Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/237440F4053911EEAEEE11754AD9E6FC.roa
File: 237440F4053911EEAEEE11754AD9E6FC.roa (raw, json)
Hash identifier: SHos7t/p+Iv7MITAKzljaGAr8ihH7qBJK4PUxpZi+D0=
Subject key identifier: 30:2F:21:ED:11:15:53:4D:1E:3A:D4:7F:01:46:09:03:F6:AD:0C:3A
Certificate issuer: /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial: 0319
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/237440F4053911EEAEEE11754AD9E6FC.roa
Signing time: Wed 07 Jun 2023 13:42:26 +0000
ROA not before: Wed 07 Jun 2023 13:42:21 +0000
ROA not after: Mon 30 Jun 2025 13:42:21 +0000
asID: 36925
IP address blocks: 2c0e:6000::/24 maxlen: 36
2c0f:fb20::/32 maxlen: 36
Validation: Failed, certificate revoked on Mon 31 Jul 2023 15:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Validity
Not Before: Jun 7 13:42:21 2023 GMT
Not After : Jun 30 13:42:21 2025 GMT
Subject: CN=64808942-90a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:f9:85:e7:32:d1:99:94:9f:57:9c:6c:bc:
65:99:04:ee:12:89:8f:7c:7e:96:eb:58:92:62:12:
c4:e5:e2:8f:38:c4:bd:43:a4:6c:13:d9:c7:0a:8a:
d8:14:0e:a4:fa:71:3e:1c:75:ec:78:bc:f6:b4:fc:
a2:bd:6b:75:0f:3c:4a:dc:40:16:26:09:47:57:77:
5d:11:0d:91:e0:a0:48:dc:6b:a6:77:aa:e6:97:85:
c7:82:ce:3e:c9:d2:ac:7c:cc:89:9a:94:1f:6f:6c:
f5:0e:a3:8e:86:4a:b0:57:37:4a:4a:9e:21:4c:f8:
45:c8:2a:28:38:48:3c:fa:f4:b6:e9:e4:5e:c8:89:
38:62:3f:fc:a7:70:d0:41:6a:ab:9b:0d:9e:13:ae:
e3:ed:ea:fc:b7:ba:38:2a:a5:61:e7:5d:ea:f6:72:
1a:63:0e:59:da:ad:7c:44:05:23:3c:7c:ad:56:03:
dd:2a:f2:dc:22:33:9f:d7:47:25:37:47:b2:00:97:
d7:53:1c:80:76:e5:da:5a:ca:e8:ac:2b:6d:fb:43:
17:e5:0c:0b:0e:8a:2c:1d:08:5d:d7:ed:dd:80:e1:
ea:1e:c1:e7:f9:81:76:2a:19:9c:29:7c:2e:fb:c6:
84:7d:5c:d5:fc:a7:8a:2f:36:27:b4:80:70:59:81:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:21:ED:11:15:53:4D:1E:3A:D4:7F:01:46:09:03:F6:AD:0C:3A
X509v3 Authority Key Identifier:
keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/237440F4053911EEAEEE11754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0e:6000::/24
2c0f:fb20::/32
Signature Algorithm: sha256WithRSAEncryption
a4:15:11:9d:2e:d6:7a:c5:c8:1b:59:b9:65:6d:5c:a8:e0:5e:
56:a8:4c:8c:a4:46:89:b0:77:e4:1c:f6:95:be:13:b4:21:75:
ad:be:25:26:c1:22:c7:66:fc:53:41:f0:11:a1:2d:62:7a:24:
