Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/E500E088314411EEADD5F43F4AD9E6FC.roa
File: E500E088314411EEADD5F43F4AD9E6FC.roa (raw, json)
Hash identifier: Iw2uo3Tm6zXhgvFTiZeqEUycUaVM3MiM8P2/6VZgQHE=
Subject key identifier: E1:63:01:B9:AF:A4:13:2E:79:28:31:BB:D7:39:F4:37:11:27:01:FC
Certificate issuer: /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial: 02
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/E500E088314411EEADD5F43F4AD9E6FC.roa
Signing time: Wed 02 Aug 2023 14:57:26 +0000
ROA not before: Wed 02 Aug 2023 14:57:23 +0000
ROA not after: Wed 31 Aug 2033 14:57:23 +0000
asID: 329083
IP address blocks: 102.215.222.0/23 maxlen: 23
2001:43fd:6000::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 11 Aug 2023 06:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Validity
Not Before: Aug 2 14:57:23 2023 GMT
Not After : Aug 31 14:57:23 2033 GMT
Subject: CN=64ca6ed6-6f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:07:31:e4:b7:ff:73:e8:3b:16:7d:b1:34:d4:
aa:30:16:d6:fc:53:80:52:86:ed:81:38:19:e3:fd:
10:97:2b:4c:46:00:bf:b8:d5:d6:6d:e4:af:ab:9d:
31:c6:24:6d:da:85:6e:cd:32:1e:95:5d:7d:49:52:
1f:8f:f9:35:2a:33:10:12:c4:ca:c7:40:8f:31:0b:
ff:00:1f:bb:42:62:0f:54:dd:1a:ff:eb:ef:82:de:
44:88:46:eb:02:df:ff:82:c9:f4:12:0a:74:c2:db:
aa:3f:3c:0e:af:6d:fe:63:cd:d7:be:f6:ca:e8:35:
bb:13:ba:bc:9e:de:14:72:bd:79:40:ec:f7:e7:bc:
d3:e4:f4:73:0a:6a:14:f6:2c:95:5f:d5:27:b1:20:
58:91:4c:41:4a:19:66:45:d0:46:31:d8:04:6e:a4:
ba:74:a1:9c:5d:e7:fa:10:da:35:2d:c8:2b:f6:f5:
df:69:40:83:05:88:16:3f:ff:2e:71:60:8c:6e:b2:
6e:e6:cb:8d:32:c6:68:8e:b8:6f:fc:f8:ee:db:49:
e8:de:86:e5:40:bc:56:65:69:77:20:a5:e6:32:4d:
94:a9:28:b8:5c:61:61:7a:04:b3:23:54:86:63:61:
28:17:7b:d0:13:43:fe:bf:24:3c:3c:a7:1a:ba:03:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:63:01:B9:AF:A4:13:2E:79:28:31:BB:D7:39:F4:37:11:27:01:FC
X509v3 Authority Key Identifier:
keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/E500E088314411EEADD5F43F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.222.0/23
IPv6:
2001:43fd:6000::/40
Signature Algorithm: sha256WithRSAEncryption
26:d1:1e:2b:63:cd:ff:64:18:6f:11:19:cd:b7:e3:9a:cd:52:
f8:c0:ce:fe:02:18:89:b3:43:47:e1:6c:d2:2b:18:9e:80:46:
9e:b4:fe:ae:68:cc:33:a9:2c:ed:35:cd:cb:2b:e0:f8:77:77:
70:9a:ad:d8:b3:ef:f6:e0:59:fe:60:82:37:23:37:8c:49:a2:
bd:9f:94:f3:bf:57:9a:32:75:e0:f1:0a:c9:66:1e:70:c2:af:
f3:62:a1:6f:ad:f4:b2:e3:73:c8:dc:c9:97:8e:00:94:88:05:
2a:55:cd:8a:94:35:d1:8c:8a:31:6a:11:62:19:dc:b3:ea:35:
4f:5f:f0:1e:f2:5b:d5:e3:fd:6b:79:f4:72:cb:f0:4c:89:b5:
ea:20:0e:c2:e1:b9:cd:00:c5:e5:18:73:e0:53:f5:05:ec:53:
b9:f5:53:a3:e4:89:24:31:90:a3:83:dd:46:73:5c:92:93:39:
5c:56:14:e4:fd:26:e1:ea:f9:27:da:ec:05:a1:7b:fe:06:e3:
2e:94:ef:de:0b:00:25:ac:ed:53:30:3c:6c:1f:f8:e1:a4:19:
f7:48:cf:a8:f0:1f:6e:32:bd:cf:1a:8c:55:36:c4:09:66:4e:
35:3e:43:d6:47:eb:94:6a:4c:6d:57:e8:a3:ae:ac:61:5d:53:
a1:3d:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org