Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/CCFC233E90CE11EC9AD705A35A40D577.roa
File: CCFC233E90CE11EC9AD705A35A40D577.roa (raw, json)
Hash identifier: mjvqoYrPS4lGj1pYBU0qLZonXujTfVbi4rs7RwmSlJk=
Subject key identifier: 63:48:CA:8C:49:7C:84:1B:55:94:8D:CD:89:20:77:73:92:9F:E6:BC
Certificate issuer: /CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Certificate serial: 02
Authority key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/CCFC233E90CE11EC9AD705A35A40D577.roa
Signing time: Fri 18 Feb 2022 15:24:02 +0000
ROA not before: Fri 18 Feb 2022 15:23:57 +0000
ROA not after: Tue 18 Feb 2025 15:23:57 +0000
asID: 36955
IP address blocks: 41.211.96.0/20 maxlen: 20
41.211.112.0/20 maxlen: 20
2c0f:f7d0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 11 Oct 2024 21:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Validity
Not Before: Feb 18 15:23:57 2022 GMT
Not After : Feb 18 15:23:57 2025 GMT
Subject: CN=620fba12-96d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:de:6f:f3:b3:d8:4d:0d:6f:eb:3e:10:99:
d1:a7:6b:ec:99:da:16:da:8d:60:06:f3:d8:5b:3b:
3d:9f:85:c4:12:ee:b9:d3:d4:fa:0a:c3:80:97:85:
f8:67:7d:a9:6b:0f:cc:5c:22:f4:6e:aa:20:db:d9:
f2:49:3e:64:a2:b7:c2:1f:de:ba:eb:9e:02:3f:c9:
b5:c9:9c:a6:30:4f:65:fd:0e:78:12:e6:0d:5c:82:
6b:63:d8:d1:e0:a0:14:12:29:3f:3f:2c:07:5c:38:
f5:6d:bc:d9:67:b9:1f:19:bd:0b:0c:d2:5d:33:14:
11:0e:b9:c6:8a:72:06:a5:ea:7c:40:bc:2a:e7:b6:
fa:74:0e:43:52:53:2c:04:44:0c:33:84:09:dd:4c:
6d:8d:20:00:97:f4:f1:d4:15:f4:19:67:7e:0b:a7:
c5:89:e7:46:87:54:3f:02:31:be:e4:de:c5:ec:7c:
3a:39:cf:50:46:1a:31:71:b7:40:18:c3:d1:2f:d6:
9f:a2:50:c3:f2:78:c9:ae:10:a3:ce:48:2c:a7:16:
bb:e5:cb:14:2a:8f:4e:b3:fa:81:5e:06:00:1a:e6:
7a:23:66:ab:b4:b2:66:82:43:10:51:4d:c8:91:ac:
79:20:e5:fa:8c:c6:b8:76:e2:60:76:e4:06:4b:8f:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:CA:8C:49:7C:84:1B:55:94:8D:CD:89:20:77:73:92:9F:E6:BC
X509v3 Authority Key Identifier:
keyid:D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/CCFC233E90CE11EC9AD705A35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.211.96.0/19
IPv6:
2c0f:f7d0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:70:a9:a1:d9:6b:c3:00:04:51:9a:b4:29:90:8d:eb:fe:0b:
ce:5f:32:fa:18:05:da:c3:58:6d:a1:f3:7b:2c:18:35:92:29:
6a:3f:14:d6:96:40:db:5e:a8:92:b7:22:5e:a8:d6:33:3e:92:
