Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/AB55118692BB11EF93FD0A5A762E951A.roa
File: AB55118692BB11EF93FD0A5A762E951A.roa (raw, json)
Hash identifier: amo8SBteFG8REJkaTaKnlR7B/2yD3I2CTYCTaYa36oE=
Subject key identifier: 8B:2F:3E:94:6F:CF:2D:95:50:B7:24:CB:5E:1E:28:99:0B:C6:01:59
Certificate issuer: /CN=F364AE1CAF/serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
Certificate serial: 0240
Authority key identifier: BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/AB55118692BB11EF93FD0A5A762E951A.roa
Signing time: Fri 25 Oct 2024 10:27:00 +0000
ROA not before: Fri 25 Oct 2024 10:26:57 +0000
ROA not after: Mon 26 Oct 2026 10:26:57 +0000
asID: 37415
IP address blocks: 41.222.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 10:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AE1CAF/serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
Validity
Not Before: Oct 25 10:26:57 2024 GMT
Not After : Oct 26 10:26:57 2026 GMT
Subject: CN=671b7274-9610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:29:31:63:b6:70:1b:e8:ff:a7:98:16:05:
96:00:15:bf:0c:cb:de:a9:55:c5:8c:78:e4:7e:04:
e5:af:fd:3c:e4:4a:6e:fe:06:c2:43:47:b2:48:b4:
bb:80:31:e6:b4:3e:1b:f1:26:1a:78:0e:6b:0f:d0:
8b:68:95:37:09:b8:f1:ae:cf:f9:bc:06:73:d3:5d:
18:d1:f4:27:a6:57:cf:50:ee:ad:69:0a:b2:5d:f7:
b1:8d:47:a9:f8:d1:7e:ee:85:18:ae:e8:18:63:73:
ef:0e:a7:9a:1e:23:8c:08:9a:b5:ad:c8:a1:a3:78:
71:b4:e3:0b:86:19:dd:5a:e8:fd:3f:3a:4c:a8:6b:
e8:59:60:51:64:97:a4:53:b5:08:69:41:34:b4:ab:
b5:c5:b7:25:e6:86:8e:eb:42:34:da:d4:65:67:59:
4b:d6:03:ea:59:fa:8c:fc:7f:bf:2b:68:26:78:d2:
33:89:88:4f:da:f7:1f:da:0b:5f:2b:10:b5:a0:90:
1b:a8:fb:94:fc:ad:cb:09:28:ad:d6:1d:7f:24:76:
a8:c3:aa:d1:06:91:c3:d8:f0:80:fa:52:00:59:6b:
23:c0:6a:5f:fe:94:87:f0:dd:25:2e:27:56:91:95:
bc:7e:1a:07:c0:8f:a7:37:9e:26:78:47:3c:5e:9c:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2F:3E:94:6F:CF:2D:95:50:B7:24:CB:5E:1E:28:99:0B:C6:01:59
X509v3 Authority Key Identifier:
keyid:BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/AB55118692BB11EF93FD0A5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.217.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ce:a8:10:94:33:88:4c:cc:ef:ef:2f:7f:28:45:05:81:75:
e4:30:2e:a6:ca:94:d5:b2:37:28:11:d3:e1:33:e6:93:9b:cf:
eb:91:cf:46:66:93:aa:8e:83:a8:96:06:7f:72:8d:87:4c:4c:
63:39:8f:c4:3f:57:eb:e4:a6:48:34:47:01:93:84:26:43:14:
15:7c:08:8e:26:f2:0f:e0:cc:5f:a1:d8:ac:eb:c7:09:29:5b:
79:4d:72:f5:a8:ef:ef:c5:e9:dd:7d:55:8d:cf:8f:4f:a1:a1:
aa:d4:64:b6:5b:a3:0c:fd:0d:4f:bd:d1:ed:19:d8:c5:b8:b9:
c4:1e:dc:68:da:c8:cb:4d:bc:ee:09:6d:30:04:94:6f:e5:35:
6a:f5:72:c5:f6:cc:0e:e2:3d:85:b5:18:f4:e1:00:55:4a:01:
33:29:4e:99:a1:6b:af:ea:23:46:3e:93:67:a3:0e:e1:1b:69:
be:b9:e0:a0:eb:ea:36:7f:e4:13:02:7d:5b:a0:6c:74:b1:34:
ab:bb:42:19:ca:94:39:ce:90:2a:f7:74:eb:96:64:6b:4f:c9:
9a:27:10:99:79:e8:a0:fb:08:7f:c9:ef:f7:dc:b5:80:53:50:
d4:f1:d1:cc:56:44:05:e3:62:0b:26:5e:23:54:10:a2:65:8a:
fb:1f:4c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 15:00:19 2024 by rpki-client on console-ams.rpki-client.org