Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/944C39D248E011EDA678F49EF1222468.roa
File: 944C39D248E011EDA678F49EF1222468.roa (raw, json)
Hash identifier: DIU9kU7rUCilSurGd28BCyi2CArZArQmnP3lDv3NTT8=
Subject key identifier: F2:2E:50:37:B1:2A:2B:87:E1:5C:58:DB:2B:95:E3:DA:6E:AA:A0:99
Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial: 02
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/944C39D248E011EDA678F49EF1222468.roa
Signing time: Mon 10 Oct 2022 21:14:52 +0000
ROA not before: Tue 11 Oct 2022 21:14:48 +0000
ROA not after: Wed 31 Dec 2042 21:14:48 +0000
asID: 328977
IP address blocks: 102.217.156.0/23 maxlen: 23
102.217.156.0/24 maxlen: 24
102.217.157.0/24 maxlen: 24
102.217.158.0/23 maxlen: 23
102.217.158.0/24 maxlen: 24
102.217.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Oct 2022 04:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Validity
Not Before: Oct 11 21:14:48 2022 GMT
Not After : Dec 31 21:14:48 2042 GMT
Subject: CN=63448b4b-b6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:ee:fb:e3:f7:53:97:a5:92:b0:66:c3:20:
7d:e9:02:9b:ae:db:78:8f:c7:35:2b:8d:99:98:b8:
02:f2:ba:aa:1b:39:c3:9f:cc:15:b8:ce:9e:a4:77:
67:84:c9:78:1a:c3:cb:be:5a:61:e8:8d:b1:45:9f:
c2:6d:38:94:7b:24:b4:03:85:77:d0:3b:70:ab:a4:
64:69:b7:dc:11:97:5a:b4:ff:64:8f:eb:fb:14:23:
e6:ae:7e:3b:4e:c6:fe:c4:eb:47:af:99:7d:91:1e:
8a:e8:1b:25:4f:47:e2:2e:fa:00:e9:35:ea:f5:b3:
3b:0a:db:01:c5:7b:7c:e1:60:31:b2:81:ae:e9:07:
91:bd:52:b4:f6:b1:98:c0:f2:fe:4c:b3:95:9a:4e:
bc:c5:a3:d0:ea:23:20:7d:4a:0b:c8:a7:fa:a6:9b:
52:21:39:5c:95:38:20:a3:94:02:46:17:f9:1c:54:
0c:78:c2:aa:d4:05:23:f3:23:0d:e7:33:a2:dc:e0:
46:91:cb:fb:05:a0:64:37:9b:81:e2:09:49:90:71:
16:ae:36:66:e9:92:45:5b:f7:c2:4a:10:5c:c0:98:
ee:f6:57:af:f2:3c:9c:ce:0b:a0:85:94:8e:4a:08:
b8:59:df:37:10:cd:eb:72:db:7b:81:22:18:4d:f4:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:50:37:B1:2A:2B:87:E1:5C:58:DB:2B:95:E3:DA:6E:AA:A0:99
X509v3 Authority Key Identifier:
keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/944C39D248E011EDA678F49EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.156.0/22
Signature Algorithm: sha256WithRSAEncryption
77:7d:3a:3d:b7:00:49:09:84:be:e4:37:23:24:49:d5:67:b7:
3a:2f:01:97:bb:46:88:43:ea:f0:4f:d7:95:5f:7c:8e:87:c4:
04:f7:0d:80:74:a0:52:83:b0:f0:b3:40:ff:28:71:9b:ae:9d:
35:a6:2d:f9:49:3a:34:60:5f:20:f7:73:07:af:1d:b1:68:83:
2a:4a:94:d8:c7:8b:f7:b8:4c:00:d3:49:02:04:6a:b4:f3:ad:
6c:4b:ce:46:9b:c7:03:39:90:5e:8f:6b:1e:fa:a9:ef:9c:d5:
a9:4b:f1:99:a7:ee:b4:01:85:94:63:89:db:f6:eb:bc:03:3f:
0d:1a:99:39:43:b0:e8:f8:7e:18:67:a0:0b:6f:a3:d2:a2:df:
a8:2d:bb:3c:d3:9f:2c:53:4b:81:2b:49:6f:7d:59:b6:1c:81:
79:2f:5e:a7:c5:89:ac:f6:ec:0c:4c:7a:bc:4d:cf:81:00:4b:
ed:f0:1e:d9:11:ed:e4:bf:12:de:5a:6e:74:e4:ae:24:aa:39:
7d:ff:d3:2e:db:a3:55:51:9e:28:9d:9d:bb:b5:59:b4:8a:30:
15:0b:de:06:f8:95:73:02:0f:1c:bb:65:61:73:38:6d:02:82:
93:bb:3b:79:e5:d4:e4:42:d4:c2:87:35:03:3b:67:32:2c:4c:
b6:ed:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org