Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/3F56F22EDB9211ED82423F0E306D8C1D.roa
File: 3F56F22EDB9211ED82423F0E306D8C1D.roa (raw, json)
Hash identifier: 6hQgtIG/rFHt9644HVq2nmjT0fJgfGuxUG2tZY8TEs0=
Subject key identifier: CE:07:09:E1:44:D0:03:37:65:73:29:C6:60:93:A6:02:8C:73:2A:11
Certificate issuer: /CN=F365C754AF/serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
Certificate serial: 04
Authority key identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/3F56F22EDB9211ED82423F0E306D8C1D.roa
Signing time: Sat 15 Apr 2023 13:34:29 +0000
ROA not before: Sat 15 Apr 2023 13:34:26 +0000
ROA not after: Tue 15 Apr 2025 13:34:26 +0000
asID: 37799
IP address blocks: 196.60.92.0/24 maxlen: 24
2001:43ff:6000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 May 2023 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C754AF
Validity
Not Before: Apr 15 13:34:26 2023 GMT
Not After : Apr 15 13:34:26 2025 GMT
Subject: CN=643aa7e5-7171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:bb:1a:3a:59:25:18:ef:39:cd:bc:e3:f2:
ce:32:3d:67:d2:9c:96:67:ce:48:25:e3:04:12:95:
92:0b:6b:db:d6:c1:2e:2b:a5:81:ef:d6:c2:a3:57:
c8:14:84:fc:41:32:f9:21:85:2c:30:77:f6:ef:c5:
19:c3:6c:16:38:37:1d:98:a5:ef:22:be:7c:e3:f3:
92:55:3d:b4:13:4e:18:95:8b:34:d5:21:8e:02:d0:
a5:23:9c:0c:68:58:6d:74:13:bf:18:72:13:11:f0:
c5:45:6f:74:72:b6:e0:24:b7:0d:cc:bd:b2:7e:ef:
be:b4:1a:c3:ce:46:f5:dd:de:59:bd:28:6c:0e:f8:
69:dd:27:21:dd:58:ec:2b:b4:9e:20:37:f6:57:61:
81:b9:b2:b4:66:c5:e3:cc:4f:d8:83:de:1a:09:a5:
a3:f6:06:52:14:62:32:ad:ae:60:80:60:b5:76:bb:
64:7f:e9:16:c6:8d:fc:0a:7f:4f:ad:38:9b:d8:f6:
70:a1:f4:0c:b6:46:2e:f8:6d:0d:15:98:59:64:c6:
35:f8:8d:39:75:9c:ea:bf:e5:b5:9b:74:d8:01:db:
4f:7c:eb:2d:f1:68:aa:04:3c:1e:9d:56:c0:30:dd:
73:c9:11:11:52:8a:a5:76:4f:46:e5:10:69:8d:7f:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:07:09:E1:44:D0:03:37:65:73:29:C6:60:93:A6:02:8C:73:2A:11
X509v3 Authority Key Identifier:
keyid:33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/3F56F22EDB9211ED82423F0E306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.92.0/24
IPv6:
2001:43ff:6000::/48
Signature Algorithm: sha256WithRSAEncryption
38:84:42:70:66:df:df:d2:50:14:b7:cc:e0:a7:a4:e0:c9:bf:
42:0f:06:42:12:9b:3b:76:66:be:41:bf:ee:2e:6e:0c:d3:eb:
fe:f8:91:35:a6:6a:c3:b7:f0:fb:bd:4b:4e:8f:a3:92:3c:59:
5c:c2:ef:1a:c4:97:8b:09:5e:2e:39:c6:09:21:1a:d0:8a:b3:
d7:73:fb:ec:fe:70:60:8b:d8:e2:51:fd:c5:08:58:0e:b3:37:
99:18:dc:30:03:c8:b7:e2:7d:4d:47:20:f9:3c:cd:56:6b:47:
00:ad:8e:5a:c9:54:5b:fa:da:50:04:45:f2:66:ca:7c:79:62:
59:98:3e:8c:0b:8c:b5:23:f8:4f:c3:ee:e9:41:a1:92:75:3e:
2a:61:34:c9:3b:c4:0d:48:09:73:59:69:f2:eb:b9:88:95:87:
64:1c:b2:c4:eb:74:49:ca:da:4e:30:34:aa:80:3f:73:22:88:
dc:2d:80:42:15:3a:cb:e6:70:44:45:68:21:d3:2e:82:00:15:
be:6d:f3:52:64:82:06:63:dc:96:db:7d:d9:dd:89:9a:ed:d8:
d6:90:d7:58:d2:34:f8:65:38:a6:74:62:3a:c4:3d:15:d9:f3:
fa:fd:10:88:9b:e3:e1:1c:68:6f:d7:a9:2a:fe:82:f8:9f:bf:
22:0b:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:05 2025 by rpki-client