Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/9D8354BCE28311EDBDF7BBB32F6D8C1D.roa
File: 9D8354BCE28311EDBDF7BBB32F6D8C1D.roa (raw, json)
Hash identifier: rb5hZzoBzuKsyVGoUbjbgi63ZAcjzIIfdQeQzFRzV2o=
Subject key identifier: 5F:90:A5:A1:C5:CC:24:46:6A:23:2E:E9:EE:CF:FD:D8:97:29:B6:44
Certificate issuer: /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial: 0B
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/9D8354BCE28311EDBDF7BBB32F6D8C1D.roa
Signing time: Mon 24 Apr 2023 09:37:23 +0000
ROA not before: Mon 24 Apr 2023 09:37:19 +0000
ROA not after: Wed 24 Apr 2030 09:37:19 +0000
asID: 19711
IP address blocks: 41.84.224.0/19 maxlen: 19
41.215.144.0/20 maxlen: 20
154.119.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 17 May 2023 07:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Validity
Not Before: Apr 24 09:37:19 2023 GMT
Not After : Apr 24 09:37:19 2030 GMT
Subject: CN=64464dd3-dd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:58:09:71:02:68:a2:6d:7b:40:69:c2:e8:
78:23:91:a8:31:ef:aa:74:3f:bc:eb:a2:08:b6:31:
7e:f6:c8:0a:d4:8f:89:74:b7:b4:a9:a5:b9:4e:11:
d2:b8:72:91:5f:4d:e6:a7:0f:5c:b9:5b:c7:35:72:
7d:36:42:7f:85:da:cd:a8:0e:4c:24:76:94:3b:e9:
b7:86:7e:df:e2:5f:49:22:4a:6e:34:99:5e:b9:cf:
f9:cd:ae:16:3f:ce:1e:d5:0d:71:5e:1a:dc:f7:c7:
7b:b8:aa:a9:0b:1f:27:e8:b4:71:74:94:56:80:0d:
ec:1b:c3:24:c4:7b:5f:8d:a0:ea:d6:e7:73:9a:de:
5d:19:9d:6d:71:81:dd:f0:9a:f8:52:4b:bc:15:88:
76:ec:43:0d:79:43:a0:f7:5e:67:b2:ce:f8:e5:c5:
e7:69:fa:72:7e:4e:90:65:3c:77:a0:85:49:75:e6:
c1:11:1c:5e:ed:43:64:b4:df:b2:58:3b:2f:1c:99:
a2:58:06:75:3a:c5:ba:a2:d8:06:1e:22:2a:3a:79:
a2:0c:1c:6f:3c:83:40:61:35:04:23:bd:9e:b1:af:
f6:6c:5e:63:81:2d:cd:72:55:73:70:4c:7d:07:27:
68:34:0c:3b:aa:0b:ea:8c:86:3d:63:cd:93:73:a8:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:90:A5:A1:C5:CC:24:46:6A:23:2E:E9:EE:CF:FD:D8:97:29:B6:44
X509v3 Authority Key Identifier:
keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/9D8354BCE28311EDBDF7BBB32F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.84.224.0/19
41.215.144.0/20
154.119.96.0/19
Signature Algorithm: sha256WithRSAEncryption
04:f3:33:ee:7f:a3:44:26:82:45:49:24:51:e6:d2:c3:a3:85:
f1:22:c4:ca:5a:de:39:24:0f:8b:42:95:93:10:2c:3c:71:da:
78:19:02:0b:84:39:fb:fa:1d:95:b3:85:3b:fd:a1:21:da:29:
44:23:fa:de:6a:ba:4f:b3:5b:e4:0d:48:e7:33:94:17:be:85:
5b:b5:9f:c6:08:57:d7:a7:66:9a:c5:cc:a4:c1:30:53:74:f2:
54:12:73:99:d4:76:7e:47:65:dc:ef:24:71:fa:bf:5e:54:94:
09:0a:70:6b:08:ab:3e:67:e0:97:dc:90:9b:c5:f0:45:bc:5f:
a5:33:cf:b7:53:45:9a:0f:63:41:53:c8:df:3d:74:07:e5:1c:
bd:70:f9:bc:d8:ad:73:38:da:73:0f:5e:4b:52:69:93:87:db:
3e:9e:86:a3:47:6f:c4:9e:4f:1e:6b:66:13:2a:22:10:09:a5:
37:63:ea:03:50:70:65:40:6b:34:60:8f:30:88:ff:ee:3e:f9:
c1:72:33:68:1c:33:d7:2c:54:ca:dd:e4:04:0b:a9:ee:36:ae:
82:f3:bc:47:c6:2b:63:af:1b:89:33:6f:ee:cc:83:10:c6:71:
11:a0:95:62:d3:d8:68:da:b1:bb:3b:35:71:55:93:bb:8a:80:
2f:68:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org