b0:3c:ae:21:ab:62:3a:37:c5:94:7b:7c:03:0f:9b:52:42:09:
80:15:aa:49:a5:d4:a6:89:2d:33:5b:50:f4:a5:60:63:4c:56:
9d:1a:06:ba:1f:50:09:73:d7:f3:62:98:76:73:6f:14:62:ba:
cd:43:56:47:dc:4d:ee:dc:0a:bc:e0:3e:7c:2d:9c:bf:ad:e0:
5e:db:b8:aa:93:e9:b5:c7:0d:a0:28:79:58:97:50:07:ea:9e:
e8:e2:6c:92:90:cb:81:53:87:ce:b4:c9:83:0b:4c:b1:c2:a4:
d4:f8:a3:24:94:dd:3d:5d:11:d4:80:9e:e7:f2:5c:dd:75:08:
6d:3e:f0:ae:10:95:c1:3a:34:76:02:44:9d:08:ca:1b:4b:b0:
c2:a8:61:91:ce:42:b4:02:a1:5f:0a:d4:21:a4:90:bc:bd:89:
fa:56:89:c4:d7:ef:39:f2:61:b3:f1:51:e3:b5:23:a9:1a:39:
45:76:df:2c:f6:04:1e:89:f4:38:9b:8f:19:c2:2c:8c:3f:c8:
04:e3:c4:c9
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY1
NjM4N0FGMTEwLwYDVQQFEyhEMUM2NTc4MDFBREZDRTI1Njk0REZCQjFBOTVDNkNE
QTQ0N0UzQkJBMB4XDTIyMDIxODE1MjM1N1oXDTI1MDIxODE1MjM1N1owGDEWMBQG
A1UEAwwNNjIwZmJhMTItOTZkOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANCn3m/zs9hNDW/rPhCZ0adr7JnaFtqNYAbz2Fs7PZ+FxBLuudPU+grDgJeF
+Gd9qWsPzFwi9G6qINvZ8kk+ZKK3wh/euuueAj/JtcmcpjBPZf0OeBLmDVyCa2PY
0eCgFBIpPz8sB1w49W282We5Hxm9CwzSXTMUEQ65xopyBqXqfEC8Kue2+nQOQ1JT
LAREDDOECd1MbY0gAJf08dQV9BlnfgunxYnnRodUPwIxvuTexex8OjnPUEYaMXG3
QBjD0S/Wn6JQw/J4ya4Qo85ILKcWu+XLFCqPTrP6gV4GABrmeiNmq7SyZoJDEFFN
yJGseSDl+ozGuHbiYHbkBkuPhFsCAwEAAaOCArQwggKwMB0GA1UdDgQWBBRjSMqM
SXyEG1WUjc2JIHdzkp/mvDAfBgNVHSMEGDAWgBTRxleAGt/OJWlN+7GpXGzaRH47
ujAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTYzODcvQzc4RUVGOTA5MENEMTFFQzhCN0IyOUEwNUE0MEQ1NzcvMGNaWGdC
cmZ6aVZwVGZ1eHFWeHMya1ItTzdvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMGNaWGdCcmZ6aVZwVGZ1eHFWeHMya1ItTzdvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTYzODcvQzc4RUVGOTA5MENEMTFFQzhCN0IyOUEwNUE0
MEQ1NzcvQ0NGQzIzM0U5MENFMTFFQzlBRDcwNUEzNUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBSnTYDANBAIAAjAHAwUALA/3
0DANBgkqhkiG9w0BAQsFAAOCAQEAXnCpodlrwwAEUZq0KZCN6/4Lzl8y+hgF2sNY
baHzeywYNZIpaj8U1pZA216okrciXqjWMz6SsDyuIatiOjfFlHt8Aw+bUkIJgBWq
SaXUpoktM1tQ9KVgY0xWnRoGuh9QCXPX82KYdnNvFGK6zUNWR9xN7twKvOA+fC2c
v63gXtu4qpPptccNoCh5WJdQB+qe6OJskpDLgVOHzrTJgwtMscKk1PijJJTdPV0R
1ICe5/Jc3XUIbT7wrhCVwTo0dgJEnQjKG0uwwqhhkc5CtAKhXwrUIaSQvL2J+laJ
xNfvOfJhs/FR47UjqRo5RXbfLPYEHon0OJuPGcIsjD/IBOPEyQ==
-----END CERTIFICATE-----
Generated at Fri Oct 11 23:51:30 2024 by rpki-client on console-ams.rpki-client.org