Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/A7372C22B48111EBAD968D68F8AEA228.roa
File: A7372C22B48111EBAD968D68F8AEA228.roa (raw, json)
Hash identifier: o8MbVu53diyJtPcUQ+CdCc1mJxR+pKcl5mM0mSPGCgU=
Subject key identifier: 43:A3:7F:E1:70:05:66:D6:26:0B:07:D8:D1:A1:8A:87:D3:F4:9B:02
Certificate issuer: /CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Certificate serial: 05
Authority key identifier: C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/A7372C22B48111EBAD968D68F8AEA228.roa
Signing time: Fri 14 May 2021 06:57:32 +0000
ROA not before: Fri 14 May 2021 06:57:27 +0000
ROA not after: Wed 14 May 2031 06:57:27 +0000
asID: 328576
IP address blocks: 102.221.200.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Oct 2022 11:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Validity
Not Before: May 14 06:57:27 2021 GMT
Not After : May 14 06:57:27 2031 GMT
Subject: CN=609e1f5b-0730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:b9:48:d4:ca:af:aa:b2:d3:44:63:03:6e:
79:5e:a0:1d:e1:b8:30:75:d7:f9:0d:18:6c:a8:b9:
ef:72:88:79:b9:6a:81:44:a3:a0:35:08:22:71:27:
fb:f3:30:99:75:b5:d1:25:95:a2:46:3d:5e:12:35:
e5:6a:11:cd:d0:75:77:5a:ec:46:54:49:5c:f1:c6:
aa:ae:d3:33:62:e2:86:80:5e:09:ef:ac:6c:dc:cc:
4b:4a:89:d2:3e:c2:eb:b6:d6:84:40:ff:46:6c:d2:
4d:99:19:e9:d4:28:33:7b:5b:58:e1:ff:89:76:fc:
57:58:e5:84:57:e1:6d:92:4e:66:6d:29:f7:09:4d:
7d:e1:81:37:3d:c4:b7:cb:29:01:14:15:a0:a6:12:
9b:f9:c3:67:71:65:6b:44:50:d4:8c:11:c8:35:20:
85:a2:6c:33:b5:9d:d4:ee:80:89:b2:0c:2e:d7:21:
53:6a:ff:45:d0:f2:7d:04:92:51:c4:ec:bd:d5:d9:
4b:b8:a4:75:7b:fa:f3:c7:32:0d:99:aa:ce:d0:ea:
ca:0f:fd:25:ef:26:62:6c:0b:0d:f2:c8:f1:1b:53:
3e:78:49:00:5d:fa:93:78:30:18:71:61:77:24:25:
02:31:83:f2:34:f9:65:c1:e4:ea:dd:75:c2:17:ca:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A3:7F:E1:70:05:66:D6:26:0B:07:D8:D1:A1:8A:87:D3:F4:9B:02
X509v3 Authority Key Identifier:
keyid:C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/A7372C22B48111EBAD968D68F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.200.0/22
Signature Algorithm: sha256WithRSAEncryption
64:41:ec:71:88:6f:72:c7:86:b4:7d:ff:c9:ce:b1:2b:c8:9e:
06:4b:ed:a9:9b:f7:00:eb:cf:c1:53:bc:54:f5:ab:2d:5d:b7:
db:62:0e:b5:e5:53:ab:ed:16:0e:05:88:e0:19:ca:00:70:79:
d2:e5:2d:90:c9:78:a2:b7:50:34:64:5d:db:92:08:c7:19:19:
50:1c:30:85:1c:7e:3e:08:2f:c0:31:15:ab:56:31:4c:8b:45:
eb:d2:84:74:80:35:e7:92:8a:b2:c1:15:d2:75:2d:59:61:7d:
2f:bb:a8:eb:33:1c:21:45:d0:83:66:a0:da:e9:df:99:bb:d3:
56:a4:27:1a:33:c4:cb:d1:b4:b3:2a:95:7a:c7:5a:92:5d:5b:
02:3a:fd:89:b4:d8:32:a0:11:9a:68:f0:8b:7b:3b:51:44:03:
df:8e:f1:81:dd:09:6b:b1:36:d3:66:8d:42:db:73:13:16:e3:
4f:d0:34:b0:41:b6:64:10:ff:1c:43:88:2d:49:ca:c9:79:f8:
48:f8:9f:cd:f6:bd:1a:77:e0:5e:80:4c:1d:f2:d2:3a:2c:ad:
07:72:5a:8e:d3:31:12:86:a5:07:a7:2d:21:de:f6:94:60:f4:
c4:75:46:49:b9:9f:04:6f:49:98:62:c3:bf:c6:02:fc:11:70:
29:56:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org