Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/1470671E51AC11EC9BB0DD23D8A014CE.roa
File: 1470671E51AC11EC9BB0DD23D8A014CE.roa (raw, json)
Hash identifier: s9VA0K4zcs3YXNcZ3qyY1nLyoHeUhYuZU98oUy16apg=
Subject key identifier: 7E:31:5A:2F:DF:90:05:8A:63:6A:DC:77:E6:53:79:E3:3E:92:E6:4A
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: B9
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/1470671E51AC11EC9BB0DD23D8A014CE.roa
Signing time: Tue 30 Nov 2021 07:06:46 +0000
ROA not before: Tue 30 Nov 2021 07:06:42 +0000
ROA not after: Sun 30 Nov 2031 07:06:42 +0000
asID: 327901
IP address blocks: 102.217.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Aug 2022 15:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Nov 30 07:06:42 2021 GMT
Not After : Nov 30 07:06:42 2031 GMT
Subject: CN=61a5cd86-a71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:d3:8f:01:d2:b1:c1:d9:01:b2:7c:a6:44:
b6:8f:4c:14:7e:eb:c9:65:dd:af:b6:a8:77:03:d0:
fd:15:e8:47:a5:49:d8:62:b2:59:24:da:b8:45:61:
be:f7:8b:eb:2e:db:d7:35:42:24:d2:63:c6:f2:7b:
46:f4:59:48:46:40:9d:4e:ed:2f:ad:66:0c:7b:b1:
1e:69:21:ae:81:7b:d3:3f:e8:8b:8f:40:de:27:37:
bf:66:e4:78:5b:34:ef:09:f4:4a:0b:b2:0c:ba:dc:
83:3c:2a:80:1e:2b:d5:a7:c2:bf:37:27:1e:eb:3a:
d1:d2:15:69:de:c0:e6:80:69:08:c0:bf:c1:e7:67:
4d:7c:14:04:26:db:51:a8:b8:a7:da:76:ff:51:99:
6d:2c:c3:10:a0:b3:88:ea:df:a9:61:95:4b:9e:f5:
49:c8:42:b5:31:14:eb:39:24:87:44:87:d5:3f:0d:
fa:4a:21:8b:86:6b:f1:6f:d4:00:ee:44:5a:9d:f7:
72:4d:50:f7:a4:d8:29:58:42:3e:56:a6:f8:f6:fa:
64:07:1a:9b:c3:c9:67:e6:c2:64:2a:09:31:00:c3:
7e:e5:34:d7:b0:f6:8f:d1:32:4f:11:f8:7d:af:e1:
9a:f7:99:97:88:9f:98:b6:94:54:a0:ca:e0:33:22:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:5A:2F:DF:90:05:8A:63:6A:DC:77:E6:53:79:E3:3E:92:E6:4A
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/1470671E51AC11EC9BB0DD23D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.108.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:f5:3d:b3:a6:3a:89:7d:d5:f4:de:69:ce:d2:d6:4c:a4:f4:
a4:40:f4:bb:f1:67:27:b7:a0:be:02:52:17:1c:3a:f8:81:4a:
0d:7a:3b:76:3e:96:2a:ce:36:2d:f1:47:5e:94:42:32:1b:58:
ec:06:73:e4:a4:cd:bd:c7:fe:b8:9a:52:f8:59:68:3b:99:cc:
d3:fe:84:bc:33:57:6d:70:31:ca:d8:7e:ca:0d:de:fe:b5:63:
ff:53:3f:57:77:37:7b:fd:77:3e:29:6b:e3:b4:0a:91:68:10:
35:3c:52:84:33:1a:f5:73:47:26:42:57:ec:2c:34:56:f3:a8:
8e:e0:82:90:1f:43:d4:cc:24:d1:27:3b:74:95:48:b5:b2:90:
82:21:c0:49:65:a7:87:ed:98:d4:dc:d4:a5:dc:19:46:56:0c:
66:c9:1d:9d:76:a5:2f:13:16:d6:bb:0a:ed:b6:35:9f:77:d5:
99:72:3b:09:9f:39:6b:72:9b:b6:7b:3c:8b:57:fe:90:c1:0a:
a5:c8:49:6a:01:5e:11:4d:22:89:30:15:25:30:ac:4a:02:41:
d1:1c:7e:46:a6:17:36:ce:f8:18:34:e5:90:be:7c:37:73:2d:
96:0a:32:28:39:b8:48:83:f8:e1:d4:41:e6:8e:d7:6f:f2:d7:
0a:61:fb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org