Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/DF117764DEF311EB80BFBB08F8AEA228.roa
File: DF117764DEF311EB80BFBB08F8AEA228.roa (raw, json)
Hash identifier: R2zStHvyFz2EKntOncRkZ0LZWSXb+YEFvmBdiSApQ34=
Subject key identifier: AE:3B:7F:CC:FE:84:3D:52:10:AB:CE:42:53:8E:5A:FE:83:79:6C:F5
Certificate issuer: /CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Certificate serial: 44
Authority key identifier: C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/DF117764DEF311EB80BFBB08F8AEA228.roa
Signing time: Wed 07 Jul 2021 07:20:57 +0000
ROA not before: Wed 07 Jul 2021 07:20:50 +0000
ROA not after: Mon 07 Jul 2031 07:20:50 +0000
asID: 328576
IP address blocks: 102.219.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Validity
Not Before: Jul 7 07:20:50 2021 GMT
Not After : Jul 7 07:20:50 2031 GMT
Subject: CN=60e555d9-c763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:0e:a3:5f:97:b3:bc:cb:66:84:65:06:43:
1f:6b:94:7a:7e:1e:4b:a3:98:dc:b2:86:8d:b8:c2:
d8:05:76:6d:28:40:4d:5c:51:8e:52:d6:be:a0:1c:
00:e1:a4:5a:6f:17:60:41:97:cc:bd:88:28:8d:7b:
9d:4a:36:92:d3:3d:32:6f:e5:90:2e:1f:b6:1c:a8:
84:97:12:16:e0:8a:0e:de:cd:9a:fd:f8:06:d8:62:
60:35:8b:a9:de:10:20:64:1e:15:64:07:88:dd:36:
09:bd:b0:36:f7:0b:f7:39:0b:64:1e:8a:ea:ea:59:
c2:92:ff:5e:c6:1f:5a:2a:41:31:c6:c9:4d:50:fc:
e5:b8:66:4e:a1:6c:20:83:c5:57:65:88:15:02:fe:
51:45:ff:83:be:17:f3:c7:1b:bd:cf:e1:8d:74:2b:
71:78:e2:0e:c1:cf:fb:2b:7e:f4:8e:19:ac:4c:f7:
ea:24:9b:99:8f:59:55:30:b8:82:1e:1b:64:fd:02:
79:be:e9:f9:3e:75:c8:6e:1d:a9:a2:94:27:89:59:
4a:bc:66:c1:9d:c4:56:1a:a1:1d:e0:dc:70:40:22:
1f:60:bf:e0:b7:df:87:b8:2c:0b:72:44:8b:b8:55:
cb:92:ed:3c:2f:5a:bc:7e:41:44:32:89:74:04:b9:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:7F:CC:FE:84:3D:52:10:AB:CE:42:53:8E:5A:FE:83:79:6C:F5
X509v3 Authority Key Identifier:
keyid:C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/DF117764DEF311EB80BFBB08F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.60.0/22
Signature Algorithm: sha256WithRSAEncryption
86:6e:4c:0c:52:60:e9:c0:21:77:44:29:ba:75:58:e9:25:c8:
b5:c0:d8:6e:e8:0f:2e:9c:8d:9d:9c:36:2b:5d:bc:dc:bb:e5:
09:c5:8a:27:35:15:1d:38:06:41:06:ba:1c:98:6a:03:31:88:
1e:ab:b8:4b:00:19:5c:75:68:3e:ef:42:0b:e2:b4:8c:da:0f:
57:27:23:65:8d:a5:ba:68:1b:f9:8a:01:6c:a9:1d:aa:de:4e:
e7:ea:69:5a:0c:63:ba:cb:1a:e9:a4:0b:81:67:9d:e7:11:d5:
94:90:a1:45:b6:c4:ab:82:9f:26:93:27:f4:06:f4:98:1b:07:
50:65:ab:e8:84:35:7d:83:dd:a4:b4:c2:7a:dc:92:1c:bb:01:
7b:96:91:65:4f:58:f8:91:1f:a2:ae:b0:37:05:cf:67:94:dc:
3f:83:d1:bf:ee:0d:58:4c:70:2b:8e:e1:c2:ca:ed:76:20:03:
39:81:4c:1c:68:6f:59:65:27:cc:c5:38:ae:3c:2c:05:80:45:
4b:e5:23:25:d8:22:65:b5:2a:54:0c:e3:7a:27:23:04:d2:5d:
1d:b7:55:33:98:ad:73:1f:f6:f4:39:8c:2e:71:61:c3:8d:de:
1d:a1:82:aa:20:57:93:d0:c1:ff:cb:0c:ff:85:f2:9e:76:47:
20:d6:ac:1d
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBRDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
NjEyNUFGMTEwLwYDVQQFEyhDMkVCQ0M5OEYzRThFMzI5MEE5QUYzMkY5RUE4RDgy
QUM3QUYxRkNBMB4XDTIxMDcwNzA3MjA1MFoXDTMxMDcwNzA3MjA1MFowGDEWMBQG
A1UEAxMNNjBlNTU1ZDktYzc2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKdaDqNfl7O8y2aEZQZDH2uUen4eS6OY3LKGjbjC2AV2bShATVxRjlLWvqAc
AOGkWm8XYEGXzL2IKI17nUo2ktM9Mm/lkC4fthyohJcSFuCKDt7Nmv34BthiYDWL
qd4QIGQeFWQHiN02Cb2wNvcL9zkLZB6K6upZwpL/XsYfWipBMcbJTVD85bhmTqFs
IIPFV2WIFQL+UUX/g74X88cbvc/hjXQrcXjiDsHP+yt+9I4ZrEz36iSbmY9ZVTC4
gh4bZP0Ceb7p+T51yG4dqaKUJ4lZSrxmwZ3EVhqhHeDccEAiH2C/4Lffh7gsC3JE
i7hVy5LtPC9avH5BRDKJdAS5sVECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSuO3/M
/oQ9UhCrzkJTjlr+g3ls9TAfBgNVHSMEGDAWgBTC68yY8+jjKQqa8y+eqNgqx68f
yjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjYxMjUvNjQ0Qzk1QzRCNDIxMTFFQjlFODk3RDVGRjhBRUEyMjgvd3V2TW1Q
UG80eWtLbXZNdm5xallLc2V2SDhvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvd3V2TW1QUG80eWtLbXZNdm5xallLc2V2SDhvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjYxMjUvNjQ0Qzk1QzRCNDIxMTFFQjlFODk3RDVGRjhB
RUEyMjgvREYxMTc3NjRERUYzMTFFQjgwQkZCQjA4RjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbbPDANBgkqhkiG9w0BAQsF
AAOCAQEAhm5MDFJg6cAhd0QpunVY6SXItcDYbugPLpyNnZw2K1283LvlCcWKJzUV
HTgGQQa6HJhqAzGIHqu4SwAZXHVoPu9CC+K0jNoPVycjZY2lumgb+YoBbKkdqt5O
5+ppWgxjussa6aQLgWed5xHVlJChRbbEq4KfJpMn9Ab0mBsHUGWr6IQ1fYPdpLTC
etySHLsBe5aRZU9Y+JEfoq6wNwXPZ5TcP4PRv+4NWExwK47hwsrtdiADOYFMHGhv
WWUnzMU4rjwsBYBFS+UjJdgiZbUqVAzjeicjBNJdHbdVM5itcx/29DmMLnFhw43e
HaGCqiBXk9DB/8sM/4XynnZHINasHQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org