Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/120A33C66E9411EFA1EE57BF762E951A.roa
File: 120A33C66E9411EFA1EE57BF762E951A.roa (raw, json)
Hash identifier: lN8qkHmZLtNnY8LbYwBWMoMhu0HDJxmle/4ac+DR7b4=
Subject key identifier: C9:BB:D5:60:09:EE:35:A8:B9:4C:4E:05:EF:50:4B:63:E6:81:34:B9
Certificate issuer: /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial: 0223
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/120A33C66E9411EFA1EE57BF762E951A.roa
Signing time: Mon 09 Sep 2024 10:12:51 +0000
ROA not before: Mon 09 Sep 2024 10:12:47 +0000
ROA not after: Sat 09 Sep 2034 10:12:47 +0000
asID: 19711
IP address blocks: 41.215.144.0/24 maxlen: 24
41.215.145.0/24 maxlen: 24
41.215.146.0/24 maxlen: 24
41.215.147.0/24 maxlen: 24
41.215.148.0/22 maxlen: 22
41.215.152.0/23 maxlen: 23
41.215.154.0/23 maxlen: 23
41.215.156.0/24 maxlen: 24
41.215.157.0/24 maxlen: 24
41.215.158.0/24 maxlen: 24
41.215.159.0/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 10 Sep 2024 07:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AF
Validity
Not Before: Sep 9 10:12:47 2024 GMT
Not After : Sep 9 10:12:47 2034 GMT
Subject: CN=66deca23-a92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a9:2b:80:3d:6b:61:6b:b1:3c:1c:ae:b3:75:
e3:80:c0:36:29:26:df:9e:cc:1d:ca:34:c5:b3:c5:
f1:7a:e5:83:8a:ac:f5:1e:7c:f8:2e:84:0d:b7:15:
a4:49:b3:b3:62:ac:5d:1a:31:d0:af:ca:81:79:fb:
fd:2e:2a:21:08:30:55:e8:dd:08:da:2f:50:a8:bb:
e5:64:30:82:fd:47:f0:31:c6:31:18:83:73:57:a5:
ab:63:e7:42:89:67:b8:87:57:bd:11:f0:c7:33:5d:
bd:51:4b:08:74:b9:00:37:8d:79:85:ed:0f:e4:a4:
c9:53:00:f4:e4:89:fa:52:84:9a:22:2b:02:db:86:
45:54:d7:51:e5:88:d2:13:0e:54:bf:6f:35:80:f0:
58:bb:2c:4e:8a:43:a5:7e:2a:77:bf:46:ab:4f:af:
97:c6:a8:a2:5a:ba:e1:39:ca:ac:26:17:41:63:4d:
81:4f:ce:8a:5a:2a:0f:5e:23:2e:0f:06:19:13:c1:
34:be:72:44:58:6d:7a:d0:c0:ce:a8:e7:ce:12:51:
ba:63:72:11:44:ce:38:c7:a5:49:44:95:ee:3b:df:
ef:ab:a2:ea:d1:07:da:71:bb:22:57:91:35:ab:1a:
95:2e:51:4c:1b:2e:97:77:87:0f:2c:10:1a:1d:f5:
12:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:D5:60:09:EE:35:A8:B9:4C:4E:05:EF:50:4B:63:E6:81:34:B9
X509v3 Authority Key Identifier:
keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/120A33C66E9411EFA1EE57BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.144.0-41.215.159.127
Signature Algorithm: sha256WithRSAEncryption
63:da:97:6d:04:7d:d8:f3:66:06:08:35:70:60:ec:0f:10:10:
