Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/7BEB4622AA2311EDA1C18CE9F1222468.roa
File: 7BEB4622AA2311EDA1C18CE9F1222468.roa (raw, json)
Hash identifier: Ncg7tkDmudOjGlR5voZ1gcSqB5oC5UD0f843pNIp6jA=
Subject key identifier: 99:99:1B:B6:A7:17:04:FA:32:42:AA:EA:6D:42:0C:66:75:BD:32:3D
Certificate issuer: /CN=F36B665CAF/serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
Certificate serial: 02
Authority key identifier: 2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/7BEB4622AA2311EDA1C18CE9F1222468.roa
Signing time: Sat 11 Feb 2023 15:48:10 +0000
ROA not before: Sat 11 Feb 2023 15:48:06 +0000
ROA not after: Sat 05 Feb 2033 15:48:06 +0000
asID: 328734
IP address blocks: 102.222.144.0/22 maxlen: 32
Validation: Failed, certificate revoked on Sat 11 Feb 2023 16:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B665CAF/serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
Validity
Not Before: Feb 11 15:48:06 2023 GMT
Not After : Feb 5 15:48:06 2033 GMT
Subject: CN=63e7b8ba-6288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:42:2a:d5:27:ff:44:ca:3f:d8:87:f5:17:
bf:0b:37:c0:1c:89:50:70:74:ec:e5:a6:be:ed:bd:
20:d3:4f:6e:57:97:cf:c0:0f:2a:fd:e4:b1:98:16:
a7:12:42:55:c5:2c:7a:68:47:08:2b:c9:60:46:be:
73:7d:ef:1d:1d:81:47:71:05:ee:b6:c6:a6:e6:c4:
4a:0d:87:61:ee:ed:f0:11:14:7b:dd:5c:e7:d2:1f:
f2:96:b7:73:97:b4:02:c8:8c:a5:3d:c5:6c:54:46:
f9:34:80:db:1a:f4:ee:7c:db:12:ab:39:3a:fd:f8:
94:14:a5:27:74:36:1f:06:23:4b:43:55:50:c8:87:
fa:7a:10:75:7b:65:b5:db:41:f0:a3:a0:11:cd:f5:
b1:d3:dc:e2:b0:fb:a9:62:d8:78:5c:f8:46:da:c9:
26:2c:ea:aa:b5:6a:13:2f:66:b3:2a:7e:64:73:e6:
28:54:e9:8c:cb:c4:14:d9:ce:fa:4f:de:04:d3:14:
5e:1a:de:3e:bb:46:15:c0:9c:ae:3c:37:d7:f3:79:
85:5f:d4:25:9a:2a:ea:9e:80:f1:f5:6b:62:58:ff:
4b:ba:07:2a:74:7a:ef:1b:63:6b:40:b9:41:a7:64:
a0:4c:2a:99:f2:8b:52:17:ab:ea:86:a7:7c:00:f9:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:99:1B:B6:A7:17:04:FA:32:42:AA:EA:6D:42:0C:66:75:BD:32:3D
X509v3 Authority Key Identifier:
keyid:2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/7BEB4622AA2311EDA1C18CE9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.144.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:64:f8:27:80:0e:92:bf:dc:90:30:02:e0:8c:6a:21:fc:c9:
9f:fc:7a:f8:34:f6:28:a0:09:fe:22:9c:d7:8e:cb:49:f2:dd:
b1:b7:bc:cc:7a:5f:fa:72:a6:8b:57:2f:91:91:5b:99:84:a9:
43:62:b4:05:02:7d:99:66:76:e7:55:a8:51:94:c1:8f:55:99:
5f:fe:70:22:38:3b:6c:f9:0c:4c:c6:f6:3c:f2:0d:af:3f:ad:
9b:f3:17:2a:60:d2:91:c4:33:ba:4c:e6:a2:23:32:43:e8:09:
4f:ff:8a:3a:b7:fe:93:8e:fb:6e:87:a9:49:36:21:3b:49:2f:
90:47:6d:53:42:e5:13:89:c0:72:45:c9:47:b4:9f:7e:4b:ac:
56:da:9e:46:19:ef:17:29:23:c0:2c:68:ab:47:9d:1b:b0:a6:
c0:94:9e:8b:1a:bb:26:43:b8:84:11:62:4d:1b:30:6d:9d:5c:
f3:e2:40:4f:65:80:bb:c1:a5:a8:03:66:d6:5a:53:26:5c:0e:
bf:78:ab:c1:6a:72:3e:78:b4:3a:31:30:c5:b0:b5:7f:f7:12:
6d:76:dc:a3:76:31:8c:8e:c3:2e:1e:62:ec:63:cf:f7:9a:d8:
e5:38:1e:44:8e:8f:56:98:46:e0:d0:9c:29:dd:bb:37:6d:c7:
5a:64:bc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org