Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/A9D84ED4099411ED9855019AF1222468.roa
File: A9D84ED4099411ED9855019AF1222468.roa (raw, json)
Hash identifier: rsj0c7gGg7mZyeNIvTVh4I8kmfWGdXokV6vQgsgJcUQ=
Subject key identifier: DE:88:E8:43:5C:CE:79:4E:10:9B:06:95:F1:A5:02:E8:E1:C7:44:5D
Certificate issuer: /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial: 025A
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/A9D84ED4099411ED9855019AF1222468.roa
Signing time: Fri 22 Jul 2022 08:02:43 +0000
ROA not before: Fri 22 Jul 2022 08:02:38 +0000
ROA not after: Mon 22 Jul 2024 08:02:38 +0000
asID: 37619
IP address blocks: 41.74.160.0/20 maxlen: 24
41.197.0.0/16 maxlen: 22
197.243.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Jul 2022 10:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Validity
Not Before: Jul 22 08:02:38 2022 GMT
Not After : Jul 22 08:02:38 2024 GMT
Subject: CN=62da59a3-ae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:fc:f3:42:ae:c4:ee:4a:36:51:c6:cb:6e:
39:f0:7e:39:c0:42:61:70:95:7a:d6:c4:26:cc:15:
be:a4:39:bb:e8:41:14:0f:13:a8:48:d1:51:6d:d4:
eb:25:e7:6e:10:3d:5e:1b:f4:6d:e2:a9:1a:b3:ac:
a0:35:92:60:c5:e9:74:15:26:ee:f2:97:ca:c6:17:
99:de:cc:6d:20:5e:09:72:94:52:29:08:54:46:3a:
d9:98:7d:14:e0:17:c0:90:e8:cf:01:2f:1f:bc:33:
0a:95:30:3b:ab:4a:4c:71:82:a7:ba:f9:f3:0a:f9:
38:20:cf:54:cd:3a:8d:0c:0b:57:6e:23:c0:03:44:
91:9f:33:3c:58:39:2b:4e:a7:6e:2a:7a:5d:53:85:
ed:22:bc:c6:61:51:82:1d:66:e7:9d:b6:52:9a:2d:
87:f6:d6:1f:88:32:4d:56:49:18:2c:2c:d8:3e:b5:
a1:ec:ba:22:00:bc:fd:ee:81:1a:c0:f4:a4:da:9f:
c2:b9:11:a0:76:8f:4b:cf:93:33:a4:2b:3d:53:c3:
e6:f9:ad:a8:04:4d:8e:38:45:a5:83:fe:5d:44:50:
08:75:3c:25:06:6d:13:b8:fb:ae:f7:02:7c:00:e7:
0f:8f:c7:f5:f4:ee:0c:5e:cf:fb:4c:6c:8d:6c:5e:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:88:E8:43:5C:CE:79:4E:10:9B:06:95:F1:A5:02:E8:E1:C7:44:5D
X509v3 Authority Key Identifier:
keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/A9D84ED4099411ED9855019AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.74.160.0/20
41.197.0.0/16
197.243.0.0/17
Signature Algorithm: sha256WithRSAEncryption
69:6a:bd:23:c1:b7:7b:73:ac:7d:cf:42:08:80:e2:f0:9d:b3:
a0:74:47:23:49:78:9d:3b:ef:12:19:d8:20:3d:d9:e3:5d:48:
b2:c4:b8:9f:e4:5a:b9:65:73:35:b8:14:ef:2f:aa:49:63:d4:
52:f5:f7:86:a5:b6:c3:06:a9:5c:19:fe:87:a8:3f:eb:4c:5c:
9c:ad:93:11:66:21:1d:96:ad:93:24:2b:16:c8:10:69:3d:2e:
8c:e4:9c:64:20:e3:7f:92:10:ef:65:78:91:8b:68:35:76:b6:
e4:92:39:c5:20:9a:aa:8e:c7:02:b1:0f:03:b2:3e:ae:48:ba:
9a:20:9d:f2:4c:84:3e:90:61:a6:f6:9d:9f:ab:ed:74:93:ec:
78:6e:32:a2:96:88:d9:e2:44:2d:8a:b8:ff:06:54:8c:01:35:
4f:9f:c9:75:08:7b:58:34:b8:de:17:c3:51:f8:ec:08:0c:be:
9e:b7:cb:d9:ed:a8:ef:0f:f0:76:8b:e3:a3:d6:f3:41:ee:8b:
79:cf:eb:fa:8f:30:dc:ce:fa:cd:14:c3:34:3d:9e:77:2f:97:
4e:84:3c:af:b4:ec:00:35:58:3d:00:52:30:e9:76:a0:08:aa:
88:18:74:8b:d4:e5:15:77:f5:a8:7d:d3:06:b5:e4:be:9f:47:
f0:0d:e1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org