Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/1F8FC7E28BC011EF99158758762E951A.roa
File: 1F8FC7E28BC011EF99158758762E951A.roa (raw, json)
Hash identifier: zi/E8nuzDSuBNsrFxFShfg2nGdW2kRP/LMnj5rWlaxc=
Subject key identifier: 27:22:AB:D0:37:54:CD:BC:96:15:DA:EC:D4:D2:1B:C3:85:42:99:27
Certificate issuer: /CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Certificate serial: 0C
Authority key identifier: BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/1F8FC7E28BC011EF99158758762E951A.roa
Signing time: Wed 16 Oct 2024 13:11:15 +0000
ROA not before: Wed 16 Oct 2024 13:11:11 +0000
ROA not after: Thu 16 Oct 2025 13:11:11 +0000
asID: 37368
IP address blocks: 41.79.104.0/22 maxlen: 32
Validation: Failed, certificate revoked on Thu 17 Oct 2024 06:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Validity
Not Before: Oct 16 13:11:11 2024 GMT
Not After : Oct 16 13:11:11 2025 GMT
Subject: CN=670fbb73-0bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:9e:d9:4f:25:5c:98:3b:10:81:23:9e:0b:
c7:11:ff:23:88:b8:34:2b:8a:a7:5a:fa:00:b7:8e:
0e:d8:b9:a5:c2:07:a1:be:8d:90:26:d2:37:42:07:
bb:1e:52:e0:00:1e:8d:06:53:0c:18:fe:c1:91:0b:
cc:8c:33:00:7b:48:8a:f2:0c:f3:59:ac:88:f1:20:
6f:55:bd:73:c3:3b:28:95:bf:68:39:14:03:a0:22:
04:39:87:3d:0d:15:74:03:6c:f4:e3:82:ee:f1:15:
c9:6f:e7:d1:9c:11:98:6a:01:de:f8:f4:7b:c4:ac:
32:c1:0b:79:10:49:e6:fd:b7:df:f7:3f:86:35:51:
5a:1d:ef:a6:36:d7:96:2b:8a:bf:ca:8e:e8:a1:b6:
92:66:9c:49:65:e5:8d:3e:43:f1:47:76:a4:b6:31:
e0:38:2a:6f:b8:37:bf:b0:f1:65:18:46:68:cc:b8:
c4:08:2f:4e:b5:1c:d4:6d:7c:08:2b:b9:3c:fb:09:
13:e8:0d:22:b6:8d:0e:3e:0e:6f:95:63:e5:72:17:
d3:86:e0:f8:58:93:40:1a:80:9e:92:54:50:63:17:
1e:47:a6:7c:79:22:ec:75:f2:5c:6a:98:9e:b4:41:
87:fb:67:e9:bb:46:f7:17:08:82:7a:02:28:b2:7e:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:22:AB:D0:37:54:CD:BC:96:15:DA:EC:D4:D2:1B:C3:85:42:99:27
X509v3 Authority Key Identifier:
keyid:BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/1F8FC7E28BC011EF99158758762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.104.0/22
Signature Algorithm: sha256WithRSAEncryption
42:fb:4b:c6:cf:4d:fe:6e:52:0a:d4:7b:e7:c1:cb:cc:8c:a7:
ce:64:19:45:c7:de:3a:3e:dc:24:0d:96:ed:66:ca:17:58:54:
2b:17:a2:05:a6:36:8e:3f:5f:79:e1:b9:fc:0d:6a:c7:55:0e:
