Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9511275222A611ED9C6BDCCAF1222468.roa
File: 9511275222A611ED9C6BDCCAF1222468.roa (raw, json)
Hash identifier: uJZSB3lCNDV3oLCJroYNGh26DpQ79Vf34e0eC0+y1hc=
Subject key identifier: EE:42:68:37:B1:35:04:A1:C1:E2:60:8A:F6:9C:BF:48:BD:93:9A:EF
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 05B2
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9511275222A611ED9C6BDCCAF1222468.roa
Signing time: Tue 23 Aug 2022 05:43:58 +0000
ROA not before: Tue 23 Aug 2022 05:43:53 +0000
ROA not after: Wed 11 Aug 2032 05:43:53 +0000
asID: 996
IP address blocks: 41.180.176.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 07:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Aug 23 05:43:53 2022 GMT
Not After : Aug 11 05:43:53 2032 GMT
Subject: CN=6304691e-d17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:b8:df:9b:19:cb:e8:48:c9:7c:43:90:6d:
1e:54:0d:d8:ab:1c:be:32:34:ce:e6:ef:8c:aa:0c:
e5:e5:ea:1b:f0:d1:7e:37:d9:3f:f7:10:12:9e:d5:
51:ea:13:76:c4:ed:89:28:49:89:bf:e7:26:ff:9b:
d6:2b:64:b1:65:87:c4:fd:5e:29:83:5d:e8:6b:85:
af:1e:a7:59:00:92:28:a6:a8:af:55:65:86:3a:fc:
9a:1f:d2:60:4a:fa:a6:0e:c0:cc:a7:ab:5f:32:a5:
01:d9:c2:c8:ec:0a:81:65:3f:3e:5a:fb:2e:bb:6c:
49:6d:8f:61:7d:13:1a:8d:a0:41:b8:f6:93:4c:ab:
4f:ce:b8:2d:61:09:ef:4f:98:66:86:77:27:e9:14:
72:af:23:15:66:9f:cc:6e:e3:73:92:c0:2b:55:bd:
ee:13:d5:6e:83:d8:19:7f:71:65:ba:c0:ed:4b:17:
b2:c6:28:a7:df:ed:b8:36:30:d7:bb:a8:82:df:45:
10:48:4a:10:77:41:3c:67:f8:0f:3f:88:29:de:50:
6a:54:ac:5e:42:ac:49:c0:6c:24:5f:41:1d:ec:1c:
a3:19:52:29:1b:1c:d4:5e:e6:41:30:52:a7:af:8c:
6a:14:fd:ba:84:94:3a:fa:8b:63:0e:b5:5c:aa:de:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:42:68:37:B1:35:04:A1:C1:E2:60:8A:F6:9C:BF:48:BD:93:9A:EF
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9511275222A611ED9C6BDCCAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:ea:a4:63:51:cb:f0:90:1b:6f:bb:63:1a:59:5b:b7:04:3c:
be:b0:70:89:e3:c0:88:81:dc:a3:e5:f6:ae:68:92:16:38:1a:
a6:f5:d7:4d:0d:91:ea:29:a5:18:56:56:8a:e7:1e:e4:62:0c:
79:d7:b2:73:05:3b:f3:b8:0c:12:fd:e2:5e:9f:24:d2:63:8a:
1a:85:69:cb:7b:ea:f3:92:a5:4a:a5:98:6a:0b:a8:d0:29:0c:
c9:99:8a:54:34:6e:a9:b7:42:05:1c:c6:21:74:8c:1c:19:b8:
69:15:c4:67:99:32:dc:19:29:b2:89:58:8c:ce:03:25:fd:30:
90:dc:9f:08:77:5e:b6:19:3f:12:99:0f:eb:44:7c:b6:6a:71:
70:cc:d7:5b:b8:d1:79:23:97:54:72:dc:6f:92:0b:14:84:14:
e2:9b:ba:f6:84:a4:04:4e:29:70:de:01:c0:4a:5b:22:07:f0:
5b:90:1d:ff:8b:5a:cf:4e:03:82:6b:17:11:b0:ff:fe:43:7e:
58:59:c9:69:5a:e7:f6:6b:a6:28:40:9d:b4:23:25:00:73:99:
e9:e6:b8:1f:4d:42:c3:7e:9a:c3:aa:f0:81:4c:80:01:d8:b7:
bd:6f:59:ed:be:e9:27:b3:5a:a6:a8:85:ed:5d:6f:07:7d:13:
94:0a:a1:c1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yMjA4MjMwNTQzNTNaFw0zMjA4MTEwNTQzNTNaMBgxFjAU
BgNVBAMMDTYzMDQ2OTFlLWQxN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpaLjfmxnL6EjJfEOQbR5UDdirHL4yNM7m74yqDOXl6hvw0X432T/3EBKe
1VHqE3bE7YkoSYm/5yb/m9YrZLFlh8T9XimDXehrha8ep1kAkiimqK9VZYY6/Jof
0mBK+qYOwMynq18ypQHZwsjsCoFlPz5a+y67bEltj2F9ExqNoEG49pNMq0/OuC1h
Ce9PmGaGdyfpFHKvIxVmn8xu43OSwCtVve4T1W6D2Bl/cWW6wO1LF7LGKKff7bg2
MNe7qILfRRBIShB3QTxn+A8/iCneUGpUrF5CrEnAbCRfQR3sHKMZUikbHNRe5kEw
UqevjGoU/bqElDr6i2MOtVyq3uUpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7kJo
N7E1BKHB4mCK9py/SL2Tmu8wHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4Lzk1MTEyNzUyMjJBNjExRUQ5QzZCRENDQUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQptLAwDQYJKoZIhvcNAQEL
BQADggEBAJ7qpGNRy/CQG2+7YxpZW7cEPL6wcInjwIiB3KPl9q5okhY4Gqb1100N
keoppRhWVornHuRiDHnXsnMFO/O4DBL94l6fJNJjihqFact76vOSpUqlmGoLqNAp
DMmZilQ0bqm3QgUcxiF0jBwZuGkVxGeZMtwZKbKJWIzOAyX9MJDcnwh3XrYZPxKZ
D+tEfLZqcXDM11u40Xkjl1Ry3G+SCxSEFOKbuvaEpAROKXDeAcBKWyIH8FuQHf+L
Ws9OA4JrFxGw//5DflhZyWla5/ZrpihAnbQjJQBzmenmuB9NQsN+msOq8IFMgAHY
t71vWe2+6SezWqaohe1dbwd9E5QKocE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org