Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/2D1A13AC524D11EE91FA15234AD9E6FC.roa
File: 2D1A13AC524D11EE91FA15234AD9E6FC.roa (raw, json)
Hash identifier: eqR6WmliKVMkHrGnYmTAmrbSivfpyxARxQP9FyocmIM=
Subject key identifier: 91:1F:A0:BD:05:C1:3D:AA:7D:8D:CD:07:3E:5D:45:F1:E8:88:8E:16
Certificate issuer: /CN=F3618B80AF/serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
Certificate serial: 05
Authority key identifier: 13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/2D1A13AC524D11EE91FA15234AD9E6FC.roa
Signing time: Wed 13 Sep 2023 15:49:52 +0000
ROA not before: Wed 13 Sep 2023 15:49:49 +0000
ROA not after: Fri 13 Sep 2024 15:49:49 +0000
asID: 37672
IP address blocks: 41.216.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 13 Sep 2023 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618B80AF/serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
Validity
Not Before: Sep 13 15:49:49 2023 GMT
Not After : Sep 13 15:49:49 2024 GMT
Subject: CN=6501da20-db10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:79:31:7a:80:47:b7:44:af:c7:1f:c3:84:
10:1a:a8:27:c9:80:6b:dd:e7:2b:43:ff:23:19:7b:
58:85:9c:41:e9:ad:d8:c2:50:fd:f1:8d:66:21:c3:
b8:75:97:28:49:65:4a:63:8b:d8:8e:8f:2c:3c:ef:
e8:33:76:b3:46:3b:38:3b:3a:19:5b:75:a2:0d:dd:
77:ea:07:b1:e3:f3:c0:8c:72:0c:1e:98:88:04:12:
de:72:78:b9:8b:e8:ff:c6:3e:58:bc:f4:3d:ae:8f:
93:74:f3:1e:91:c2:54:ed:f1:94:76:da:e5:09:ee:
1e:e8:bf:0e:71:e6:74:03:bd:70:75:2b:33:c0:1b:
0b:e9:28:74:0d:76:61:11:63:7b:c2:69:c6:18:99:
7d:73:b2:45:7f:0c:ba:5a:9b:63:42:26:dc:f5:02:
07:fa:db:2b:9d:5b:65:f8:bd:ca:96:17:04:19:f6:
83:2a:0c:84:ec:37:9b:91:88:fb:48:f6:e0:f5:07:
11:9c:78:c9:8b:fd:13:a2:be:88:d1:c2:29:ec:76:
ba:40:57:cf:8a:bc:bd:1c:57:8a:26:2d:52:2f:d0:
e4:e1:92:1f:61:43:7d:8a:8c:7e:3b:14:fd:99:0d:
86:8f:53:b0:68:ec:19:e3:a0:23:84:38:7b:1f:05:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1F:A0:BD:05:C1:3D:AA:7D:8D:CD:07:3E:5D:45:F1:E8:88:8E:16
X509v3 Authority Key Identifier:
keyid:13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/2D1A13AC524D11EE91FA15234AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.232.0/22
Signature Algorithm: sha256WithRSAEncryption
37:be:60:2b:3f:f1:57:ad:dc:c1:3b:2c:3c:be:26:a5:2a:e3:
b3:80:46:bf:76:b8:82:25:42:53:3a:a9:b3:32:04:1d:ff:80:
1d:1d:33:db:a1:b3:a0:ee:3d:99:80:00:8b:33:f8:1e:32:b6:
42:27:7c:45:84:94:23:bb:3c:06:05:e2:40:50:7f:0b:07:48:
cc:a4:54:0b:5a:9c:9b:d2:20:6a:fa:80:7e:c2:31:1e:8e:47:
e0:dd:32:2a:ff:a9:34:55:41:08:a2:e5:0e:4d:14:c9:e8:7d:
f4:b0:71:de:a0:aa:97:93:cf:93:2f:3d:fe:04:dd:25:13:8e:
5b:13:a9:c9:fa:2c:1e:43:8f:5c:4f:71:38:4c:1b:ae:23:44:
0d:ad:4f:d7:03:43:9f:f8:c7:69:9a:6b:8c:d4:40:0c:34:a5:
79:e7:e4:d4:a5:8d:2b:ae:14:03:49:41:04:02:ce:74:cd:2f:
3d:9e:88:bf:1c:73:48:f8:d5:bd:5b:c5:98:5b:11:73:0b:07:
89:c9:df:ea:0d:29:0e:dc:ca:86:3c:c8:98:eb:20:ee:35:03:
9f:ec:8b:30:50:21:45:fa:ab:ee:fa:2a:16:ac:44:92:14:e6:
70:47:7d:ae:0e:c2:74:ad:46:e6:1c:fa:4a:98:b8:73:de:e2:
12:13:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org