Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/81AC8ABECF6711EB84BB2D27F8AEA228.roa
File: 81AC8ABECF6711EB84BB2D27F8AEA228.roa (raw, json)
Hash identifier: zeJ5+BFHA2Dr4mxmKqy/8bFIgqrab7TgjbeN5w+Zewk=
Subject key identifier: 82:A9:3A:B2:EA:A3:75:96:FB:E5:2E:55:A0:D9:1F:C1:C3:79:BA:5C
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 02
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/81AC8ABECF6711EB84BB2D27F8AEA228.roa
Signing time: Thu 17 Jun 2021 12:28:23 +0000
ROA not before: Thu 17 Jun 2021 12:28:17 +0000
ROA not after: Wed 31 Dec 2031 12:28:17 +0000
asID: 327901
IP address blocks: 102.141.128.0/18 maxlen: 23
102.219.116.0/22 maxlen: 23
102.220.148.0/22 maxlen: 23
102.221.120.0/22 maxlen: 23
102.222.168.0/22 maxlen: 23
196.201.232.0/21 maxlen: 23
Validation: Failed, certificate revoked on Wed 24 Aug 2022 15:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Jun 17 12:28:17 2021 GMT
Not After : Dec 31 12:28:17 2031 GMT
Subject: CN=60cb3fe7-eea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:49:4c:c3:42:99:0f:cf:75:a9:9c:4e:3d:
43:2f:fc:a4:31:12:57:12:c8:b7:83:43:f4:b4:a5:
2c:41:63:fb:9d:85:d6:64:d6:3d:a1:04:e0:bd:91:
7f:d6:3d:69:47:4c:2f:79:f2:76:8a:e1:22:24:ce:
5a:32:81:a0:13:ba:81:5c:f1:dd:4f:b2:1b:52:2a:
39:fc:e8:f6:51:bc:d0:b7:4c:e9:72:79:42:0e:ea:
1f:77:a8:ea:a7:ca:58:82:95:3f:ec:c7:80:08:5a:
59:4b:3b:c0:ef:cb:c1:93:bc:21:d4:64:ef:21:43:
7d:b6:a8:15:e0:ed:57:a6:81:68:44:b8:9b:d6:c3:
b7:13:fd:1b:94:b0:9f:27:b5:6d:ae:35:fc:85:72:
31:42:1b:9e:c1:77:78:53:6c:47:25:4b:9d:84:50:
98:6e:f5:36:60:64:e1:fb:c3:c2:0e:e5:fd:7e:56:
6c:4d:84:77:d7:cf:56:1d:0e:8f:85:e5:0d:b7:61:
8f:98:8c:fb:8b:9e:7f:61:b0:95:45:3a:3f:8c:4c:
90:91:44:73:a6:9b:18:7b:f8:a2:62:d7:dc:c8:94:
b8:ef:76:a3:3d:39:fd:b4:19:fb:12:6c:2a:d2:1c:
d8:ec:7d:d1:a9:a4:75:32:25:e6:af:85:0f:6e:95:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:3A:B2:EA:A3:75:96:FB:E5:2E:55:A0:D9:1F:C1:C3:79:BA:5C
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/81AC8ABECF6711EB84BB2D27F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.141.128.0/18
102.219.116.0/22
102.220.148.0/22
102.221.120.0/22
102.222.168.0/22
196.201.232.0/21
Signature Algorithm: sha256WithRSAEncryption
76:74:d8:56:e7:2b:8b:35:52:80:65:19:27:d8:00:96:07:c4:
58:80:78:6d:1a:9e:ce:42:df:02:58:d6:b3:06:c6:58:37:f2:
9d:4c:f4:15:a9:58:53:ae:1f:f1:ca:89:51:08:65:b8:03:af:
94:ec:a6:88:fc:26:c9:f2:47:2e:17:6d:e9:6a:a7:12:56:52:
5c:cc:1e:fe:ec:c5:3a:5a:66:cd:8a:1b:1b:fe:37:d3:98:b2:
4c:9e:06:3a:9b:60:8f:95:8b:e1:69:5f:62:10:01:84:1a:da:
e3:7a:0c:9f:de:5d:d2:32:0d:75:68:1e:e8:34:d6:bb:5b:15:
c7:8c:3c:88:5a:f9:3b:bf:a2:fa:3f:48:10:b4:59:6f:05:b1:
4c:da:ff:86:45:d7:2c:e1:1d:f6:e5:2c:04:8d:db:ec:20:76:
a8:06:33:5f:37:d1:ae:6c:7c:08:49:ce:87:4a:a4:08:68:48:
2c:c0:ae:d3:5f:69:85:c3:f7:3f:9c:37:64:a8:b0:a9:97:66:
37:a7:63:6c:7f:fc:4a:95:bf:fd:e2:13:e1:63:b0:12:23:b3:
63:79:43:75:b8:90:de:e6:e7:94:a1:cb:fb:4a:75:d0:35:7d:
b3:b0:74:43:e2:74:f2:0f:10:91:80:1c:f2:f4:dc:fc:c3:46:
50:2c:0b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org