Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9C2ED4A205E611EE810922884AD9E6FC.roa
File: 9C2ED4A205E611EE810922884AD9E6FC.roa (raw, json)
Hash identifier: FP2ujpkyhifV/Y6PNCi315GKNBjT8YcjQ0k0KKl1Lg8=
Subject key identifier: B9:D9:BF:88:2E:C7:76:43:F3:BF:3F:7D:08:B4:52:D3:BA:A3:47:05
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 06F8
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9C2ED4A205E611EE810922884AD9E6FC.roa
Signing time: Thu 08 Jun 2023 10:24:12 +0000
ROA not before: Thu 08 Jun 2023 10:24:08 +0000
ROA not after: Wed 08 Jun 2033 10:24:08 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:3000::/36 maxlen: 64
Validation: Failed, certificate revoked on Thu 08 Jun 2023 10:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 8 10:24:08 2023 GMT
Not After : Jun 8 10:24:08 2033 GMT
Subject: CN=6481ac4b-a058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:41:fe:6a:e3:7b:96:77:3d:e0:3a:ea:6a:
09:3a:6f:be:28:18:f1:b6:af:c5:79:55:98:25:12:
47:02:fa:30:18:38:19:fb:a2:5a:26:23:04:02:75:
2e:5b:93:71:dd:5a:02:e7:91:e8:77:56:ea:f0:93:
10:05:aa:7a:97:fb:67:f2:c7:4a:ae:a0:1d:14:aa:
f5:83:b7:1d:2b:db:27:6e:44:24:32:5f:30:02:37:
09:69:b5:88:a5:d2:cf:73:17:05:7e:02:0c:af:a9:
8e:d7:c8:33:5e:4b:e3:c3:96:50:3e:b3:49:55:9e:
4d:f6:f5:ad:78:ee:bf:08:c5:60:a0:a4:7b:82:35:
0d:01:78:3f:d4:73:61:c4:99:fa:5e:07:18:59:f8:
de:67:a8:75:34:76:44:84:46:47:52:c8:d9:17:b5:
a2:cb:59:8c:f9:44:fe:ff:8f:b5:9a:fc:d1:98:91:
06:b3:4f:dc:35:62:78:8b:53:02:a1:89:35:ee:52:
ba:b6:24:95:a9:ad:a3:3a:03:7c:53:d5:24:42:de:
cd:75:ff:12:69:bb:eb:1d:71:9a:50:98:84:40:69:
ed:0a:a8:46:25:0c:88:0a:5d:cc:d4:ec:77:23:2d:
19:86:23:54:ba:73:95:b0:1e:04:d2:ec:cd:2e:26:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D9:BF:88:2E:C7:76:43:F3:BF:3F:7D:08:B4:52:D3:BA:A3:47:05
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9C2ED4A205E611EE810922884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
8f:2a:80:51:d9:89:0e:0b:ab:3d:b7:af:69:46:fc:b1:18:74:
e0:b7:ab:46:63:90:54:2e:75:1a:73:d8:3a:38:65:6d:b3:15:
2c:cf:32:84:46:c3:dd:48:20:b6:01:e5:bc:0f:32:46:ec:fa:
9e:ca:09:93:b4:ea:f7:6d:00:79:61:87:55:a6:24:9e:3e:f4:
36:39:e7:98:1a:12:07:d5:71:ae:48:dd:6e:9d:14:a4:ab:ce:
92:bd:9c:60:f6:8b:3e:e1:26:8d:60:07:18:d4:ea:b1:ee:19:
b0:58:18:b2:9b:5a:8b:f0:31:2e:87:a4:70:9e:15:78:66:94:
59:08:d4:ae:2d:b0:18:7c:0f:89:80:ae:95:d3:22:ac:6d:3c:
56:1c:80:08:12:90:6a:71:be:74:07:bd:c3:01:7d:81:d9:83:
b2:9b:f2:6a:00:f5:b6:ef:8c:97:fc:1d:89:18:24:d8:1c:b6:
f5:7e:69:1f:dc:37:19:8c:94:4f:58:eb:78:f5:33:7f:fc:a4:
4b:76:8a:cc:c5:0f:41:5b:b8:28:62:de:23:da:87:9f:7a:99:
01:e2:95:e2:e2:02:44:36:cc:fe:ed:07:88:f9:2a:71:0a:45:
4e:df:af:15:fd:22:51:16:48:db:ec:dc:f3:05:36:10:09:95:
16:18:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org