Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/151887A605E611EE8BF975864AD9E6FC.roa
File: 151887A605E611EE8BF975864AD9E6FC.roa (raw, json)
Hash identifier: OAHRBpGGAEJ+g62k9ZcLHgYj4qF3YY4T5lIMiyKwCwA=
Subject key identifier: 09:FB:1F:3D:36:98:A9:BB:40:62:33:DE:B9:1C:95:AF:C3:58:56:83
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 06F6
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/151887A605E611EE8BF975864AD9E6FC.roa
Signing time: Thu 08 Jun 2023 10:20:25 +0000
ROA not before: Thu 08 Jun 2023 10:20:21 +0000
ROA not after: Wed 08 Jun 2033 10:20:21 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:2000::/36 maxlen: 64
Validation: Failed, certificate revoked on Thu 08 Jun 2023 10:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 8 10:20:21 2023 GMT
Not After : Jun 8 10:20:21 2033 GMT
Subject: CN=6481ab69-655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:b5:33:b3:7e:5f:e0:22:5e:99:04:be:0b:
20:79:d9:ad:54:28:82:b7:dd:64:73:d8:0a:d4:90:
2e:ec:77:11:b5:0f:74:80:57:ee:4f:4d:f2:28:b7:
85:06:b0:8d:7d:ed:f8:2a:8e:0c:e6:c5:93:2a:02:
c4:e6:f5:a0:94:17:b8:23:47:98:b0:35:8a:62:90:
2e:05:49:66:9c:07:c9:c4:15:99:83:a4:65:e8:66:
23:c9:34:11:dd:1e:a5:4c:ac:d5:e3:a6:ba:98:2b:
69:70:bd:70:b3:64:43:6e:24:fa:2d:4f:3c:50:5b:
3a:db:f9:5f:9e:a2:1c:81:61:29:91:dd:0c:01:0e:
40:0c:65:d4:d3:ab:80:be:53:c9:05:28:54:a6:da:
51:fd:9c:33:87:c0:22:8a:c9:ec:0a:9e:7f:73:ef:
2f:92:58:6c:fc:58:a0:11:a4:8b:91:b5:4e:40:71:
72:0d:62:15:4e:37:2c:e3:0f:c6:bb:79:67:6b:32:
0c:9c:93:b3:ec:b1:a2:ff:8f:93:f9:46:ee:74:91:
91:8f:05:20:58:6a:e2:a9:94:07:2e:2a:7f:0d:73:
40:68:5f:5a:23:03:af:50:7f:a7:f7:89:e9:3f:21:
cf:43:0e:f8:a1:6d:5e:c6:8c:6b:ae:c0:ea:5d:92:
58:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FB:1F:3D:36:98:A9:BB:40:62:33:DE:B9:1C:95:AF:C3:58:56:83
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/151887A605E611EE8BF975864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
90:76:8c:a0:a1:e4:30:4e:e5:30:93:68:75:02:8a:d8:9a:aa:
c3:cd:89:15:a2:f5:3b:50:ef:66:89:e4:81:ef:99:c1:a1:fc:
7e:35:61:51:8e:fb:c9:bb:10:5b:76:a1:f3:6a:37:93:00:67:
2e:f7:3b:06:df:27:a3:e8:e1:f2:32:b1:f4:f9:f9:40:fc:0f:
56:e0:e9:07:00:2f:c2:14:88:87:3a:76:aa:ca:43:55:77:ff:
73:0b:d0:3e:39:0b:0c:a6:8b:9a:e6:99:f5:45:55:b7:43:9d:
a7:c9:03:68:df:eb:81:85:b9:fb:2c:35:ed:10:5e:f8:ba:b7:
81:0f:8d:f5:5e:85:72:e8:86:b9:1b:65:04:b6:8f:55:c1:83:
7e:d8:96:c6:d1:46:d0:15:18:3f:a3:04:1e:e2:5c:25:24:e7:
1c:78:bd:7a:3c:7c:39:d9:94:c5:cd:5a:f5:78:b7:e7:38:36:
d7:59:55:b6:e6:c3:bd:ea:0a:a4:b6:06:aa:6c:e7:91:e5:ec:
b9:c9:d8:d1:fd:95:b5:67:77:d5:f9:aa:9a:01:02:ee:f9:83:
6f:a1:d5:98:ca:b2:46:49:8c:bf:41:1e:a0:a3:89:e8:8e:ba:
11:f9:a4:ea:99:93:9b:97:b0:61:37:b5:c1:c5:a5:ba:10:42:
ae:7a:58:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org