Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/C07D7078099011EDA78F118EF1222468.roa
File: C07D7078099011EDA78F118EF1222468.roa (raw, json)
Hash identifier: GrC3XwXEeZ+EP516DdQN4JF3YVH3aGAp/UXoriS0XMc=
Subject key identifier: D5:7F:6B:E7:C8:EE:24:FF:8C:FE:03:E8:32:8F:07:2A:8F:DA:31:B9
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 01A6
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/C07D7078099011EDA78F118EF1222468.roa
Signing time: Fri 22 Jul 2022 07:34:43 +0000
ROA not before: Fri 22 Jul 2022 07:34:37 +0000
ROA not after: Fri 31 Dec 2032 07:34:37 +0000
asID: 327901
IP address blocks: 102.216.196.0/22 maxlen: 24
102.217.200.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Jul 22 07:34:37 2022 GMT
Not After : Dec 31 07:34:37 2032 GMT
Subject: CN=62da5313-f384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:5a:d9:40:a9:f0:ee:6a:11:70:30:ea:2c:
81:0d:97:92:8e:be:e2:17:65:60:82:51:8c:f0:67:
5c:0e:1b:ff:81:ed:ff:39:54:81:3d:77:0b:70:3e:
9b:08:e3:ef:63:6f:fe:51:d3:b9:3d:d9:f3:79:43:
3d:50:7e:3e:30:6c:8b:e3:59:96:4f:aa:27:97:7e:
1c:ce:fd:27:52:9e:fd:59:61:84:c4:45:56:7d:1a:
02:b7:4e:92:17:03:9a:b3:75:ed:64:3e:53:e9:77:
74:23:b6:d8:cc:d9:5e:bc:69:da:bb:0b:8a:0d:eb:
32:c1:18:aa:d9:40:a5:04:1b:9a:0b:8c:f0:27:dc:
de:1e:a0:42:aa:43:7d:4d:09:86:3c:69:50:b9:f4:
44:b6:cf:97:b8:ca:b9:61:9e:4f:2f:43:5b:d5:c8:
25:af:46:3f:70:51:f1:55:0f:6e:1f:a6:3a:5f:75:
5c:e1:68:b2:c6:af:0e:f8:8b:06:cd:26:91:0e:45:
b6:0c:68:21:2d:5e:a3:ad:aa:1d:05:36:10:2d:02:
b3:1d:22:62:d4:cb:e4:9d:62:6d:3e:4f:a7:31:64:
23:5c:7b:94:65:d7:30:57:38:25:4b:ec:1b:3b:83:
d7:52:5d:35:1c:47:81:79:b6:a2:fb:f1:22:af:3e:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7F:6B:E7:C8:EE:24:FF:8C:FE:03:E8:32:8F:07:2A:8F:DA:31:B9
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/C07D7078099011EDA78F118EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.196.0/22
102.217.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:17:29:26:0a:78:48:62:5c:b2:c0:3a:f7:3b:c8:eb:84:a9:
e4:47:6b:5c:f6:03:55:9c:97:e4:78:c8:c1:f4:f5:43:33:90:
b6:4d:17:95:d3:05:6f:e9:72:70:b2:18:48:45:74:d0:85:1d:
24:0e:68:ec:cb:e9:5a:fb:95:0b:6b:c6:56:64:5e:aa:df:5d:
84:c4:12:bf:ad:a4:c5:36:ab:f9:81:27:76:33:51:74:89:7f:
21:c6:ed:29:98:70:54:56:77:18:4b:10:b4:35:6b:4b:be:ec:
cc:e9:86:30:5f:46:05:8c:e7:9e:7c:f6:e3:a1:5e:ed:fa:4e:
25:47:31:b0:f8:35:24:3e:eb:38:db:24:67:ee:ea:7f:9e:a0:
37:e9:e2:3b:60:f8:5c:88:4c:05:dd:82:83:be:a2:77:af:d9:
e6:b2:53:a8:46:c9:28:7d:dd:90:a1:8e:22:8b:21:4d:be:12:
02:92:ad:cc:14:8b:e5:68:3f:bb:a5:3a:a3:33:57:88:fb:77:
a8:e5:e3:1a:1d:1d:df:16:bf:f4:93:d8:16:ac:04:7f:a2:3e:
d9:d6:71:29:87:1c:a0:fd:18:8c:40:78:e4:a1:08:bf:cc:3c:
4c:c2:18:b4:c9:90:a3:b3:a3:11:7d:8c:1f:66:4c:2c:74:5d:
a0:1d:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org