Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/E3A9162E8BB611EFB2FDEB9C762E951A.roa
File: E3A9162E8BB611EFB2FDEB9C762E951A.roa (raw, json)
Hash identifier: z3nDssI0KD/Nrz5skSrk0Ih/lgOdWQxEO2EtguxRaEI=
Subject key identifier: 6D:C4:24:DA:74:AF:54:79:2B:C3:DD:BD:DF:B1:35:9C:A2:17:54:CE
Certificate issuer: /CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Certificate serial: 06
Authority key identifier: BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/E3A9162E8BB611EFB2FDEB9C762E951A.roa
Signing time: Wed 16 Oct 2024 12:05:09 +0000
ROA not before: Wed 16 Oct 2024 12:05:04 +0000
ROA not after: Thu 16 Oct 2025 12:05:04 +0000
asID: 37368
IP address blocks: 41.79.104.0/22 maxlen: 22
2c0f:f080::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 12:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Validity
Not Before: Oct 16 12:05:04 2024 GMT
Not After : Oct 16 12:05:04 2025 GMT
Subject: CN=670fabf5-1801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:60:ca:b6:0d:3a:f0:2f:c4:e0:2e:cb:79:
0d:b3:08:34:df:a2:fe:6a:0e:7d:a0:32:b1:46:fb:
8a:3f:be:04:fe:6a:c3:ec:5b:59:c5:61:c5:e1:9a:
ff:f8:ae:a6:c8:71:fa:06:2a:d3:65:91:6c:06:58:
ff:60:26:ad:c7:db:26:7b:5b:9c:f0:b3:80:87:33:
25:83:4c:32:b9:8c:7f:c4:c6:2e:2d:cc:28:9c:28:
71:c1:67:1c:43:69:8d:9e:05:3a:89:09:08:50:8c:
01:d5:09:49:a7:78:27:b5:cf:49:1d:e9:4d:6c:1e:
61:37:74:c8:b5:22:b0:27:72:b1:9f:cf:a9:6f:3c:
ea:ea:34:ac:17:04:e2:b7:9b:f6:d1:f6:32:b5:da:
a5:46:58:a6:bf:b3:9f:15:14:94:fa:d5:0c:8b:ad:
3a:aa:32:82:b8:cf:1b:36:f7:39:1f:dd:f3:69:4d:
0c:82:03:d3:e3:17:f2:cf:80:b0:56:4e:a6:1e:92:
c1:bf:b8:73:fd:4e:35:a0:a7:73:f8:4c:66:4e:e9:
db:85:b2:25:e5:84:2c:df:cb:c6:e2:8b:7a:9e:3e:
9e:7a:64:aa:e0:1c:bd:66:67:82:03:8d:57:67:61:
47:e7:1d:6a:8e:c1:b7:04:5c:f1:f5:80:0b:b6:f7:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C4:24:DA:74:AF:54:79:2B:C3:DD:BD:DF:B1:35:9C:A2:17:54:CE
X509v3 Authority Key Identifier:
keyid:BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/E3A9162E8BB611EFB2FDEB9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.104.0/22
IPv6:
2c0f:f080::/32
Signature Algorithm: sha256WithRSAEncryption
64:28:dc:5e:65:da:14:ee:8d:66:3c:03:94:68:a4:39:90:ba:
a7:52:84:80:4a:d9:f7:6d:67:01:18:2f:b7:96:35:ff:b0:72:
55:ce:83:43:84:df:5f:d0:0a:15:93:a4:95:a5:98:43:52:2c:
d3:2a:65:cc:48:a0:f3:51:d5:bf:8b:d9:2c:b7:53:8d:75:d3:
67:38:75:f5:fe:cb:d5:57:97:ad:b5:97:fa:04:ad:67:66:36:
0e:80:fb:c2:56:e9:77:63:98:ce:d2:cf:65:fe:7f:0d:f6:e4:
b4:a3:7b:b4:a0:61:47:34:92:6a:6d:73:b4:23:fe:df:0c:45:
4d:ef:5b:09:89:ba:8f:ef:5b:d3:82:9a:8d:38:ee:c6:a5:3b:
00:57:1a:b2:2e:fd:16:83:f1:41:16:b9:28:80:b1:66:b2:da:
3f:3f:d1:e5:e3:0b:de:38:58:4b:b6:57:bc:1a:31:c5:d8:34:
19:39:46:99:43:94:28:4c:86:6f:52:a7:01:e1:5b:cd:7e:22:
ff:ee:d9:04:f3:9d:c5:0f:0d:a1:92:7b:42:a8:a9:40:40:fc:
a4:41:07:7d:b5:41:60:62:0d:43:f2:8a:77:94:76:74:09:f8:
b4:90:ec:a0:96:db:3b:29:a9:eb:02:aa:07:79:3c:ef:19:65:
5a:32:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 16:01:18 2024 by rpki-client on console-fra.rpki-client.org