Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/F0D84C86BED711EEB6AE9D8E775412E6.roa
File: F0D84C86BED711EEB6AE9D8E775412E6.roa (raw, json)
Hash identifier: bWKN+tasH4sxU42/eTDAS6+t2G674qlrKdSwUqdCKG4=
Subject key identifier: 90:83:08:61:9E:D0:C9:10:5D:6A:CC:0E:3C:DB:90:FF:DA:95:FF:5A
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 6B
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/F0D84C86BED711EEB6AE9D8E775412E6.roa
Signing time: Mon 29 Jan 2024 18:55:16 +0000
ROA not before: Mon 29 Jan 2024 18:55:13 +0000
ROA not after: Sat 29 Jan 2028 18:55:13 +0000
asID: 37073
IP address blocks: 41.216.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 29 Jan 2024 20:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: Jan 29 18:55:13 2024 GMT
Not After : Jan 29 18:55:13 2028 GMT
Subject: CN=65b7f494-cc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:cd:3f:4a:c6:c1:f2:8e:34:e4:d2:70:46:
0e:0a:57:bd:e7:63:26:18:1c:92:c8:31:81:0b:d3:
e4:d2:ef:33:be:0a:ae:0e:ca:65:78:4d:fe:5c:dc:
01:83:57:31:da:1d:3f:33:3c:02:c1:f7:7c:01:a1:
37:c5:06:34:d9:b7:e4:cb:5b:5c:6a:19:be:65:5d:
b2:0d:b2:84:05:24:77:10:c3:71:f6:e5:2b:3c:0a:
94:68:1d:96:b6:8b:b5:29:37:70:2e:5a:99:94:c9:
5c:ea:3e:96:5e:8d:23:58:05:b6:98:61:7e:92:a7:
3d:7a:73:b3:b1:99:d7:72:bb:c7:c8:de:31:69:56:
41:e6:c4:e4:37:8a:7c:c9:93:d5:2e:f2:0f:46:30:
d6:56:77:18:c1:af:06:07:fb:90:e0:0b:3b:13:7a:
d7:20:19:41:c0:76:f1:33:03:06:8b:0c:4f:7f:3a:
26:6a:48:ca:c2:30:e9:25:1e:8e:2f:f6:26:57:e4:
d3:5b:3c:73:3c:98:3d:67:38:51:84:54:74:e2:9e:
f6:38:ec:21:b7:69:65:4e:7e:7e:11:b1:41:e9:ee:
aa:00:bc:87:ab:66:ed:02:2c:1f:a7:00:b1:4d:fa:
a6:4e:30:59:25:ea:75:60:a0:78:d4:8e:5e:e2:3b:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:83:08:61:9E:D0:C9:10:5D:6A:CC:0E:3C:DB:90:FF:DA:95:FF:5A
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/F0D84C86BED711EEB6AE9D8E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.144.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:a2:32:c5:ce:27:ec:8a:a5:0e:0c:bb:08:3c:e1:db:2a:6d:
67:00:50:f6:d2:a4:19:a0:f5:98:dc:00:bf:6d:6f:ec:48:48:
1f:a8:9b:6d:92:04:19:12:ef:4a:09:26:fc:34:45:fb:3b:c9:
30:e5:c3:05:bd:d6:0f:f8:dd:1f:3e:cd:62:2b:8d:ce:e1:f7:
07:5c:f0:cb:78:37:78:03:93:4e:f5:f0:74:2d:3f:45:94:ee:
c5:14:a0:2f:68:17:6b:90:e3:a8:3c:22:c3:4a:cf:3e:ff:ee:
f0:9d:f2:3e:47:3a:5b:09:0c:3a:62:44:36:0d:a2:b3:f7:60:
96:f2:4f:5e:7e:7c:b2:e8:e8:12:88:64:f1:8c:15:28:38:29:
f6:6e:f4:92:59:45:dc:07:c8:ee:8b:b8:8a:5e:21:83:55:50:
4c:fd:c4:b1:e8:92:23:2a:d9:c5:1f:9e:32:ae:20:2b:18:65:
01:46:44:5b:c0:23:5c:2a:ad:86:17:77:89:c4:5e:e6:48:19:
80:d5:3a:33:71:c7:08:a5:3f:3a:a9:88:1a:ff:db:df:d4:53:
f8:6e:30:7e:8b:71:d1:c3:a4:05:15:b8:21:cb:c7:b9:c6:71:
cb:08:84:fa:44:66:3c:f7:79:40:68:e1:3b:1c:ad:b5:4d:72:
7e:01:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org