:cb:f1:26:de:a3:41:4e:bd:
e9:a5:8e:17:c6:30:dd:82:5b:d2:f0:40:ab:9a:5b:74:7e:10:
c5:f5:f1:cc:8f:d7:a0:78:4f:5f:6b:fa:5b:f0:01:a0:2e:bf:
2d:b2:8c:57:99:d8:f0:70:ad:09:2d:29:aa:21:14:1a:b7:60:
17:36:c3:3c:c3:52:9c:c1:03:4a:28:b9:a4:cd:88:1f:53:df:
a8:e0:8d:cf:31:55:70:17:ee:3d:3f:30:14:b0:61:19:25:5b:
3d:17:e6:f4:4f:7e:99:66:e0:e5:d7:06:25:b7:df:e7:a4:a2:
63:44:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org