Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/3F39C7D60E6911EDB62CCDF1F1222468.roa
File: 3F39C7D60E6911EDB62CCDF1F1222468.roa (raw, json)
Hash identifier: rsbuwOxJnG5hNO5LjwRkxXEKq6WwDnGK3bEzoY/XbE0=
Subject key identifier: F1:DB:14:8D:02:FB:54:61:AD:E7:C9:9F:01:44:80:CA:6A:80:FE:16
Certificate issuer: /CN=F36E33CDAF/serialNumber=4E26DB1FBCBCBFE7585FCE128079D5EF91DF8F5E
Certificate serial: 02
Authority key identifier: 4E:26:DB:1F:BC:BC:BF:E7:58:5F:CE:12:80:79:D5:EF:91:DF:8F:5E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/3F39C7D60E6911EDB62CCDF1F1222468.roa
Signing time: Thu 28 Jul 2022 11:34:31 +0000
ROA not before: Thu 28 Jul 2022 11:34:28 +0000
ROA not after: Mon 28 Jul 2025 11:34:28 +0000
asID: 328621
IP address blocks: 102.223.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E33CDAF/serialNumber=4E26DB1FBCBCBFE7585FCE128079D5EF91DF8F5E
Validity
Not Before: Jul 28 11:34:28 2022 GMT
Not After : Jul 28 11:34:28 2025 GMT
Subject: CN=62e27447-cea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:8a:a4:10:4a:21:72:e3:61:14:f4:1d:33:
2c:64:dc:11:b3:10:af:b6:47:4e:89:94:f9:90:55:
a5:02:aa:dd:eb:42:33:04:07:97:24:34:df:b2:af:
f0:82:fb:21:9b:77:c9:05:05:13:8f:62:f2:8f:a8:
c9:ae:85:71:07:cf:d1:c8:c3:6a:de:0f:a9:e7:61:
e9:db:ab:9d:d9:c0:1c:2a:08:9d:13:6e:fb:7c:16:
fe:28:1d:a0:00:4d:af:4d:81:56:dc:77:ef:06:5c:
8d:76:b7:d3:9d:d5:4c:90:e9:a5:37:6d:db:a3:cb:
33:1b:5e:21:41:ed:75:e1:f9:f9:93:3f:b4:c0:13:
5a:51:11:86:41:3c:4f:5e:fc:ef:47:94:5e:b4:ec:
ae:0d:9e:ed:c6:6f:2d:fa:8c:60:d8:16:26:d4:03:
7c:13:a5:35:6e:34:09:15:f1:83:b5:ff:33:02:3e:
04:f8:ea:5b:68:43:db:a0:b6:08:72:cf:8e:36:3f:
8e:d6:07:2e:82:32:ae:ca:08:59:41:5b:14:b5:e9:
3c:25:e7:ee:29:0d:b8:b4:07:7a:5a:81:ba:16:e6:
50:3f:8c:f7:3b:1e:d5:b8:42:33:70:2b:ea:6f:cf:
68:9d:45:08:52:7b:b1:67:77:f4:00:b5:b2:86:2b:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:14:8D:02:FB:54:61:AD:E7:C9:9F:01:44:80:CA:6A:80:FE:16
X509v3 Authority Key Identifier:
keyid:4E:26:DB:1F:BC:BC:BF:E7:58:5F:CE:12:80:79:D5:EF:91:DF:8F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/3F39C7D60E6911EDB62CCDF1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.236.0/22
Signature Algorithm: sha256WithRSAEncryption
87:1f:d8:aa:25:b7:00:8a:73:ab:be:56:70:5c:59:0e:13:93:
e9:0d:fe:8c:53:0f:e8:de:86:6d:b1:5a:95:5b:29:be:25:f4:
c5:ae:80:26:21:66:48:5c:1a:17:b8:45:d5:83:af:69:f9:c3:
5d:66:24:b6:c3:a4:e0:09:99:33:e9:45:e1:74:dc:05:98:c5:
86:57:8e:51:86:ef:67:33:ea:49:97:f9:55:a1:b7:2e:4d:e6:
8f:73:4c:33:5c:00:bd:c9:8a:2d:c4:33:75:cd:56:fb:79:ea:
2d:3d:1c:8c:c5:57:b0:55:94:c7:fd:b8:03:a3:11:05:29:1a:
00:b4:e8:04:0a:f1:67:c3:b1:ae:6c:81:25:f9:53:4c:99:33:
2c:01:d7:b0:42:f0:a8:52:ab:30:c3:4f:a3:72:66:56:e7:c0:
a5:54:75:58:df:55:53:fb:b3:58:fd:90:0f:51:d8:76:d5:b7:
1b:34:ea:74:24:9b:19:3a:58:27:c0:0f:68:81:a3:4a:e0:19:
c1:a2:99:ce:64:0d:72:af:f2:56:ff:3a:69:b5:96:84:d6:1d:
c6:c4:e3:31:e9:11:09:44:f3:c5:ce:b5:c8:a1:73:32:95:b6:
04:ff:b3:f3:78:a4:72:26:a7:3f:d8:1c:08:e8:e8:fa:52:2b:
76:e0:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org