Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/B60CC64A526711EE8FEF37744AD9E6FC.roa
File: B60CC64A526711EE8FEF37744AD9E6FC.roa (raw, json)
Hash identifier: grJtasaoMRC9YbRucMd8GPdEZ5IILcQeSZYMJiO++KM=
Subject key identifier: 03:1A:D3:3F:95:3B:63:7D:2F:BE:98:C9:7F:8C:F5:87:2B:4F:2B:73
Certificate issuer: /CN=F3618B80AF/serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
Certificate serial: 07
Authority key identifier: 13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/B60CC64A526711EE8FEF37744AD9E6FC.roa
Signing time: Wed 13 Sep 2023 18:59:48 +0000
ROA not before: Wed 13 Sep 2023 18:59:45 +0000
ROA not after: Fri 13 Sep 2024 18:59:45 +0000
asID: 37672
IP address blocks: 41.216.232.0/24 maxlen: 24
41.216.233.0/24 maxlen: 24
41.216.234.0/24 maxlen: 24
41.216.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Sep 2023 19:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618B80AF/serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
Validity
Not Before: Sep 13 18:59:45 2023 GMT
Not After : Sep 13 18:59:45 2024 GMT
Subject: CN=650206a4-ca4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:e3:96:b0:f3:6c:e0:5c:25:46:60:6a:88:
6f:12:5f:59:d7:a2:db:ff:2a:bd:17:5e:38:ce:8d:
7b:d4:1b:1e:4c:ea:1e:a4:67:e9:b7:11:e8:15:b1:
ae:a6:bc:22:7e:94:42:e8:9b:73:f2:bb:27:2a:86:
7d:65:d1:c9:12:fd:f4:95:da:c5:03:ef:24:74:ed:
5b:68:ce:5c:90:5d:e2:e5:78:69:d1:e0:64:44:e9:
dc:16:84:c5:94:e9:f8:78:c9:e3:6b:06:29:53:d0:
d3:f2:b8:e1:b6:44:1e:9b:4c:8e:27:f4:50:09:37:
10:a3:14:b7:50:29:0e:42:e9:a3:de:95:64:aa:c1:
b9:fc:ac:9f:42:0b:7f:74:dd:b8:31:de:09:4d:3a:
b5:05:e4:00:47:b4:1d:38:4a:f5:37:09:63:30:01:
9f:5c:36:19:c7:e0:55:75:cf:59:ab:e7:20:ec:99:
68:ba:ba:de:f7:7f:1f:cc:c4:00:c2:df:04:5d:89:
d3:59:1f:dd:3b:ad:77:28:7a:05:ea:7c:13:9e:03:
ec:74:5a:e5:f2:52:ae:5b:0f:e2:a8:03:3b:5e:a7:
5f:49:df:58:8e:ca:f0:b5:46:47:c3:42:ee:22:ec:
95:39:7d:64:25:8d:18:73:ae:1a:7f:99:08:34:f6:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1A:D3:3F:95:3B:63:7D:2F:BE:98:C9:7F:8C:F5:87:2B:4F:2B:73
X509v3 Authority Key Identifier:
keyid:13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/B60CC64A526711EE8FEF37744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.232.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:49:eb:85:62:b4:1d:04:05:33:1e:d8:c1:b5:4f:2a:54:56:
d9:95:38:59:72:0d:a4:7e:20:a5:3b:59:b0:b5:c5:32:72:c9:
e5:85:2c:90:20:81:ea:5e:06:32:a7:79:29:75:fa:ab:e2:47:
f7:f9:fb:19:ec:85:8b:19:10:ba:7e:ca:9a:01:6c:cc:98:c0:
72:90:e2:cc:29:2b:f7:42:5f:5b:5d:d6:31:7a:78:6f:7d:e8:
4b:20:b2:08:83:c4:7a:0a:32:90:07:48:7c:2a:c6:94:69:e9:
a1:79:1d:68:09:7d:94:d1:cf:83:bd:15:2b:16:05:bd:16:5b:
d4:cb:63:97:0f:70:a6:88:f7:9b:54:e7:55:64:3a:d2:3e:67:
1b:14:fa:9b:96:c7:a0:34:38:c6:09:8d:e9:d8:1b:e2:41:d6:
e7:e9:6e:3f:fe:b9:ae:42:48:74:3c:98:36:83:2a:da:18:0c:
be:44:03:dc:e6:29:5d:e3:b4:2b:52:a9:2c:85:b3:e2:69:e3:
94:cf:c7:1a:9f:34:43:59:4f:7d:f5:f1:4c:76:cf:51:a1:81:
a3:14:5f:eb:f6:9f:cd:ea:79:b6:1a:10:ce:8c:c7:70:03:70:
e1:43:90:e2:7b:01:a3:ff:85:98:de:64:3e:94:4f:ac:bc:46:
65:df:50:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org