Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/22BD8664811511EDBA0080E7F1222468.roa
File: 22BD8664811511EDBA0080E7F1222468.roa (raw, json)
Hash identifier: ZDvGYVkUATn8LQvO/s5A/7tPaVgBm1KtZlwjTLV21Iw=
Subject key identifier: 81:5E:AC:F1:51:72:06:DE:13:23:30:B2:09:63:4C:26:EF:A7:B8:45
Certificate issuer: /CN=F363BB47AF/serialNumber=9BFCBA698B26DD34610C4AFD471E241AD79451A3
Certificate serial: 02
Authority key identifier: 9B:FC:BA:69:8B:26:DD:34:61:0C:4A:FD:47:1E:24:1A:D7:94:51:A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/22BD8664811511EDBA0080E7F1222468.roa
Signing time: Wed 21 Dec 2022 09:52:10 +0000
ROA not before: Wed 21 Dec 2022 09:52:05 +0000
ROA not after: Wed 21 Dec 2033 09:52:05 +0000
asID: 37412
IP address blocks: 41.79.180.0/22 maxlen: 24
2c0f:fb30::/32 maxlen: 64
Validation: Failed, certificate revoked on Wed 21 Dec 2022 10:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BB47AF/serialNumber=9BFCBA698B26DD34610C4AFD471E241AD79451A3
Validity
Not Before: Dec 21 09:52:05 2022 GMT
Not After : Dec 21 09:52:05 2033 GMT
Subject: CN=63a2d749-b3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:53:26:a1:8c:64:80:dc:34:6d:73:a7:bf:c2:
1f:38:af:1d:20:c0:cd:32:e4:ca:ad:fe:1e:67:de:
19:6f:04:2f:b2:a7:30:15:af:81:e7:f1:07:21:88:
b3:d4:25:fa:c0:e7:74:a0:cb:c7:69:78:e3:50:e3:
a5:5b:6d:b3:32:11:1c:d6:2e:8b:e3:37:81:96:dc:
1c:2c:9f:b2:75:39:72:d7:f7:b9:22:24:82:b7:10:
87:02:04:cd:5d:44:83:e8:41:17:a8:08:e6:25:9f:
d9:86:36:ca:81:7f:2b:63:c1:6e:9a:1c:fe:99:1b:
7e:c4:70:29:41:f4:f4:a7:da:70:5d:f7:0f:9f:eb:
05:5c:9f:30:97:ae:f0:f0:93:6e:d5:55:09:9c:88:
42:2b:b9:fe:50:6f:55:89:91:b8:3c:69:58:b9:28:
eb:83:e3:28:cd:bd:10:08:79:06:23:c1:9b:8d:6c:
b3:8a:d1:bc:9a:dd:35:4a:10:a4:6f:c1:cc:d2:61:
04:b9:ec:08:cf:df:64:27:26:17:27:84:4b:3a:1d:
1e:0a:c0:1d:2a:5c:c6:2f:65:e1:a7:7d:c8:b5:10:
ff:44:bf:76:0a:d5:65:92:39:68:64:a7:79:3e:ca:
7a:6b:29:82:b6:fc:ba:c5:5b:16:17:31:ee:e2:49:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5E:AC:F1:51:72:06:DE:13:23:30:B2:09:63:4C:26:EF:A7:B8:45
X509v3 Authority Key Identifier:
keyid:9B:FC:BA:69:8B:26:DD:34:61:0C:4A:FD:47:1E:24:1A:D7:94:51:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/22BD8664811511EDBA0080E7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.180.0/22
IPv6:
2c0f:fb30::/32
Signature Algorithm: sha256WithRSAEncryption