8c:d1:a1:68:13:49:6b:2a:46:fb:15:ce:20:7e:79:0f:24:ae:
f6:3c:51:ed:c0:ec:45:1c:5f:8e:67:62:9c:21:af:65:7c:15:
17:c2:3c:1e:ca:c4:4d:9a:8f:67:4f:8a:24:fc:e2:de:43:80:
40:6d:2f:1a:ad:01:0c:90:13:64:aa:60:bb:70:45:8c:2c:18:
0b:2f:2b:a8:2c:cd:25:0b:ad:8a:7c:01:9d:16:74:ae:43:64:
a2:cc:50:86:e5:e4:13:07:75:ba:04:17:d3:8f:a8:5d:0c:34:
00:d6:75:09:09:1f:d2:5b:12:37:95:ba:2b:aa:70:6a:fe:4c:
3f:59:90:b9:0d:62:ad:60:35:0b:08:e2:50:68:bb:ae:6c:91:
a5:38:7f:7c:35:cc:46:f3:96:47:d6:d3:41:08:79:94:ed:f5:
57:f8:fc:82:3a:6c:2a:59:ce:d4:0f:e9:54:1c:07:d5:17:24:
1b:65:bc:ef:9e:ff:0a:d4:c6:34:88:4e:d9:cc:6a:df:bd:9f:
96:7d:d0:aa
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
MTFFRUFGMTEwLwYDVQQFEyhCRUU4QzNCNEM1MzVDM0FGQTBGNkU2QzRGNjlDNjg5
NTkwNDVGOTE2MB4XDTI0MTAxNjEzMTExMVoXDTI1MTAxNjEzMTExMVowGDEWMBQG
A1UEAxMNNjcwZmJiNzMtMGJiMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANIgntlPJVyYOxCBI54LxxH/I4i4NCuKp1r6ALeODti5pcIHob6NkCbSN0IH
ux5S4AAejQZTDBj+wZELzIwzAHtIivIM81msiPEgb1W9c8M7KJW/aDkUA6AiBDmH
PQ0VdANs9OOC7vEVyW/n0ZwRmGoB3vj0e8SsMsELeRBJ5v233/c/hjVRWh3vpjbX
liuKv8qO6KG2kmacSWXljT5D8Ud2pLYx4Dgqb7g3v7DxZRhGaMy4xAgvTrUc1G18
CCu5PPsJE+gNIraNDj4Ob5Vj5XIX04bg+FiTQBqAnpJUUGMXHkemfHki7HXyXGqY
nrRBh/tn6btG9xcIgnoCKLJ+fOUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQnIqvQ
N1TNvJYV2uzU0hvDhUKZJzAfBgNVHSMEGDAWgBS+6MO0xTXDr6D25sT2nGiVkEX5
FjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzExRUUvMzk3QkFEMEE4QkE4MTFFRjhBNzQwODQyNzYyRTk1MUEvdnVqRHRN
VTF3Ni1nOXViRTlweG9sWkJGLVJZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdnVqRHRNVTF3Ni1nOXViRTlweG9sWkJGLVJZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzExRUUvMzk3QkFEMEE4QkE4MTFFRjhBNzQwODQyNzYy
RTk1MUEvMUY4RkM3RTI4QkMwMTFFRjk5MTU4NzU4NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAilPaDANBgkqhkiG9w0BAQsF
AAOCAQEAQvtLxs9N/m5SCtR758HLzIynzmQZRcfeOj7cJA2W7WbKF1hUKxeiBaY2
jj9feeG5/A1qx1UOjNGhaBNJaypG+xXOIH55DySu9jxR7cDsRRxfjmdinCGvZXwV
F8I8HsrETZqPZ0+KJPzi3kOAQG0vGq0BDJATZKpgu3BFjCwYCy8rqCzNJQutinwB
nRZ0rkNkosxQhuXkEwd1ugQX04+oXQw0ANZ1CQkf0lsSN5W6K6pwav5MP1mQuQ1i
rWA1CwjiUGi7rmyRpTh/fDXMRvOWR9bTQQh5lO31V/j8gjpsKlnO1A/pVBwH1Rck
G2W8757/CtTGNIhO2cxq372fln3Qqg==
-----END CERTIFICATE-----
Generated at Thu Oct 17 08:44:50 2024 by rpki-client on console-ams.rpki-client.org