Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/5D42C746348C11EFA981FDB4762E951A.roa
File: 5D42C746348C11EFA981FDB4762E951A.roa (raw, json)
Hash identifier: keTIlpRK3gf5PUv0yADQ6UDtZI5qBQh3+RJqaVbLiLs=
Subject key identifier: 94:A6:3D:9D:4D:5B:5B:09:93:7D:CB:4A:BB:58:C1:F0:2D:D6:98:1C
Certificate issuer: /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial: 03
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/5D42C746348C11EFA981FDB4762E951A.roa
Signing time: Thu 27 Jun 2024 13:51:34 +0000
ROA not before: Thu 27 Jun 2024 13:51:30 +0000
ROA not after: Mon 30 Jun 2025 13:51:30 +0000
asID: 37030
IP address blocks: 41.215.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 27 Jun 2024 16:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Validity
Not Before: Jun 27 13:51:30 2024 GMT
Not After : Jun 30 13:51:30 2025 GMT
Subject: CN=667d6e66-1901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:04:c4:5f:87:55:45:64:c6:3f:d9:27:c4:
4d:c7:5d:0e:6c:2d:40:2a:53:9b:67:3f:b5:97:d1:
2f:0f:cc:86:1e:64:ad:c6:1e:4c:d2:23:2a:f5:6b:
cd:3c:0f:f0:6c:b7:26:a9:97:53:a1:0f:22:ab:ba:
54:95:ec:ea:da:88:c0:a3:fe:45:91:bc:92:60:ce:
23:2f:45:20:1c:d5:98:58:6a:92:29:37:08:d4:a8:
7e:d0:a8:10:f9:70:bb:df:c0:bb:fa:38:c7:78:69:
dc:b0:d8:bd:3b:f4:53:82:02:c3:5c:b4:b1:d9:98:
a4:e7:25:3e:31:a6:92:34:80:df:82:5c:e4:39:10:
c0:75:2e:93:93:9f:43:73:47:57:2f:c9:9d:60:e2:
4e:e3:f0:aa:27:10:47:9c:cb:40:f2:fe:53:eb:1b:
df:8f:32:3d:af:ff:1b:99:b8:b0:66:ef:d1:67:1c:
13:a0:c3:c5:2f:3f:0d:dd:99:e7:d5:b2:e6:5e:b6:
50:3c:91:73:35:fc:6e:5a:0d:6e:36:d6:54:bd:e8:
1b:68:e1:cd:c6:23:b2:75:e1:3a:ca:80:bd:f8:a5:
11:f1:fe:b9:af:23:8e:37:9e:c0:d4:65:bb:eb:f4:
e4:98:fd:b8:21:2e:b8:f9:27:f4:55:22:6d:c5:c8:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A6:3D:9D:4D:5B:5B:09:93:7D:CB:4A:BB:58:C1:F0:2D:D6:98:1C
X509v3 Authority Key Identifier:
keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/5D42C746348C11EFA981FDB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.160.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:84:4b:ea:66:b3:60:5b:26:ef:46:bd:a7:fc:37:98:dd:bc:
32:e8:35:19:5a:cc:8f:b8:b8:eb:d1:db:d4:09:66:59:83:d4:
4f:f5:b4:e4:5c:05:6a:ce:90:5d:44:d2:95:b6:b0:a6:12:13:
c4:8c:cc:ab:24:25:17:f5:2b:62:ee:e6:59:c5:b6:8d:36:b9:
16:53:8c:f1:b6:d5:30:7f:f8:f9:d9:93:8e:08:74:ff:f3:c8:
ef:80:32:01:be:d5:f2:82:03:6c:25:fe:1d:36:e6:0a:14:93:
78:55:76:af:0c:4a:4a:9b:53:14:34:5e:48:37:b3:f0:e8:43:
6e:f9:e4:52:5f:10:af:23:83:e8:89:64:f0:47:18:eb:7b:ba:
46:c6:66:09:dd:3e:58:73:aa:d1:07:ae:69:5e:f7:48:08:03:
23:84:d3:b2:e7:48:52:05:b9:8d:16:07:e5:27:49:08:26:ec:
8b:ff:ae:be:8b:8b:a0:e3:90:55:c8:ff:35:43:59:c5:82:52:
6e:59:df:ee:a7:35:0d:ba:62:16:29:fc:9e:c4:a4:06:82:3c:
6b:c8:d4:4d:3e:97:f2:db:96:25:ec:ed:2b:c9:79:52:56:3d:
76:f6:43:e6:03:8d:6f:1e:1d:b2:4b:b5:08:da:24:db:80:61:
02:b6:04:ae
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MkNCMUFGMTEwLwYDVQQFEyg0ODJERUVDMjkxMzBFRDIwMkQ4Mzk5RDY5QTEzMjY5
QUE2MTJBRkQzMB4XDTI0MDYyNzEzNTEzMFoXDTI1MDYzMDEzNTEzMFowGDEWMBQG
A1UEAxMNNjY3ZDZlNjYtMTkwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOS1BMRfh1VFZMY/2SfETcddDmwtQCpTm2c/tZfRLw/Mhh5krcYeTNIjKvVr
zTwP8Gy3JqmXU6EPIqu6VJXs6tqIwKP+RZG8kmDOIy9FIBzVmFhqkik3CNSoftCo
EPlwu9/Au/o4x3hp3LDYvTv0U4ICw1y0sdmYpOclPjGmkjSA34Jc5DkQwHUuk5Of
Q3NHVy/JnWDiTuPwqicQR5zLQPL+U+sb348yPa//G5m4sGbv0WccE6DDxS8/Dd2Z
59Wy5l62UDyRczX8bloNbjbWVL3oG2jhzcYjsnXhOsqAvfilEfH+ua8jjjeewNRl
u+v05Jj9uCEuuPkn9FUibcXIAR8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSUpj2d
TVtbCZN9y0q7WMHwLdaYHDAfBgNVHSMEGDAWgBRILe7CkTDtIC2DmdaaEyaaphKv
0zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDJDQjEvMkEyMzg0NTIzNDg5MTFFRjk2Qzk4RDlFNzYyRTk1MUEvU0MzdXdw
RXc3U0F0ZzVuV21oTW1tcVlTcjlNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvU0MzdXdwRXc3U0F0ZzVuV21oTW1tcVlTcjlNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDJDQjEvMkEyMzg0NTIzNDg5MTFFRjk2Qzk4RDlFNzYy
RTk1MUEvNUQ0MkM3NDYzNDhDMTFFRkE5ODFGREI0NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCnXoDANBgkqhkiG9w0BAQsF
AAOCAQEAtIRL6mazYFsm70a9p/w3mN28Mug1GVrMj7i469Hb1AlmWYPUT/W05FwF
as6QXUTSlbawphITxIzMqyQlF/UrYu7mWcW2jTa5FlOM8bbVMH/4+dmTjgh0//PI
74AyAb7V8oIDbCX+HTbmChSTeFV2rwxKSptTFDReSDez8OhDbvnkUl8QryOD6Ilk
8EcY63u6RsZmCd0+WHOq0QeuaV73SAgDI4TTsudIUgW5jRYH5SdJCCbsi/+uvouL
oOOQVcj/NUNZxYJSblnf7qc1DbpiFin8nsSkBoI8a8jUTT6X8tuWJeztK8l5UlY9
dvZD5gONbx4dsku1CNok24BhArYErg==
-----END CERTIFICATE-----
Generated at Fri Jun 28 00:03:41 2024 by rpki-client on console-ams.rpki-client.org