Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A4C6F622EB5511ED86E7FA1E4AD9E6FC.roa
File: A4C6F622EB5511ED86E7FA1E4AD9E6FC.roa (raw, json)
Hash identifier: CE6wDgJZgRTJd29uKfT+FTEtHIRKA6jQdSf2Tu0qSmI=
Subject key identifier: F0:C6:73:D2:2F:D2:4C:42:09:47:90:A3:A9:2E:0C:B7:6D:97:6C:9D
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 06D1
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A4C6F622EB5511ED86E7FA1E4AD9E6FC.roa
Signing time: Fri 05 May 2023 15:00:59 +0000
ROA not before: Fri 05 May 2023 15:00:53 +0000
ROA not after: Thu 05 May 2033 15:00:53 +0000
asID: 6977
IP address blocks: 41.180.208.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 05:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: May 5 15:00:53 2023 GMT
Not After : May 5 15:00:53 2033 GMT
Subject: CN=64551a2b-d5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:27:61:8a:79:18:06:3c:19:c9:6a:58:25:
26:6f:0a:f4:68:3d:f9:1e:d4:e1:38:ba:b9:f2:9a:
a8:7e:64:5a:fb:8f:c4:22:a3:3f:a2:25:55:9d:b3:
3d:b5:0a:d2:52:23:71:a8:30:57:9c:de:23:6b:c5:
e3:3a:a6:11:21:da:45:72:3b:73:c4:ce:b1:e7:de:
de:5e:32:b1:7c:db:b3:18:f9:a8:6e:4f:e5:ae:18:
c5:bc:97:f2:d8:81:37:32:95:a8:63:c3:04:93:1c:
98:00:4d:d4:e7:c5:46:00:5c:4b:5b:9d:75:c1:02:
c0:4c:02:e0:f2:88:0d:c3:64:92:9d:5b:e4:11:7f:
15:66:25:9b:19:95:26:5e:75:05:c8:de:db:7b:db:
6d:30:cf:fa:e8:57:c9:64:1c:cd:81:b3:b0:d7:79:
68:2b:4c:d1:b1:c6:69:80:14:8c:f9:7c:66:b9:65:
8a:dc:4d:e7:fa:25:4c:1b:84:e0:d2:93:3a:99:65:
bb:1c:bf:13:22:d4:d0:d0:91:00:4f:11:0c:e2:e8:
31:ba:01:9b:28:e8:cc:e4:1f:91:df:bf:5b:5c:77:
af:22:a3:5d:0f:d7:63:8f:61:10:f6:51:7d:6c:55:
43:f1:90:b4:53:a8:56:10:fd:47:38:cc:d2:fa:6a:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C6:73:D2:2F:D2:4C:42:09:47:90:A3:A9:2E:0C:B7:6D:97:6C:9D
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A4C6F622EB5511ED86E7FA1E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.208.0/21
Signature Algorithm: sha256WithRSAEncryption
26:12:02:73:e9:17:9a:f9:ed:e8:2a:95:e8:47:97:63:12:78:
d7:1e:d0:27:bf:ed:99:2d:df:30:c9:26:a1:da:3b:39:c8:d5:
a7:3f:73:0e:f4:54:2d:cf:6e:80:cb:54:a0:72:65:9e:73:7b:
f4:6e:fc:89:99:a7:f3:07:12:59:70:14:f2:4b:f1:5c:da:21:
b2:83:f4:06:0f:fb:97:9c:82:bb:e7:a2:ee:5f:b2:aa:8c:3d:
a9:ba:17:04:60:ac:40:e4:f7:82:4a:f1:8e:78:8c:32:cc:e9:
78:48:ba:ca:29:90:ef:5f:8e:18:51:78:fc:56:da:53:78:06:
15:4d:e3:58:69:fb:e8:7a:02:db:4d:7d:e6:d7:b5:6d:7d:cf:
94:14:07:2e:f5:6c:06:86:1e:df:8d:e0:c9:c5:3a:1b:95:cd:
79:3a:de:9b:53:66:9b:7d:dc:a8:57:31:9e:69:c0:f8:65:13:
7a:25:71:4a:d4:97:d1:c7:6f:e0:0c:b7:0a:a6:6b:80:ef:84:
7f:a3:22:9f:8c:9e:ab:f0:68:cc:4a:fc:27:91:16:64:75:9d:
0c:24:3e:f7:4b:1c:b4:42:5d:ee:b7:42:03:6a:cc:4b:e0:dc:
19:b0:ae:1a:70:e9:92:ad:90:9b:4b:ad:15:6b:85:e2:2f:e9:
35:f4:b6:53
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yMzA1MDUxNTAwNTNaFw0zMzA1MDUxNTAwNTNaMBgxFjAU
BgNVBAMTDTY0NTUxYTJiLWQ1ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyVidhinkYBjwZyWpYJSZvCvRoPfke1OE4urnymqh+ZFr7j8Qioz+iJVWd
sz21CtJSI3GoMFec3iNrxeM6phEh2kVyO3PEzrHn3t5eMrF827MY+ahuT+WuGMW8
l/LYgTcylahjwwSTHJgATdTnxUYAXEtbnXXBAsBMAuDyiA3DZJKdW+QRfxVmJZsZ
lSZedQXI3tt7220wz/roV8lkHM2Bs7DXeWgrTNGxxmmAFIz5fGa5ZYrcTef6JUwb
hODSkzqZZbscvxMi1NDQkQBPEQzi6DG6AZso6MzkH5Hfv1tcd68io10P12OPYRD2
UX1sVUPxkLRTqFYQ/Uc4zNL6ahynAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8MZz
0i/STEIJR5CjqS4Mt22XbJ0wHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4L0E0QzZGNjIyRUI1NTExRUQ4NkU3RkExRTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMptNAwDQYJKoZIhvcNAQEL
BQADggEBACYSAnPpF5r57egqlehHl2MSeNce0Ce/7Zkt3zDJJqHaOznI1ac/cw70
VC3PboDLVKByZZ5ze/Ru/ImZp/MHEllwFPJL8VzaIbKD9AYP+5ecgrvnou5fsqqM
Pam6FwRgrEDk94JK8Y54jDLM6XhIusopkO9fjhhRePxW2lN4BhVN41hp++h6AttN
febXtW19z5QUBy71bAaGHt+N4MnFOhuVzXk63ptTZpt93KhXMZ5pwPhlE3olcUrU
l9HHb+AMtwqma4DvhH+jIp+MnqvwaMxK/CeRFmR1nQwkPvdLHLRCXe63QgNqzEvg
3Bmwrhpw6ZKtkJtLrRVrheIv6TX0tlM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org