Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/E4645A48B48111EBBFF6E768F8AEA228.roa
File: E4645A48B48111EBBFF6E768F8AEA228.roa (raw, json)
Hash identifier: eRC97LXJnxfQK5jkr8fmOMjlc4RZsW2Z6TVHYeJEaEw=
Subject key identifier: 5C:26:BE:AD:55:5E:A2:24:9F:61:3D:81:3F:FD:A4:31:50:92:BE:CC
Certificate issuer: /CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Certificate serial: 07
Authority key identifier: C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/E4645A48B48111EBBFF6E768F8AEA228.roa
Signing time: Fri 14 May 2021 06:59:14 +0000
ROA not before: Fri 14 May 2021 06:59:09 +0000
ROA not after: Wed 14 May 2031 06:59:09 +0000
asID: 328576
IP address blocks: 102.220.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Validity
Not Before: May 14 06:59:09 2021 GMT
Not After : May 14 06:59:09 2031 GMT
Subject: CN=609e1fc2-cdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:68:ed:30:8b:b0:d0:f5:ed:b4:33:f1:07:
40:01:27:de:69:40:78:b4:7f:a6:22:4f:a8:9f:1c:
cd:d3:53:12:55:3d:32:64:f7:4c:73:ff:66:81:be:
b6:08:f8:92:5c:b0:16:31:05:09:d9:17:91:6c:a5:
39:ee:ad:6f:80:69:d6:f3:40:5a:dc:45:91:04:60:
c0:60:f5:47:ff:78:20:83:5e:95:6a:a5:e6:bc:e8:
c3:47:bf:87:53:03:ce:07:59:3f:57:9c:ef:07:99:
61:e3:6d:a9:aa:13:60:35:e4:5f:91:ab:1f:4e:ea:
ed:08:a8:f4:94:6a:20:f2:08:52:46:c4:fc:50:26:
ce:69:3b:d7:f9:ba:12:c0:76:79:22:34:71:ab:2f:
01:21:8c:cb:23:6b:0c:85:05:42:49:a5:b3:ce:d6:
30:32:32:65:da:bd:5e:a8:6f:39:dd:d9:2b:45:aa:
ac:85:ea:9d:ab:69:4b:1a:ac:75:92:85:4e:63:7e:
6d:38:ed:c4:a6:03:7c:1e:aa:0f:87:dc:7c:02:7c:
d4:75:48:33:6f:1f:01:f8:61:be:96:24:4f:c1:a7:
7a:3b:5b:be:ca:3e:bf:ff:62:2e:3b:31:3b:fd:cf:
f2:76:23:71:92:4e:c5:8c:d0:ae:e3:19:02:e0:b5:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:26:BE:AD:55:5E:A2:24:9F:61:3D:81:3F:FD:A4:31:50:92:BE:CC
X509v3 Authority Key Identifier:
keyid:C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/E4645A48B48111EBBFF6E768F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.60.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:15:b2:76:1d:26:c2:9c:a8:2a:ac:a4:cc:48:41:2a:f6:70:
ce:97:35:64:f5:cb:61:0f:e5:15:e9:e5:83:cb:88:9a:32:28:
5d:16:3f:57:a9:3a:d0:89:5d:d0:24:af:e0:67:7f:87:58:3c:
61:41:26:ab:85:1a:cd:4c:22:f6:4f:63:03:89:ec:ef:77:5f:
43:3e:34:12:1b:93:a8:04:fb:d3:22:4d:97:24:4f:58:c0:23:
5c:07:f0:e3:69:0f:66:81:61:8c:48:2f:d5:2e:11:57:7d:f3:
e4:d4:99:af:6c:fe:2f:e2:05:0e:63:09:51:fb:2a:b7:54:d7:
8e:d7:76:9e:f7:f6:5c:b6:b5:56:48:a4:85:8c:3f:67:5e:d9:
74:74:16:c7:d4:a1:f3:db:e8:c6:ed:9e:92:3e:f5:a7:42:49:
0c:3d:50:08:a1:16:66:a0:b9:ef:91:99:e6:94:3a:1d:8e:d0:
6b:57:86:10:88:b7:c6:70:3c:97:28:7d:e2:e8:d1:ac:7d:f3:
29:4f:77:8a:73:65:d5:1d:af:d2:5c:5b:c5:8f:09:4a:66:31:
eb:d7:9a:5b:c3:98:c1:b4:4d:4d:23:ba:a9:2d:b9:42:ad:5f:
f4:45:62:d8:18:a5:99:ab:db:96:52:2e:30:94:38:a6:e1:63:
03:48:02:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org