Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/33B997380EAE11EEA67CE6834AD9E6FC.roa
File: 33B997380EAE11EEA67CE6834AD9E6FC.roa (raw, json)
Hash identifier: dFlFcJTyxg36fDNuXWxUImPwN+ePysVj/ubvYjfC8JA=
Subject key identifier: 76:E9:F3:D4:BB:F3:D9:48:2F:C0:C8:7B:51:4F:B5:75:E8:25:C3:FC
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 014E
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/33B997380EAE11EEA67CE6834AD9E6FC.roa
Signing time: Mon 19 Jun 2023 14:33:05 +0000
ROA not before: Mon 19 Jun 2023 14:33:01 +0000
ROA not after: Sun 19 Jun 2033 14:33:01 +0000
asID: 329063
IP address blocks: 2c0f:7680:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 25 Mar 2024 13:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF
Validity
Not Before: Jun 19 14:33:01 2023 GMT
Not After : Jun 19 14:33:01 2033 GMT
Subject: CN=64906721-d1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:06:4e:e7:a5:c1:6d:e7:56:79:b7:39:75:
0d:40:68:a0:c9:dc:af:53:df:d9:4b:a9:78:1e:93:
fa:7f:79:20:c6:86:d2:16:78:33:9d:30:f8:41:51:
8b:1d:03:f5:da:e8:72:5f:95:39:d0:15:11:1f:9c:
b6:91:36:d7:6c:de:67:c0:65:bb:48:71:43:eb:02:
c4:a3:1c:6d:7a:eb:3b:0a:0a:08:69:2b:6b:ff:ec:
ef:87:1e:8e:6b:15:52:2b:4f:1e:2d:0e:21:2b:b6:
9b:16:8f:c5:ab:56:b3:ef:f9:1c:20:8f:75:eb:6b:
0a:af:47:08:9d:5b:e8:2f:31:ef:86:18:9a:12:0c:
3e:4c:e0:57:b7:da:bf:e4:5b:07:5c:ec:ea:48:bd:
a1:b3:f0:76:98:db:3d:f3:dc:c4:63:56:05:ad:b7:
45:f0:11:1b:57:fc:ec:dd:07:ff:ae:bb:f8:2f:e2:
61:7d:91:ed:ac:c7:a9:fb:5a:87:27:48:30:37:1f:
8a:a4:7d:ef:a0:f6:84:ea:4a:a4:ba:9c:da:c7:c1:
dd:3f:0e:87:60:58:c0:87:85:15:ce:d7:50:8c:bd:
f9:a8:c9:c0:70:ad:dd:fd:3b:b2:95:6f:fc:d8:d2:
58:1f:01:a2:2b:36:b5:92:21:12:7f:11:d1:70:5a:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E9:F3:D4:BB:F3:D9:48:2F:C0:C8:7B:51:4F:B5:75:E8:25:C3:FC
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/33B997380EAE11EEA67CE6834AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7680:2000::/36
Signature Algorithm: sha256WithRSAEncryption
48:fe:0b:9e:e7:cd:30:f4:3d:da:78:04:ee:df:e7:6e:4d:57:
00:16:26:45:1e:7e:2c:8f:73:12:c9:21:ba:46:60:ff:c8:82:
ca:18:b2:df:27:0f:eb:f3:46:7b:84:fb:2b:aa:98:d4:6a:55:
46:cd:ea:a9:09:ea:f0:9d:71:93:85:15:96:fb:7c:8a:db:89:
d1:7e:53:5e:00:a3:24:23:af:6d:d0:aa:b5:cb:08:12:ea:85:
e5:a4:d0:6a:08:5c:d0:f2:ae:f4:bb:1e:ff:a3:42:84:37:5f:
ed:81:5f:27:67:bd:34:10:d1:fa:cf:62:1f:7f:f7:08:5a:fb:
eb:4d:cf:d8:2c:ca:fb:1f:37:58:59:4c:53:f1:e9:53:02:e9:
1d:d3:6d:56:d6:0b:fa:d2:b8:79:3d:2c:f7:a5:0d:46:e5:2a:
16:31:fc:7b:dd:06:38:2a:75:32:95:8b:3b:1b:bc:ae:fd:80:
a6:b0:2f:e9:eb:4c:e0:25:00:67:3f:43:77:b4:82:7a:23:10:
f8:94:64:8d:45:11:0c:0a:6b:9d:8a:73:73:8b:c5:93:f4:9c:
07:51:ea:a8:45:37:f5:9c:33:01:10:17:78:f5:53:e0:eb:33:
d3:04:60:5c:82:76:d0:ca:df:6c:46:c7:1c:23:b9:9f:3a:c1:
40:aa:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:55 2025 by rpki-client