Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/CB7AC1301C9811EEA6A864414AD9E6FC.roa
File: CB7AC1301C9811EEA6A864414AD9E6FC.roa (raw, json)
Hash identifier: nHuY/DWANyUE/1ELsHWDz5jj1RuEDyxJW8lpmv5buqQ=
Subject key identifier: A8:6E:3B:D0:B5:46:24:6F:B8:6C:CA:18:E8:91:C7:95:DC:17:F0:E6
Certificate issuer: /CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
Certificate serial: 046F
Authority key identifier: AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/CB7AC1301C9811EEA6A864414AD9E6FC.roa
Signing time: Fri 07 Jul 2023 07:35:07 +0000
ROA not before: Fri 07 Jul 2023 07:35:03 +0000
ROA not after: Mon 06 Jul 2026 07:35:03 +0000
asID: 36932
IP address blocks: 196.216.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 09:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135 (0x46f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
Validity
Not Before: Jul 7 07:35:03 2023 GMT
Not After : Jul 6 07:35:03 2026 GMT
Subject: CN=64a7c02b-0fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:24:a5:08:5b:8b:d3:57:37:ed:c4:af:81:
4f:c9:d8:b1:89:7d:78:15:3b:70:77:21:12:f6:41:
75:da:58:b0:7a:08:f4:e0:e9:9e:26:e3:e3:0c:a6:
3b:d0:6b:cc:6b:90:40:b6:3f:6f:18:ac:eb:33:20:
84:d2:96:82:b8:0a:7f:23:b9:be:3c:98:1d:29:99:
c7:13:77:98:a5:20:f7:f9:0f:1f:01:60:95:83:a1:
ce:5e:20:b4:cf:db:c5:53:5c:0b:db:5b:83:eb:f2:
58:39:12:2a:8d:84:cf:3e:11:63:10:06:16:c7:22:
1d:fb:72:cb:2c:6b:fd:73:28:43:f4:ef:09:36:31:
c6:92:85:37:6e:59:7d:02:0b:3e:24:8b:b9:2b:fb:
01:64:f8:7c:74:20:25:c5:fc:50:81:b2:fa:00:f2:
39:58:f6:55:2a:6d:b2:77:d1:c2:7f:6b:87:70:83:
66:a8:e4:b6:2d:e5:55:51:44:aa:a3:2a:f6:73:b2:
b2:18:b9:a2:01:00:4e:34:af:0a:27:8c:9f:ea:68:
48:f2:cd:e3:7f:89:da:51:4f:17:39:39:bd:f4:3e:
96:42:01:10:f2:97:f9:68:f2:a4:d4:75:ad:6a:21:
1a:21:5b:40:73:cc:a3:67:80:df:c2:58:d0:09:7c:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6E:3B:D0:B5:46:24:6F:B8:6C:CA:18:E8:91:C7:95:DC:17:F0:E6
X509v3 Authority Key Identifier:
keyid:AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/CB7AC1301C9811EEA6A864414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.151.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d6:a4:dc:e7:f5:8c:a3:f3:61:51:dc:2a:c9:f2:e3:75:ec:
f1:bd:d0:f7:11:06:63:1d:44:87:5a:83:b9:34:e4:cf:cf:bd:
db:d8:f7:ce:03:18:6e:df:25:01:cb:d9:8c:bc:fd:cb:c7:b6:
15:36:ed:0d:25:91:f2:af:f8:ef:97:07:a9:82:53:25:39:3a:
c0:1f:4c:0a:fd:b9:10:b9:ff:7b:79:14:6f:fb:91:b7:fe:8f:
e4:4c:de:a5:aa:27:b9:12:4a:05:87:01:82:a3:c4:a8:f2:99:
37:18:3e:43:f2:e9:e9:ca:8f:3d:33:bc:10:c6:b7:72:c1:0f:
7c:f8:4e:4b:46:a9:e1:9e:00:38:52:08:d7:1d:f7:50:ee:bd:
48:50:f9:06:0b:89:23:31:fc:23:32:44:e0:8e:e9:c2:41:81:
e4:f2:e0:e7:a2:ab:39:43:ac:f9:af:f7:e0:2b:16:2c:e7:3b:
61:0e:08:72:04:5a:07:26:42:c6:7d:ae:85:eb:40:44:f9:81:
06:66:a2:c9:85:a8:0f:de:ed:d1:2d:e7:c7:8b:a1:d5:0f:e3:
aa:22:b2:2a:ef:3f:0d:69:10:9f:48:d3:17:25:af:7d:e0:bb:
8f:db:b2:92:fa:49:36:dd:70:f9:20:38:19:c7:d0:e9:d0:68:
f3:4c:1b:2c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NDgxNEZBRjExMC8GA1UEBRMoQUJGOTk2MEM4NUJDRjg5MzhENTgzMzdGOENCN0M1
RUI0REM0QjNBRTAeFw0yMzA3MDcwNzM1MDNaFw0yNjA3MDYwNzM1MDNaMBgxFjAU
BgNVBAMTDTY0YTdjMDJiLTBmZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdZySlCFuL01c37cSvgU/J2LGJfXgVO3B3IRL2QXXaWLB6CPTg6Z4m4+MM
pjvQa8xrkEC2P28YrOszIITSloK4Cn8jub48mB0pmccTd5ilIPf5Dx8BYJWDoc5e
ILTP28VTXAvbW4Pr8lg5EiqNhM8+EWMQBhbHIh37csssa/1zKEP07wk2McaShTdu
WX0CCz4ki7kr+wFk+Hx0ICXF/FCBsvoA8jlY9lUqbbJ30cJ/a4dwg2ao5LYt5VVR
RKqjKvZzsrIYuaIBAE40rwonjJ/qaEjyzeN/idpRTxc5Ob30PpZCARDyl/lo8qTU
da1qIRohW0BzzKNngN/CWNAJfHstAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUqG47
0LVGJG+4bMoY6JHHldwX8OYwHwYDVR0jBBgwFoAUq/mWDIW8+JONWDN/jLfF603E
s64wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ4MTRGLzlFNUU4REE0QzJCRDExRUE4NTkwOUUzMUY4QUVBMjI4L3FfbVdE
SVc4LUpPTldETl9qTGZGNjAzRXM2NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FfbVdESVc4LUpPTldETl9qTGZGNjAzRXM2NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ4MTRGLzlFNUU4REE0QzJCRDExRUE4NTkwOUUzMUY4
QUVBMjI4L0NCN0FDMTMwMUM5ODExRUVBNkE4NjQ0MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE2JcwDQYJKoZIhvcNAQEL
BQADggEBAInWpNzn9Yyj82FR3CrJ8uN17PG90PcRBmMdRIdag7k05M/PvdvY984D
GG7fJQHL2Yy8/cvHthU27Q0lkfKv+O+XB6mCUyU5OsAfTAr9uRC5/3t5FG/7kbf+
j+RM3qWqJ7kSSgWHAYKjxKjymTcYPkPy6enKjz0zvBDGt3LBD3z4TktGqeGeADhS
CNcd91DuvUhQ+QYLiSMx/CMyROCO6cJBgeTy4OeiqzlDrPmv9+ArFiznO2EOCHIE
WgcmQsZ9roXrQET5gQZmosmFqA/e7dEt58eLodUP46oisirvPw1pEJ9I0xclr33g
u4/bspL6STbdcPkgOBnH0OnQaPNMGyw=
-----END CERTIFICATE-----
Generated at Tue Apr 30 15:11:53 2024 by rpki-client on console-fra.rpki-client.org