Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/351A1F74348E11EF95EE2644762E951A.roa
File: 351A1F74348E11EF95EE2644762E951A.roa (raw, json)
Hash identifier: JVRFBhwMYPlg6psndNP8CkPfv9/Hve27i5AEl3FuwCU=
Subject key identifier: D6:67:68:8B:7C:33:9C:73:05:80:03:9B:88:4A:FD:65:8F:FB:07:BC
Certificate issuer: /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial: 05
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/351A1F74348E11EF95EE2644762E951A.roa
Signing time: Thu 27 Jun 2024 14:04:45 +0000
ROA not before: Thu 27 Jun 2024 14:04:42 +0000
ROA not after: Mon 30 Jun 2025 14:04:42 +0000
asID: 37030
IP address blocks: 41.190.88.0/22 maxlen: 22
196.172.0.0/14 maxlen: 14
197.190.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Thu 27 Jun 2024 16:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Validity
Not Before: Jun 27 14:04:42 2024 GMT
Not After : Jun 30 14:04:42 2025 GMT
Subject: CN=667d717d-b475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:dd:49:3b:41:c9:c2:cd:9a:94:39:6c:3a:
1c:96:a3:ad:3b:05:cb:46:eb:6a:19:5e:60:60:f8:
dc:a8:0f:e9:e6:f9:b3:d5:e4:de:d8:8d:84:64:0e:
f4:22:59:f2:b8:9f:09:43:0b:ed:a4:9b:f3:b7:2a:
91:6a:93:cf:8a:fa:dc:82:15:71:17:6c:fd:60:10:
3f:06:0d:4e:dc:5f:a0:88:76:b5:a7:76:21:db:48:
83:e8:e1:10:d3:50:62:f5:c5:e5:4d:55:97:f6:45:
87:7b:f2:ef:08:f4:c0:4a:c3:51:4f:4f:e5:05:dc:
54:e1:27:ce:0c:8d:ba:5e:35:a4:f1:8f:1e:af:bc:
59:97:22:56:98:76:40:de:c1:6c:12:71:68:47:32:
a5:c8:26:62:c5:f3:d1:ff:07:d6:aa:66:df:44:f5:
49:99:68:8e:c9:66:df:4a:14:58:ca:02:7b:3e:7e:
f8:cc:c1:62:c7:be:7d:e9:d0:e3:98:e5:65:02:2d:
0c:70:70:58:39:9a:f3:18:29:63:19:08:4a:b9:07:
84:40:0d:94:54:5c:f5:02:c5:d8:72:90:a4:80:ff:
0b:61:1d:72:55:01:58:05:bd:68:fc:b5:a4:f1:bc:
54:0f:74:70:78:60:ac:64:e3:cd:3a:bc:bf:d9:ed:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:67:68:8B:7C:33:9C:73:05:80:03:9B:88:4A:FD:65:8F:FB:07:BC
X509v3 Authority Key Identifier:
keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/351A1F74348E11EF95EE2644762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.190.88.0/22
196.172.0.0/14
197.190.0.0/15
Signature Algorithm: sha256WithRSAEncryption
77:b0:d6:f6:98:05:1d:83:64:a5:08:1c:91:57:e4:72:88:02:
ef:05:61:c4:8c:c8:33:7c:ae:26:73:ef:aa:9d:6f:9e:bc:e4:
8f:ae:fb:e3:18:92:c5:e4:4b:0a:ba:16:90:a8:58:7c:10:e8:
3f:50:5b:14:c6:37:d3:69:4d:a6:18:e5:49:a7:bd:5a:c8:7e:
ea:18:d1:81:ac:e7:3d:a0:72:9e:16:a4:ec:4d:a6:77:57:78:
00:86:a3:f1:38:47:49:f8:db:d7:5c:e0:21:9f:53:7b:14:a6:
15:51:3f:36:b8:43:83:64:77:a8:31:b4:bb:94:b0:32:e6:05:
d6:bc:9d:02:63:a5:20:19:e5:2e:db:cd:15:cb:75:de:b8:30:
ed:1b:d7:0c:ca:b9:be:8f:e9:3b:05:2a:fd:9a:82:20:39:b5:
31:79:d4:82:5f:0a:4f:42:dd:ac:0e:61:9d:88:3f:4b:5b:37:
d1:f8:6e:0a:b8:16:0a:2c:19:84:af:c5:dd:b9:9c:0b:bd:d7:
84:f6:a7:c0:94:5b:7f:e1:0c:62:82:b2:72:4a:a5:7e:a7:11:
cd:56:c3:8b:60:93:78:37:ac:d9:9f:6a:d7:39:3e:b8:34:b6:
32:ff:65:2f:b6:37:a7:90:cb:9d:97:c3:f1:5b:37:ec:49:24:
94:9e:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 20:47:28 2024 by rpki-client on console-fra.rpki-client.org