Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/DDE169AE61CD11ED8DD188DDF1222468.roa
File: DDE169AE61CD11ED8DD188DDF1222468.roa (raw, json)
Hash identifier: zeuV/NMEhOfCUpoqmOCiesrEjDiTxNCVGg9Z4zmbQMU=
Subject key identifier: 40:6E:7A:94:4A:AC:E3:70:3B:96:F8:42:18:82:E6:0F:2F:42:34:99
Certificate issuer: /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial: 03B7
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/DDE169AE61CD11ED8DD188DDF1222468.roa
Signing time: Fri 11 Nov 2022 14:33:54 +0000
ROA not before: Fri 11 Nov 2022 14:33:48 +0000
ROA not after: Thu 11 Nov 2032 14:33:48 +0000
asID: 327693
IP address blocks: 2c0f:f708:1000::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 14 Nov 2022 15:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Validity
Not Before: Nov 11 14:33:48 2022 GMT
Not After : Nov 11 14:33:48 2032 GMT
Subject: CN=636e5d52-dc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:3f:71:35:e4:fa:99:8f:02:a8:c7:6e:a1:
4b:27:a9:3e:5b:20:2e:5b:48:49:6b:ee:e1:b0:15:
19:e8:13:9f:1a:88:cd:73:fa:bb:78:ec:a1:3a:4d:
1f:bd:3c:35:8f:ae:64:e0:1c:1e:50:83:b8:b3:1d:
3b:b7:97:a4:6b:70:4b:c6:8b:74:09:d8:28:45:c4:
f6:2d:c7:05:fc:05:83:48:93:cf:97:34:b9:a6:c5:
db:e1:ac:0d:d5:f6:41:c6:83:31:1a:0b:ce:88:6c:
dd:3b:d2:c8:ae:1c:92:3d:d9:35:a1:da:41:d2:22:
67:4e:4a:14:41:f6:a5:93:d6:9d:8b:a3:b2:1b:92:
35:fd:35:10:ab:28:8b:17:9c:75:39:1b:3c:9f:24:
70:ab:a9:b6:61:ca:d3:3c:0b:49:61:b4:d7:8e:e4:
2e:47:61:5f:97:15:30:50:5f:f0:7d:92:25:fc:be:
c4:8b:4e:60:dd:8f:75:88:13:2f:80:6d:7a:60:14:
49:e6:b4:50:b1:e4:b7:6f:7a:73:3a:dc:19:54:ba:
ec:78:d7:6d:f6:1b:5c:31:d0:fe:13:51:92:7e:1f:
1a:a2:17:2f:23:2c:46:89:c2:42:84:43:3a:60:70:
7e:84:a8:13:83:2f:3d:e6:c5:8a:04:fa:3c:b1:77:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6E:7A:94:4A:AC:E3:70:3B:96:F8:42:18:82:E6:0F:2F:42:34:99
X509v3 Authority Key Identifier:
keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/DDE169AE61CD11ED8DD188DDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f708:1000::/44
Signature Algorithm: sha256WithRSAEncryption
20:f9:fe:26:9e:6e:f5:52:2a:91:09:e2:07:53:9d:e5:69:d2:
a5:78:41:2a:c0:ba:69:f1:e7:17:52:0e:0c:37:8f:99:70:b5:
87:cf:fa:84:b5:7f:de:ad:91:de:d3:b2:30:21:b7:8a:0d:be:
0a:aa:e1:5a:d2:d6:05:03:80:37:7e:a6:87:30:c7:99:b8:cd:
2e:cc:9d:60:ae:64:ca:60:2b:6e:ec:55:f2:bf:f8:36:54:2e:
33:fb:7b:e4:0c:56:64:9f:a2:e9:03:da:18:e0:58:5c:56:12:
97:82:7a:82:ce:5b:a4:0d:d6:19:4e:32:c3:87:52:b1:99:85:
ac:47:1d:d6:d0:f1:40:e3:97:7d:ef:06:75:b9:20:85:8a:b6:
ed:5e:0b:22:b3:7b:1f:eb:8b:a2:84:d8:22:e3:e4:22:e3:e4:
be:43:05:5e:fa:97:6b:25:bb:7d:d0:f6:07:bf:b4:52:f7:50:
58:a0:31:5d:ab:f4:c8:f7:96:f4:51:71:f3:88:8d:75:2f:92:
3c:60:c3:e7:65:15:09:b3:9f:1e:27:07:71:4c:9a:bd:8f:37:
02:cd:22:a5:bf:fe:47:4e:1a:cd:6c:ba:3a:3c:67:62:9d:bb:
48:76:31:82:56:8f:98:e6:f1:0f:2b:70:51:8e:9c:29:ef:d3:
b6:84:77:60
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjNDRUVBRjExMC8GA1UEBRMoQ0I4ODU4NzUyN0IzODM5MTZDQzBCMUQ4ODY2NjUz
QzMzNDMxRTQ1RDAeFw0yMjExMTExNDMzNDhaFw0zMjExMTExNDMzNDhaMBgxFjAU
BgNVBAMMDTYzNmU1ZDUyLWRjMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC23z9xNeT6mY8CqMduoUsnqT5bIC5bSElr7uGwFRnoE58aiM1z+rt47KE6
TR+9PDWPrmTgHB5Qg7izHTu3l6RrcEvGi3QJ2ChFxPYtxwX8BYNIk8+XNLmmxdvh
rA3V9kHGgzEaC86IbN070siuHJI92TWh2kHSImdOShRB9qWT1p2Lo7IbkjX9NRCr
KIsXnHU5GzyfJHCrqbZhytM8C0lhtNeO5C5HYV+XFTBQX/B9kiX8vsSLTmDdj3WI
Ey+AbXpgFEnmtFCx5LdvenM63BlUuux41232G1wx0P4TUZJ+HxqiFy8jLEaJwkKE
QzpgcH6EqBODLz3mxYoE+jyxd/rHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQG56
lEqs43A7lvhCGILmDy9CNJkwHwYDVR0jBBgwFoAUy4hYdSezg5FswLHYhmZTwzQx
5F0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYzQ0VFLzFGQkM0NDIwODNCRTExRUE4QTY1QjczMEY4QUVBMjI4L3k0aFlk
U2V6ZzVGc3dMSFlobVpUd3pReDVGMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3k0aFlkU2V6ZzVGc3dMSFlobVpUd3pReDVGMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjYzQ0VFLzFGQkM0NDIwODNCRTExRUE4QTY1QjczMEY4
QUVBMjI4L0RERTE2OUFFNjFDRDExRUQ4REQxODhEREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsD/cIEAAwDQYJKoZIhvcN
AQELBQADggEBACD5/iaebvVSKpEJ4gdTneVp0qV4QSrAumnx5xdSDgw3j5lwtYfP
+oS1f96tkd7TsjAht4oNvgqq4VrS1gUDgDd+pocwx5m4zS7MnWCuZMpgK27sVfK/
+DZULjP7e+QMVmSfoukD2hjgWFxWEpeCeoLOW6QN1hlOMsOHUrGZhaxHHdbQ8UDj
l33vBnW5IIWKtu1eCyKzex/ri6KE2CLj5CLj5L5DBV76l2slu33Q9ge/tFL3UFig
MV2r9Mj3lvRRcfOIjXUvkjxgw+dlFQmznx4nB3FMmr2PNwLNIqW//kdOGs1sujo8
Z2Kdu0h2MYJWj5jm8Q8rcFGOnCnv07aEd2A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org