Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/2B53BE2A33E511ECB7C6BD35D8A014CE.roa
File: 2B53BE2A33E511ECB7C6BD35D8A014CE.roa (raw, json)
Hash identifier: eITvFj3z17R1uHNy1EHStw7/uUH5A4Gd5G5nKxI8VKo=
Subject key identifier: 0D:E7:0F:1F:7B:F6:08:CC:81:CB:DA:5F:29:67:82:98:D6:85:2D:C0
Certificate issuer: /CN=F36312D2AF/serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Certificate serial: 5D
Authority key identifier: 31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/2B53BE2A33E511ECB7C6BD35D8A014CE.roa
Signing time: Sat 23 Oct 2021 09:39:51 +0000
ROA not before: Sat 23 Oct 2021 09:39:47 +0000
ROA not after: Thu 31 Oct 2024 09:39:47 +0000
asID: 37236
IP address blocks: 41.79.240.0/22 maxlen: 24
102.218.120.0/22 maxlen: 24
154.119.224.0/19 maxlen: 24
2c0f:f010::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Dec 2022 16:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36312D2AF/serialNumber=31BA5ACE57BF1DAFBA88DDAEF42EC8F1515E13C2
Validity
Not Before: Oct 23 09:39:47 2021 GMT
Not After : Oct 31 09:39:47 2024 GMT
Subject: CN=6173d867-1415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:b7:18:dd:85:3a:c8:7b:b1:0c:4c:a1:80:
84:00:ab:50:56:43:df:72:76:c3:4b:58:68:7b:43:
68:64:44:bf:ef:5d:80:f6:76:7e:aa:44:d2:20:8c:
40:eb:01:bf:6c:db:29:83:ca:c1:88:cb:7d:f2:36:
7d:f4:3b:fe:17:ed:fa:46:35:64:09:67:33:fe:0d:
03:a1:31:e5:21:33:d1:27:65:a0:38:c1:3f:33:d9:
c0:7a:5b:e3:fc:83:17:d6:43:35:e9:5a:d6:e5:ba:
ed:53:ae:69:38:39:9d:2c:c0:f2:7f:33:7b:4e:11:
d5:30:ea:3e:02:6a:e6:e8:70:e6:f9:02:50:1f:9c:
7f:dd:8b:4b:cf:a7:b1:c4:5b:84:43:fe:13:6b:6b:
8f:b6:70:3b:8f:bb:50:5c:a3:ff:9c:07:b3:15:ea:
98:8f:0c:ef:ee:b8:b4:e4:85:1a:1e:da:16:76:e9:
2e:38:17:a5:11:91:de:de:01:06:d4:0e:18:82:d3:
ee:ae:5b:2d:a9:8e:41:c1:58:89:48:15:61:09:a0:
e6:26:15:b4:b1:b9:14:ab:ad:f9:82:b5:a4:75:df:
20:0d:d0:84:c0:de:fe:0f:30:d9:fb:00:56:e6:f9:
d1:c5:94:58:29:43:41:5b:0d:d4:1c:84:38:9e:f2:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:0F:1F:7B:F6:08:CC:81:CB:DA:5F:29:67:82:98:D6:85:2D:C0
X509v3 Authority Key Identifier:
keyid:31:BA:5A:CE:57:BF:1D:AF:BA:88:DD:AE:F4:2E:C8:F1:51:5E:13:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/Mbpazle_Ha-6iN2u9C7I8VFeE8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Mbpazle_Ha-6iN2u9C7I8VFeE8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36312D2/FFA25144F0FD11EBA85B643ED8A014CE/2B53BE2A33E511ECB7C6BD35D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.240.0/22
102.218.120.0/22
154.119.224.0/19
IPv6:
2c0f:f010::/32
Signature Algorithm: sha256WithRSAEncryption
0a:2b:a0:5e:39:5c:3f:45:a2:f8:62:d6:d7:53:9c:9b:be:b8:
bd:46:f3:f1:f8:b7:98:2c:b6:f4:e0:92:b3:02:5a:1a:b5:44:
70:ea:96:d7:7b:0b:0e:dc:34:e6:8f:b3:57:e7:4d:e6:e2:a9:
04:c7:26:b5:fb:e2:3c:6e:b8:fa:0b:2b:83:82:ec:89:60:c7:
22:b6:29:58:97:89:ec:5a:4c:48:43:80:e6:23:12:5e:c2:9f:
f0:0a:f3:62:bd:fe:d3:6f:a8:3d:7c:c9:2e:c3:43:74:64:c2:
9c:7f:5f:d1:fc:26:af:9b:0a:6a:59:5e:a7:63:5e:20:53:47:
db:d6:19:b2:b3:2d:fd:4b:94:b1:6a:8a:c1:a7:bc:56:de:cd:
49:c3:3a:a7:b8:c5:9d:ba:db:af:21:98:eb:be:36:e0:8d:5f:
41:cc:2d:1f:66:64:00:e2:c2:4b:4e:9c:1e:03:a8:16:70:37:
96:d3:6e:fc:74:7a:04:58:40:10:26:43:e6:dd:80:b3:10:c9:
9f:db:30:13:e0:41:44:4b:23:d9:29:cf:e8:73:1a:f1:21:12:
e2:5c:a0:fe:1f:1d:6a:9e:5b:da:d5:dd:6b:bd:e3:38:36:4e:
5a:ba:dc:ee:a6:e3:3f:b2:20:71:77:a1:14:24:20:a7:4f:66:
e9:f7:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org