88:e4:d3:83:b1:dd:51:ac:8e:a5:1d:4b:9b:43:73:30:ba:19:
4a:6e:39:85:f5:e7:2b:f4:f3:8a:75:26:c1:16:64:15:7a:ce:
f9:ab:50:c9:1e:cc:68:e2:c9:8b:53:4b:2f:4e:a7:64:2f:9b:
82:e0:85:af:61:a8:25:12:50:9a:05:31:56:cd:e0:af:e5:12:
3a:14:7f:e3:44:4b:4c:a4:e6:2c:19:15:18:51:a8:01:1c:99:
82:02:65:f2:04:1f:73:0c:22:2e:ae:49:f4:e1:76:18:3b:a9:
a1:31:73:6c:7d:45:a0:01:c9:72:59:19:7a:5d:e8:5d:42:1d:
14:97:5b:90:e2:fc:cc:71:04:fb:ed:88:db:d2:1b:46:21:88:
12:3e:af:16:0b:4b:02:2e:51:b7:04:c0:c6:8f:06:82:5a:8a:
10:9f:da:da:1c:03:77:5a:3e:bf:a7:91:d1:a5:1f:bb:45:bb:
8c:5b:3c:dd:b3:42:9d:d3:0f:51:43:c4:37:f8:0b:db:80:63:
8d:d4:9b:0b:bc:8c:52:a3:f9:bb:ba:7e:70:80:66:48:24:71:
9b:f4:cb:4a:b7:93:a1:f5:16:f6:a4:6b:d7:25:19:27:f8:90:
26:27:e7:5e:d0:b4:7f:10:73:04:a8:ee:9b:3f:d6:de:5d:92:
11:0a:36:5b
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYz
QkI0N0FGMTEwLwYDVQQFEyg5QkZDQkE2OThCMjZERDM0NjEwQzRBRkQ0NzFFMjQx
QUQ3OTQ1MUEzMB4XDTIyMTIyMTA5NTIwNVoXDTMzMTIyMTA5NTIwNVowGDEWMBQG
A1UEAwwNNjNhMmQ3NDktYjNmYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO1TJqGMZIDcNG1zp7/CHzivHSDAzTLkyq3+HmfeGW8EL7KnMBWvgefxByGI
s9Ql+sDndKDLx2l441DjpVttszIRHNYui+M3gZbcHCyfsnU5ctf3uSIkgrcQhwIE
zV1Eg+hBF6gI5iWf2YY2yoF/K2PBbpoc/pkbfsRwKUH09KfacF33D5/rBVyfMJeu
8PCTbtVVCZyIQiu5/lBvVYmRuDxpWLko64PjKM29EAh5BiPBm41ss4rRvJrdNUoQ
pG/BzNJhBLnsCM/fZCcmFyeESzodHgrAHSpcxi9l4ad9yLUQ/0S/dgrVZZI5aGSn
eT7Kemspgrb8usVbFhcx7uJJUUUCAwEAAaOCArQwggKwMB0GA1UdDgQWBBSBXqzx
UXIG3hMjMLIJY0wm76e4RTAfBgNVHSMEGDAWgBSb/LppiybdNGEMSv1HHiQa15RR
ozAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0JCNDcvNTE2QTVCQUE4MTA1MTFFRDkyMDZGNkJERjEyMjI0NjgvbV95NmFZ
c20zVFJoREVyOVJ4NGtHdGVVVWFNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbV95NmFZc20zVFJoREVyOVJ4NGtHdGVVVWFNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0JCNDcvNTE2QTVCQUE4MTA1MTFFRDkyMDZGNkJERjEy
MjI0NjgvMjJCRDg2NjQ4MTE1MTFFREJBMDA4MEU3RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAilPtDANBAIAAjAHAwUALA/7
MDANBgkqhkiG9w0BAQsFAAOCAQEAiOTTg7HdUayOpR1Lm0NzMLoZSm45hfXnK/Tz
inUmwRZkFXrO+atQyR7MaOLJi1NLL06nZC+bguCFr2GoJRJQmgUxVs3gr+USOhR/
40RLTKTmLBkVGFGoARyZggJl8gQfcwwiLq5J9OF2GDupoTFzbH1FoAHJclkZel3o
XUIdFJdbkOL8zHEE++2I29IbRiGIEj6vFgtLAi5RtwTAxo8GglqKEJ/a2hwDd1o+
v6eR0aUfu0W7jFs83bNCndMPUUPEN/gL24BjjdSbC7yMUqP5u7p+cIBmSCRxm/TL
SreTofUW9qRr1yUZJ/iQJifnXtC0fxBzBKjumz/W3l2SEQo2Ww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org