Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/03899D60098C11EDB3BA877FF1222468.roa
File: 03899D60098C11EDB3BA877FF1222468.roa (raw, json)
Hash identifier: KPurexHVrGEOcxF0rDLSSoeT/UnHwn/hHlmZu2FshCk=
Subject key identifier: F2:1E:BC:8D:15:B5:BE:3F:7B:EA:6A:F3:87:EE:C7:07:64:11:F9:6C
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0539
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/03899D60098C11EDB3BA877FF1222468.roa
Signing time: Fri 22 Jul 2022 07:00:48 +0000
ROA not before: Fri 22 Jul 2022 07:00:44 +0000
ROA not after: Wed 10 Jul 2030 07:00:44 +0000
asID: 10753
IP address blocks: 41.180.192.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 05:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1337 (0x539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 22 07:00:44 2022 GMT
Not After : Jul 10 07:00:44 2030 GMT
Subject: CN=62da4b20-1db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:23:dd:d8:e8:bb:74:66:6f:0e:60:f9:13:
97:66:c7:0e:04:38:8e:cc:de:46:99:a5:fd:4c:f9:
bf:e1:5b:e4:33:f3:87:07:0e:e6:42:65:cb:2f:1d:
55:23:aa:56:11:89:0a:82:d2:39:36:4f:44:0c:65:
34:47:be:dc:e6:88:be:b2:85:01:78:9b:4c:39:84:
4d:02:cb:3f:12:bd:c4:33:a7:0c:0c:16:41:5d:8d:
5a:0b:d0:89:b4:83:7e:81:19:a1:cb:84:7e:4b:86:
ba:f7:e7:e5:ef:58:aa:31:5f:9b:59:75:32:a4:2b:
a1:2d:d0:20:1f:47:1e:f3:1e:0e:b9:08:c1:8f:67:
06:0d:6f:28:aa:a4:ec:58:18:44:24:ea:56:02:4f:
76:31:35:0a:4b:1e:7b:a1:a2:9b:96:12:54:8b:01:
7f:cd:dc:31:50:83:7f:61:99:03:17:76:a9:90:5e:
a0:eb:4d:cf:8e:af:51:32:69:6e:55:b2:d3:3c:1c:
d8:f1:e5:fe:31:7b:5c:9b:b3:79:a3:21:fa:90:e1:
3a:e5:c6:ac:0a:d3:f9:7b:07:d0:e2:37:12:aa:9e:
92:f0:5d:06:db:64:1c:9c:81:fd:c2:b6:43:1a:97:
55:c2:e4:73:c1:20:0a:b0:c6:5f:4a:49:4b:6f:a3:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:BC:8D:15:B5:BE:3F:7B:EA:6A:F3:87:EE:C7:07:64:11:F9:6C
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/03899D60098C11EDB3BA877FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.192.0/20
Signature Algorithm: sha256WithRSAEncryption
78:9e:2a:7b:e7:4a:4e:be:31:7b:4b:6c:ed:d6:b2:eb:d0:94:
81:e1:fc:aa:88:e6:c2:88:e4:1a:7b:b0:bd:a3:de:cd:e3:cf:
47:05:f6:1e:5a:18:56:96:84:15:df:e9:55:9d:50:e5:c2:bd:
8c:eb:36:e4:b6:6b:10:c9:a1:7b:c6:5c:2b:91:48:4e:c9:d9:
e9:72:1c:96:36:fa:ac:e0:f7:bb:1f:a6:bf:cd:13:ab:ce:f8:
a2:d5:b4:e6:bc:cc:9a:6b:0b:b3:ea:4c:ee:9a:79:84:dc:2e:
d2:12:8c:70:0d:b4:4f:93:2b:03:42:2e:5a:ba:0e:11:73:c2:
ae:e0:de:37:3a:14:c2:f2:be:de:0b:52:ee:e6:fb:dc:38:43:
c0:20:02:fb:c2:93:3d:47:93:f5:5f:34:93:ce:d7:ee:de:e6:
58:71:09:87:4a:74:56:a5:e9:8b:ea:fd:b4:3a:9d:9b:f5:5f:
e5:4a:e6:8f:36:62:30:58:aa:2c:aa:3e:7a:12:61:cf:f5:1e:
e5:97:9d:8f:8d:35:eb:65:8a:60:bb:7c:55:86:3c:c5:be:3b:
ba:0b:06:42:1f:49:39:86:fa:1a:b1:1e:35:b8:8b:70:7f:8b:
b2:7c:7d:61:5d:63:8f:e7:8c:46:ce:30:5d:f7:dc:7f:cf:d1:
82:a5:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org