Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/6252264A499111EFA2D88A8E762E951A.roa
File: 6252264A499111EFA2D88A8E762E951A.roa (raw, json)
Hash identifier: S9YjLd9WwVLsd2NGStK6Rn6YB11FvJ3zMiW0m+lxXIk=
Subject key identifier: 85:59:76:8D:A6:C0:72:1D:84:E6:EF:1D:1A:43:18:B3:FA:18:10:A9
Certificate issuer: /CN=F3650F65RI/serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
Certificate serial: 05
Authority key identifier: F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
Authority info access: rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/6252264A499111EFA2D88A8E762E951A.roa
Signing time: Wed 24 Jul 2024 07:50:24 +0000
ROA not before: Wed 24 Jul 2024 07:50:20 +0000
ROA not after: Mon 31 Jul 2034 07:50:20 +0000
asID: 37114
IP address blocks: 212.96.16.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jul 2024 10:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650F65RI/serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
Validity
Not Before: Jul 24 07:50:20 2024 GMT
Not After : Jul 31 07:50:20 2034 GMT
Subject: CN=66a0b240-a1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:22:f1:02:42:96:0b:aa:a5:81:93:cc:30:f2:
a3:bf:5b:db:77:0a:6f:36:3a:06:0c:1f:77:0d:ee:
45:45:d3:09:6a:4f:fc:50:4e:f6:33:f1:3b:ba:10:
2b:13:88:58:28:64:c2:0a:78:30:09:b7:8a:ae:ee:
d0:54:ea:79:7b:bf:3d:4d:25:b6:8c:07:78:2a:04:
b7:67:a4:c8:8a:97:26:a8:b0:13:9e:8a:ec:45:28:
af:d6:25:7a:60:70:c6:25:ba:27:39:4b:2d:55:b4:
86:4d:d5:af:1f:da:78:02:c9:38:10:2f:97:c0:ba:
92:87:2d:6e:44:4c:83:92:fb:43:7c:ac:6f:a6:b9:
4a:58:55:f2:28:38:08:36:64:d5:2e:97:ac:ac:26:
a4:56:58:03:6a:33:b3:84:f6:e1:15:5f:91:07:dd:
78:4b:31:b1:35:ef:c3:7e:d3:1f:d8:b7:eb:0d:03:
1f:0a:8b:4c:06:a0:93:66:01:e3:e7:39:7b:ee:ac:
1b:9d:8b:8a:c2:dc:33:45:a1:37:21:69:d2:e6:9a:
bd:75:c7:ac:cf:a3:01:39:d3:61:e5:6f:58:d7:ef:
12:eb:82:32:a8:7a:da:3d:57:b7:51:9e:a1:61:0b:
7e:a9:ce:68:dc:23:32:89:be:9a:47:5a:9c:64:e4:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:76:8D:A6:C0:72:1D:84:E6:EF:1D:1A:43:18:B3:FA:18:10:A9
X509v3 Authority Key Identifier:
keyid:F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/6252264A499111EFA2D88A8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
212.96.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:ab:0a:f3:c4:0e:95:5a:9f:94:a8:8b:72:e3:4b:4d:9e:79:
a6:81:3c:6f:0a:0a:a9:32:93:c5:ea:aa:bb:01:a1:c3:7c:79:
f3:86:81:43:f4:3f:5e:40:5e:91:dc:6c:aa:bf:7f:8d:82:64:
d6:11:ff:f4:a1:fd:5e:33:66:bb:03:d5:0a:56:b2:a3:84:a7:
5c:a6:07:04:99:c0:cd:a7:c0:e2:6e:cb:d4:65:21:67:b8:c7:
d3:df:0c:08:70:c4:3f:cd:c6:b2:51:18:ab:8d:f3:f7:14:38:
ac:be:49:cf:b6:14:14:1b:47:95:e4:ea:13:45:10:2c:e8:ef:
97:51:4d:aa:22:c7:52:fd:b4:37:52:c2:63:c3:4b:5b:1e:37:
d4:ab:a0:5b:42:43:a3:11:af:a2:ff:29:2b:bc:a9:6b:3c:4e:
11:75:ff:87:d5:12:66:52:47:0f:ef:bb:80:ff:98:53:9e:1e:
c5:b8:3f:ce:98:3c:2f:42:99:86:e7:79:f1:90:76:74:f4:62:
5a:0d:3c:f9:01:08:c5:82:3c:2e:3d:e2:78:44:a0:ca:49:c7:
86:b2:ac:fa:4a:76:78:a0:36:37:60:e7:97:bd:58:b2:fd:3e:
ce:4c:05:fa:c3:bd:67:b9:19:73:79:61:79:22:aa:09:0f:ad:
2b:09:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 15:53:32 2024 by rpki-client on console-ams.rpki-client.org