Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/ABD11286DDE011EDA73ACBA12F6D8C1D.roa
File: ABD11286DDE011EDA73ACBA12F6D8C1D.roa (raw, json)
Hash identifier: CrSZVkLn2mG+v90N9rYKKKXC6NyGXT2ZyjgvWgDINzw=
Subject key identifier: AA:E3:2F:CB:EE:61:7C:7D:EE:75:FA:6F:93:A4:CD:3F:24:E6:CE:93
Certificate issuer: /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial: 02
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/ABD11286DDE011EDA73ACBA12F6D8C1D.roa
Signing time: Tue 18 Apr 2023 12:00:54 +0000
ROA not before: Tue 18 Apr 2023 12:00:44 +0000
ROA not after: Mon 18 Apr 2033 12:00:44 +0000
asID: 19711
IP address blocks: 41.84.224.0/19 maxlen: 19
41.215.144.0/20 maxlen: 20
154.119.96.0/19 maxlen: 19
2001:4338::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Apr 2023 09:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AF
Validity
Not Before: Apr 18 12:00:44 2023 GMT
Not After : Apr 18 12:00:44 2033 GMT
Subject: CN=643e8676-88b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:69:9a:bd:39:2f:65:23:4b:ec:50:29:0b:
24:ef:51:61:05:ed:17:dd:7b:93:e8:da:82:cf:73:
56:ad:31:92:7a:94:ac:f0:ea:c4:60:f5:d3:92:16:
11:4c:9b:b2:f0:06:8a:29:5f:53:62:57:6e:08:85:
4a:cd:50:96:88:10:c0:d1:d5:3d:62:3c:a2:28:ed:
33:b1:0f:3b:41:cc:01:ca:47:01:d8:ab:2e:c6:55:
38:bf:3e:56:21:4c:40:f2:29:82:e8:8d:6b:f2:2c:
80:a0:92:a8:13:9e:db:ac:2b:35:f2:8b:f1:56:7e:
d5:cb:aa:3c:8b:d5:a7:e4:4e:0d:11:5e:7b:81:ad:
b8:87:b0:13:d5:21:cd:64:82:23:44:7a:80:bb:d2:
53:de:f4:e5:0d:a2:a0:ff:9f:c3:32:8c:9a:26:52:
72:9f:2f:10:94:7d:fa:7b:42:70:41:89:19:c5:49:
5d:17:da:07:38:d6:2f:17:86:c5:81:83:ce:20:ef:
84:01:f6:db:3b:e6:96:69:bd:c7:93:aa:0b:8d:f3:
9b:fc:ce:e7:1c:e8:91:47:ff:37:98:9e:cd:a4:a0:
43:d8:79:4d:7d:6b:83:60:1c:8a:e6:8c:50:50:15:
16:03:2b:bc:2c:55:79:83:b4:f4:6e:f3:af:cc:c4:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:2F:CB:EE:61:7C:7D:EE:75:FA:6F:93:A4:CD:3F:24:E6:CE:93
X509v3 Authority Key Identifier:
keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/ABD11286DDE011EDA73ACBA12F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.84.224.0/19
41.215.144.0/20
154.119.96.0/19
IPv6:
2001:4338::/32
Signature Algorithm: sha256WithRSAEncryption
2f:76:57:78:3f:bf:33:f9:b0:83:f2:c4:c7:47:56:da:0e:06:
41:8d:1d:c5:f4:7f:6d:03:bb:2a:4a:82:be:79:c3:ae:38:a5:
e5:25:90:7a:c7:f3:27:79:c2:2f:59:81:ff:1e:0b:b6:e5:d8:
f7:f0:df:92:0f:c2:e3:9e:95:8c:15:7c:4a:04:76:6d:1f:0e:
1c:6f:13:a4:ed:e5:21:06:cc:ee:56:2d:f4:4f:c7:94:9d:7e:
b1:63:89:69:40:63:9b:ff:88:d8:89:71:2b:c2:12:2b:09:44:
37:5e:6a:cc:74:96:2d:87:17:fd:90:ef:f2:e6:05:06:71:ed:
8f:4f:a1:29:53:6e:06:bb:35:af:0f:fc:6e:ef:6d:83:31:4d:
f5:5a:6d:a1:f6:62:f1:c0:fa:7c:58:79:77:80:77:8f:6c:0f:
f4:90:90:3e:95:0b:44:25:27:80:d1:65:9b:ce:8b:f2:82:de:
96:9f:5b:b5:79:2f:18:6a:eb:b9:2c:11:e0:8c:80:92:a3:ae:
9e:96:33:8f:5d:a7:59:49:1a:9f:86:85:b1:76:e7:9c:f9:d1:
1e:5d:0f:b5:77:7e:67:ca:3a:d2:49:c1:3d:22:b8:7c:08:2a:
ca:d4:46:2f:89:6f:5d:4f:96:8b:97:56:0d:eb:75:fa:81:35:
8f:de:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:00:59 2025 by rpki-client