ef:67:89:3e:75:48:35:09:b2:94:12:e3:a7:67:00:44:39:0b:
79:90:9d:76:77:3f:3e:bf:f8:7e:13:96:2e:bc:5e:91:65:88:
46:da:eb:d1:da:7e:e4:38:71:06:c4:59:b8:bd:fa:b5:72:49:
b8:d1:58:dd:ba:ae:80:72:8f:7b:2c:a1:0d:5a:08:ee:c4:52:
49:52:fd:1d:9b:3d:94:16:59:43:ee:3d:48:bb:4e:21:50:d8:
a9:a6:4b:2e:6b:f9:6b:1d:00:a2:f2:ae:dd:1b:50:23:39:fb:
bd:f2:06:3e:17:d0:bc:e2:61:8e:7a:99:8e:86:61:c0:4a:4f:
4c:e9:9a:06:bf:7c:01:bf:be:17:2f:9e:3a:31:61:4e:dc:c8:
54:18:73:31:11:a0:46:07:ed:f4:cb:e4:ef:8d:91:20:2e:85:
24:c5:cf:b6:06:ad:8b:21:da:cc:ea:3e:3d:1d:ba:40:a8:ce:
51:54:9c:7f:92:fb:e9:c6:68:42:59:dd:9b:20:ad:d3:15:71:
3a:d2:19:a3:11:7d:b1:4b:9f:83:c6:ef:ff:e7:19:b0:df:c4:
1c:40:70:9b:a4:ec:42:22:53:db:f5:83:57:91:81:b8:4e:08:
8c:a9:6c:e8
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0VBODBBRjExMC8GA1UEBRMoQzY3QzYyMzExMjA5NDEyMzU1ODFENTk0MjU2NUFC
Rjc0MTlEQ0VDQzAeFw0yNDA5MDkxMDEyNDdaFw0zNDA5MDkxMDEyNDdaMBgxFjAU
BgNVBAMTDTY2ZGVjYTIzLWE5MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjqSuAPWtha7E8HK6zdeOAwDYpJt+ezB3KNMWzxfF65YOKrPUefPguhA23
FaRJs7NirF0aMdCvyoF5+/0uKiEIMFXo3QjaL1Cou+VkMIL9R/AxxjEYg3NXpatj
50KJZ7iHV70R8MczXb1RSwh0uQA3jXmF7Q/kpMlTAPTkifpShJoiKwLbhkVU11Hl
iNITDlS/bzWA8Fi7LE6KQ6V+Kne/RqtPr5fGqKJauuE5yqwmF0FjTYFPzopaKg9e
Iy4PBhkTwTS+ckRYbXrQwM6o584SUbpjchFEzjjHpUlEle473++rourRB9pxuyJX
kTWrGpUuUUwbLpd3hw8sEBod9RJxAgMBAAGjggKuMIICqjAdBgNVHQ4EFgQUybvV
YAnuNai5TE4F71BLY+aBNLkwHwYDVR0jBBgwFoAUxnxiMRIJQSNVgdWUJWWr90Gd
zswwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNFQTgwLzIzRDU0QjI4REREQTExRUQ4NjUzMkUwRDMwNkQ4QzFEL3hueGlN
UklKUVNOVmdkV1VKV1dyOTBHZHpzdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hueGlNUklKUVNOVmdkV1VKV1dyOTBHZHpzdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNFQTgwLzIzRDU0QjI4REREQTExRUQ4NjUzMkUwRDMw
NkQ4QzFELzEyMEEzM0M2NkU5NDExRUZBMUVFNTdCRjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwKAYIKwYBBQUHAQcBAf8EGTAXMBUEAgABMA8wDQMEBCnXkAMFBynXnwAwDQYJ
KoZIhvcNAQELBQADggEBAGPal20EfdjzZgYINXBg7A8QEO9niT51SDUJspQS46dn
AEQ5C3mQnXZ3Pz6/+H4Tli68XpFliEba69HafuQ4cQbEWbi9+rVySbjRWN26roBy
j3ssoQ1aCO7EUklS/R2bPZQWWUPuPUi7TiFQ2KmmSy5r+WsdAKLyrt0bUCM5+73y
Bj4X0LziYY56mY6GYcBKT0zpmga/fAG/vhcvnjoxYU7cyFQYczERoEYH7fTL5O+N
kSAuhSTFz7YGrYsh2szqPj0dukCozlFUnH+S++nGaEJZ3ZsgrdMVcTrSGaMRfbFL
n4PG7//nGbDfxBxAcJuk7EIiU9v1g1eRgbhOCIypbOg=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:55:54 2025 by rpki-client