Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/8934CD38BEBF11EE8014BF64775412E6.roa
File: 8934CD38BEBF11EE8014BF64775412E6.roa (raw, json)
Hash identifier: dqe7u44tUGqexzW0DVb7gBdRWsDExDfrz+FWztsc1fQ=
Subject key identifier: D8:CA:43:41:8D:D6:07:A4:68:A4:A7:25:33:B5:76:87:35:9D:D0:71
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 67
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/8934CD38BEBF11EE8014BF64775412E6.roa
Signing time: Mon 29 Jan 2024 16:00:35 +0000
ROA not before: Mon 29 Jan 2024 16:00:31 +0000
ROA not after: Thu 29 Jan 2026 16:00:31 +0000
asID: 37073
IP address blocks: 41.216.149.0/24 maxlen: 24
41.216.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 17:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: Jan 29 16:00:31 2024 GMT
Not After : Jan 29 16:00:31 2026 GMT
Subject: CN=65b7cba2-5c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:f4:4f:16:5c:e3:96:9c:bc:3b:41:43:a4:
2a:8f:4a:f3:8d:62:f1:ba:88:b9:0c:5f:43:e9:b7:
8a:dd:e2:98:bd:20:dc:a8:ee:d9:22:9d:74:e9:da:
c3:89:7f:99:34:50:8e:e3:d3:44:9d:f4:01:82:05:
b5:a6:17:6c:3b:e6:f6:b9:fb:8c:c1:62:a9:2f:03:
26:32:41:fb:68:05:b7:d4:bc:2c:ae:61:d0:4d:6b:
52:51:07:cf:80:42:60:f6:aa:dd:7f:5a:1a:1a:4a:
9d:47:c7:d0:84:74:f8:1e:7c:3d:7b:70:69:7d:93:
12:9f:6a:bd:82:48:bc:39:54:c0:1b:96:36:b3:cf:
cf:41:6a:31:8d:1d:40:7a:04:61:3c:d7:ac:85:7b:
49:31:c5:47:e0:40:97:a8:53:e8:b4:54:23:99:77:
91:99:9d:0b:7d:b3:28:79:c3:ea:7a:7a:fc:fa:5f:
e4:97:b5:4e:ee:35:15:03:b9:39:a2:90:a1:16:ce:
1f:40:53:5d:87:68:a9:94:c1:bb:0e:3c:ee:de:a0:
d3:80:11:95:5d:03:76:a4:f4:4d:eb:c2:ea:dc:3f:
95:23:7c:00:d9:1f:b5:22:98:35:22:ff:7a:72:9c:
7f:3c:c0:b7:e1:94:f8:c2:f1:cc:fd:03:b3:34:15:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CA:43:41:8D:D6:07:A4:68:A4:A7:25:33:B5:76:87:35:9D:D0:71
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/8934CD38BEBF11EE8014BF64775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.149.0/24
41.216.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:85:44:f4:e1:f4:00:fa:da:6b:c3:5e:b9:61:11:78:cd:75:
4f:e7:76:2c:4f:ff:bb:1a:10:3d:d6:5e:d4:09:7d:77:ab:ca:
1b:0a:cf:67:a3:c6:bf:2f:c9:5c:f7:09:82:5c:2e:e0:4d:ef:
ae:f0:fc:15:fb:90:97:da:72:c2:28:df:42:8d:13:e7:6c:be:
fb:5c:b7:f2:27:75:1a:02:25:50:5c:cd:25:14:6c:4f:ae:bb:
89:a5:25:ae:5f:b3:29:31:24:fc:60:8f:ce:73:98:9b:ce:44:
04:82:1f:48:c9:ad:62:62:c1:ee:9e:99:94:6d:39:06:63:b0:
23:7c:2d:a0:e1:1e:e6:dd:2c:fb:dc:eb:3b:4e:a2:20:1c:97:
ae:41:c0:4e:08:81:18:5c:6e:a2:b3:ff:04:b9:56:f1:a6:4d:
23:0d:ad:8f:17:22:21:77:bd:53:40:fa:9c:0a:66:7c:01:6b:
b4:3b:3e:3e:bb:35:72:35:67:23:67:c4:58:49:3d:9e:65:dd:
16:10:2b:11:68:d7:89:72:2b:8e:f7:7e:1a:e5:e4:a4:84:96:
56:b1:cf:5e:d4:52:bb:d6:d4:8a:11:16:3e:af:fe:1e:93:c8:
59:f9:73:6e:a5:70:e9:37:af:84:11:c1:c8:37:14:96:91:62:
83:79:31:44
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIBZzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
MDU2N0FGMTEwLwYDVQQFEyg1RkMzN0RFQ0VCNzAwOEJCQTc0MTM0Nzg0NUI3NkI0
NzY3N0FFQTY5MB4XDTI0MDEyOTE2MDAzMVoXDTI2MDEyOTE2MDAzMVowGDEWMBQG
A1UEAxMNNjViN2NiYTItNWMzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ9f9E8WXOOWnLw7QUOkKo9K841i8bqIuQxfQ+m3it3imL0g3Kju2SKddOna
w4l/mTRQjuPTRJ30AYIFtaYXbDvm9rn7jMFiqS8DJjJB+2gFt9S8LK5h0E1rUlEH
z4BCYPaq3X9aGhpKnUfH0IR0+B58PXtwaX2TEp9qvYJIvDlUwBuWNrPPz0FqMY0d
QHoEYTzXrIV7STHFR+BAl6hT6LRUI5l3kZmdC32zKHnD6np6/Ppf5Je1Tu41FQO5
OaKQoRbOH0BTXYdoqZTBuw487t6g04ARlV0DdqT0TevC6tw/lSN8ANkftSKYNSL/
enKcfzzAt+GU+MLxzP0DszQVwV0CAwEAAaOCAqswggKnMB0GA1UdDgQWBBTYykNB
jdYHpGikpyUztXaHNZ3QcTAfBgNVHSMEGDAWgBRfw33s63AIu6dBNHhFt2tHZ3rq
aTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTA1NjcvMzNFMzMwMjY3NEJBMTFFRUFBOTRDMTczNEFEOUU2RkMvWDhOOTdP
dHdDTHVuUVRSNFJiZHJSMmQ2Nm1rLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWDhOOTdPdHdDTHVuUVRSNFJiZHJSMmQ2Nm1rLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTA1NjcvMzNFMzMwMjY3NEJBMTFFRUFBOTRDMTczNEFE
OUU2RkMvODkzNENEMzhCRUJGMTFFRTgwMTRCRjY0Nzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEACnYlQMEACnYnzANBgkqhkiG
9w0BAQsFAAOCAQEAGoVE9OH0APraa8NeuWEReM11T+d2LE//uxoQPdZe1Al9d6vK
GwrPZ6PGvy/JXPcJglwu4E3vrvD8FfuQl9pywijfQo0T52y++1y38id1GgIlUFzN
JRRsT667iaUlrl+zKTEk/GCPznOYm85EBIIfSMmtYmLB7p6ZlG05BmOwI3wtoOEe
5t0s+9zrO06iIByXrkHATgiBGFxuorP/BLlW8aZNIw2tjxciIXe9U0D6nApmfAFr
tDs+Prs1cjVnI2fEWEk9nmXdFhArEWjXiXIrjvd+GuXkpISWVrHPXtRSu9bUihEW
Pq/+HpPIWflzbqVw6TevhBHByDcUlpFig3kxRA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:04:58 2025 by rpki-client