Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/81E28E8C5CC011EE8BEC3E764AD9E6FC.roa
File: 81E28E8C5CC011EE8BEC3E764AD9E6FC.roa (raw, json)
Hash identifier: K6050WuNcy4BLHaj8E5fG03pQgXL5Jh0oHv+9LfOzcw=
Subject key identifier: 50:D9:0E:5C:A5:1B:2B:B6:DF:08:02:82:81:C8:25:17:CB:C4:82:09
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0314
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/81E28E8C5CC011EE8BEC3E764AD9E6FC.roa
Signing time: Tue 26 Sep 2023 23:00:38 +0000
ROA not before: Wed 27 Sep 2023 23:00:34 +0000
ROA not after: Tue 30 Sep 2025 23:00:34 +0000
asID: 328327
IP address blocks: 2c0f:c00:2200::/40 maxlen: 56
Validation: Failed, certificate revoked on Tue 26 Sep 2023 23:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788 (0x314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 27 23:00:34 2023 GMT
Not After : Sep 30 23:00:34 2025 GMT
Subject: CN=65136296-8c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:71:16:a4:e8:6a:39:d4:43:ac:57:f8:35:bc:
cd:b5:87:32:07:88:95:78:3b:a2:de:65:cb:82:87:
98:f0:41:bf:d3:d6:74:80:c3:83:9e:36:12:60:6b:
4e:1a:ac:55:b6:45:d5:50:28:90:2f:3f:85:12:1e:
7a:fb:5f:f8:2a:cb:74:71:29:45:2f:75:91:f2:51:
26:75:b3:29:d6:01:e6:82:81:0f:0a:f9:17:9e:e0:
81:8f:2c:13:fa:f2:39:2e:b0:63:5f:80:7c:0d:4b:
a7:b9:a7:ea:1a:70:53:4e:c6:e8:72:38:47:49:8a:
4e:8e:2e:82:ad:16:c5:49:3f:b4:8b:b4:97:ea:fb:
d7:87:6b:a9:60:3a:d7:05:f3:c0:13:e8:ea:32:1d:
8c:5b:9d:35:29:ea:9c:14:75:ce:37:65:c2:7a:43:
72:26:df:2e:1d:d9:50:af:37:ae:1b:81:a6:fb:5a:
09:c8:6e:59:aa:ac:1f:bf:47:b1:8c:ef:08:68:1a:
f9:d7:a7:35:d6:58:b0:57:3c:34:07:9f:99:d3:22:
4b:f9:fa:e7:97:eb:bb:7b:b1:be:8e:0b:a8:fd:51:
80:d3:d9:2e:97:73:23:20:b6:19:2c:79:a8:7c:28:
ca:76:28:a5:41:6a:56:68:21:db:50:b5:2e:f2:68:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:0E:5C:A5:1B:2B:B6:DF:08:02:82:81:C8:25:17:CB:C4:82:09
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/81E28E8C5CC011EE8BEC3E764AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:c00:2200::/40
Signature Algorithm: sha256WithRSAEncryption
63:93:54:e5:35:1f:f1:83:3a:da:62:c9:8c:cd:f6:aa:2e:d0:
29:7c:c1:3b:94:52:b8:65:14:2b:b9:df:b4:82:9d:a9:6b:33:
af:03:18:33:d1:ab:4e:aa:34:91:f3:68:20:d5:97:25:41:c4:
f1:4d:3c:bb:c4:4d:1d:c8:f0:aa:5a:4e:8d:67:4b:ee:89:fc:
2a:6c:8d:e1:d4:a4:6a:50:25:ea:b2:d0:10:4f:e2:93:b2:3c:
2f:ff:f1:48:c6:01:b5:73:fa:98:a0:90:16:a8:40:a2:db:ee:
d8:29:1e:90:b1:2d:10:56:a9:42:11:74:8d:31:34:71:46:b0:
b8:b4:75:81:78:7b:77:10:92:fc:0d:04:63:bc:ba:41:61:2d:
39:88:b8:0e:51:7e:b9:05:f5:fc:db:1d:71:8b:81:0f:34:cd:
c3:e0:23:ce:af:ec:83:a7:9c:89:a6:22:c8:59:fe:eb:ef:88:
19:cb:74:23:d2:2c:af:9f:cb:a3:22:e7:14:ff:2b:f3:62:9f:
5f:37:d3:86:8f:e3:22:7e:49:14:89:4c:75:b7:65:00:31:8f:
57:74:e0:17:eb:ad:81:40:5d:fe:dd:73:8a:d5:29:6e:28:db:
bb:c1:71:25:a7:97:f2:63:f3:54:48:97:5c:12:64:af:79:18:
82:8c:a9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org