a2:1a:e7:0c:9e:ef:63:b7:74:10:85:87:f1:0b:8a:9d:29:a9:
fc:c5:5f:85:c2:f5:5b:a3:84:21:a3:45:0b:7a:10:bd:09:95:
77:cc:c3:ea:d1:d1:8a:f1:ac:de:1a:db:a7:8e:8e:aa:9a:8b:
46:fb:8c:64:d9:31:3d:37:7a:5c:c8:21:bb:b7:ac:c8:0b:9a:
b6:36:70:ae:87:26:c9:ee:86:32:e7:52:3f:cb:6c:31:04:76:
27:f4:ce:69:49:7b:6a:85:13:da:d5:0c:32:4f:04:e2:45:69:
ae:10:04:95:82:3e:71:1c:9b:3d:74:f5:b7:b4:02:e1:a5:2f:
10:ef:e1:aa:60:32:87:82:f8:bc:c6:83:8b:88:83:01:f8:ba:
ac:db:69:89:86:60:bf:b4:60:70:ff:1a:56:70:f6:64:bf:c2:
4b:5e:70:83:6d:4e:33:82:20:c3:6d:ff:8f:76:a6:85:19:86:
3a:5c:17:63:b7:1f:78:4a:18:af:c2:35:36:a4:80:8a:bf:d9:
7b:80:37:6a
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NEFFNDRBRjExMC8GA1UEBRMoOEY1MDNCRDU3M0NFMTEzNTE3Q0Q2QjRDRkEzNzRB
NjJGMTVFMTJDMTAeFw0yMzA2MDcxMzQyMjFaFw0yNTA2MzAxMzQyMjFaMBgxFjAU
BgNVBAMTDTY0ODA4OTQyLTkwYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDI2vmF5zLRmZSfV5xsvGWZBO4SiY98fpbrWJJiEsTl4o84xL1DpGwT2ccK
itgUDqT6cT4cdex4vPa0/KK9a3UPPErcQBYmCUdXd10RDZHgoEjca6Z3quaXhceC
zj7J0qx8zImalB9vbPUOo46GSrBXN0pKniFM+EXIKig4SDz69Lbp5F7IiThiP/yn
cNBBaqubDZ4TruPt6vy3ujgqpWHnXer2chpjDlnarXxEBSM8fK1WA90q8twiM5/X
RyU3R7IAl9dTHIB25dpayuisK237QxflDAsOiiwdCF3X7d2A4eoewef5gXYqGZwp
fC77xoR9XNX8p4ovNie0gHBZgX2hAgMBAAGjggKsMIICqDAdBgNVHQ4EFgQUMC8h
7REVU00eOtR/AUYJA/atDDowHwYDVR0jBBgwFoAUj1A71XPOETUXzWtM+jdKYvFe
EsEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRBRTQ0LzIyMjcwRUZFQUY0NDExRUI4QzI1NzY4NkY4QUVBMjI4L2oxQTcx
WFBPRVRVWHpXdE0tamRLWXZGZUVzRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2oxQTcxWFBPRVRVWHpXdE0tamRLWXZGZUVzRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjRBRTQ0LzIyMjcwRUZFQUY0NDExRUI4QzI1NzY4NkY4
QUVBMjI4LzIzNzQ0MEY0MDUzOTExRUVBRUVFMTE3NTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJgYIKwYBBQUHAQcBAf8EFzAVMBMEAgACMA0DBAAsDmADBQAsD/sgMA0GCSqG
SIb3DQEBCwUAA4IBAQCkFRGdLtZ6xcgbWbllbVyo4F5WqEyMpEaJsHfkHPaVvhO0
IXWtviUmwSLHZvxTQfARoS1ieiSiGucMnu9jt3QQhYfxC4qdKan8xV+FwvVbo4Qh
o0ULehC9CZV3zMPq0dGK8azeGtunjo6qmotG+4xk2TE9N3pcyCG7t6zIC5q2NnCu
hybJ7oYy51I/y2wxBHYn9M5pSXtqhRPa1QwyTwTiRWmuEASVgj5xHJs9dPW3tALh
pS8Q7+GqYDKHgvi8xoOLiIMB+Lqs22mJhmC/tGBw/xpWcPZkv8JLXnCDbU4zgiDD
bf+PdqaFGYY6XBdjtx94ShivwjU2pICKv9l7gDdq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org