Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/21F20674CD3711ED8611CBDEF1222468.roa
File: 21F20674CD3711ED8611CBDEF1222468.roa (raw, json)
Hash identifier: cq876aqGuQKj4A99BWnG6cPOrxySWyrwzGjmutkzQrU=
Subject key identifier: 53:3A:AA:29:F5:1A:9D:56:59:53:EA:DC:B3:81:2B:B3:8C:7B:06:C8
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 06A2
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/21F20674CD3711ED8611CBDEF1222468.roa
Signing time: Tue 28 Mar 2023 07:07:00 +0000
ROA not before: Tue 28 Mar 2023 07:06:54 +0000
ROA not after: Tue 15 Mar 2033 07:06:54 +0000
asID: 30431
IP address blocks: 41.180.176.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 06:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1698 (0x6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Mar 28 07:06:54 2023 GMT
Not After : Mar 15 07:06:54 2033 GMT
Subject: CN=64229213-5c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:87:2b:a3:a6:b7:ee:f1:bd:cf:07:0c:6d:
11:01:c0:40:ea:51:c7:50:f1:7f:c4:5b:d6:cd:44:
ca:38:af:97:eb:2e:87:44:7c:0f:c3:d5:28:10:2c:
9f:22:c2:f8:65:9a:a5:0e:1f:63:4f:9c:2f:09:6c:
6f:8b:c6:30:ca:02:bd:1c:d3:27:c2:ed:10:cf:da:
77:37:ad:2a:e9:8f:d2:fb:63:24:c4:2e:03:78:52:
2b:b5:81:f0:be:45:05:73:fb:87:70:62:ec:36:a9:
f2:93:01:4d:fc:09:52:5e:8c:3d:26:e6:d9:3b:ad:
bf:2b:b9:af:87:e9:d1:b2:9b:e8:3f:37:87:8a:d6:
8e:5f:f2:f9:bd:73:1f:b9:2e:14:6b:6e:91:c3:da:
cb:5b:f0:d9:4a:37:04:af:48:04:90:f7:5e:20:c6:
59:ef:d5:1d:9b:7c:2a:fa:35:6c:02:5f:2c:be:6c:
33:a5:5f:4c:e8:16:f2:c0:50:d5:87:95:fa:53:ef:
75:fd:f7:45:0b:2a:92:08:66:ea:cc:37:58:8c:f8:
a8:41:32:1d:35:e3:08:6d:7d:e2:9f:cd:a6:b7:c4:
52:ce:4a:24:16:b3:f8:4b:df:e1:ce:7b:cd:cb:f6:
7d:5e:ea:24:d9:46:d9:60:9d:9c:12:8f:d4:54:1c:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3A:AA:29:F5:1A:9D:56:59:53:EA:DC:B3:81:2B:B3:8C:7B:06:C8
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/21F20674CD3711ED8611CBDEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.176.0/20
Signature Algorithm: sha256WithRSAEncryption
81:c3:c9:af:82:9f:a0:a1:3a:85:36:86:70:92:5c:7d:ba:fb:
ba:02:97:3d:af:c8:9d:62:67:e7:de:69:42:00:b2:43:5b:94:
d3:46:ee:c4:e5:c4:73:4b:41:4c:22:e5:85:2b:57:3b:e3:95:
a2:57:f4:5e:f2:fc:11:45:aa:66:fe:40:20:dd:b9:cd:7d:34:
3a:0a:81:5b:f2:22:5d:e1:a9:6c:00:e6:e4:f1:e4:ec:a6:4a:
13:3e:3a:cd:02:3f:ae:c8:cf:ff:6d:0d:a3:a2:22:45:6d:89:
c9:7a:d7:74:bc:30:5e:1f:93:6c:5e:b5:1d:f6:d9:d2:b8:f6:
b8:16:c5:84:66:29:18:75:5c:d9:6e:cf:99:c6:e4:f7:1d:43:
22:50:cb:65:f7:af:95:cf:69:96:91:a0:40:25:be:b6:1a:e4:
1c:3e:27:6f:31:59:eb:98:dc:04:27:d7:70:f2:d1:88:e6:d0:
1c:3a:00:b7:7d:79:18:b4:9e:2a:5f:6a:f8:2c:d4:00:52:34:
39:6c:28:d1:e7:e0:ba:9d:3a:a4:71:2f:b4:8b:c4:2d:ae:37:
92:dd:e7:0b:31:63:f4:0d:34:9c:0e:79:a7:97:cb:41:61:bc:
15:05:1b:94:2e:44:f1:05:83:83:c6:43:e3:f1:51:06:bf:13:
51:89:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 08:26:38 2024 by rpki-client on console-fra.rpki-client.org