Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C96AE57A492911EDB95676E7F1222468.roa
File: C96AE57A492911EDB95676E7F1222468.roa (raw, json)
Hash identifier: RH7adgWcQ3Ap+dJ20f+v0GlVDRm8sOZlwgAZEW54Yp4=
Subject key identifier: AD:59:DF:3E:D0:2C:C7:9D:B3:BD:B6:37:97:AA:43:E6:58:60:11:4F
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 05ED
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C96AE57A492911EDB95676E7F1222468.roa
Signing time: Tue 11 Oct 2022 05:58:54 +0000
ROA not before: Tue 11 Oct 2022 05:58:50 +0000
ROA not after: Wed 06 Oct 2032 05:58:50 +0000
asID: 7018
IP address blocks: 41.180.208.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1517 (0x5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Oct 11 05:58:50 2022 GMT
Not After : Oct 6 05:58:50 2032 GMT
Subject: CN=6345061e-392e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:0d:a2:e9:a8:6f:ba:42:4c:58:53:b8:f2:
8e:4f:a4:c2:70:0a:f0:c9:d6:1f:96:a8:73:b0:27:
cc:55:85:1c:df:5a:43:9a:3f:5e:4f:80:9f:48:99:
38:25:5b:13:6e:e8:42:62:7d:73:b7:47:7a:15:06:
cb:27:17:fb:76:d4:49:f6:46:6c:6e:61:63:95:63:
1f:67:17:68:56:37:38:c9:c1:f8:f5:e6:59:31:17:
24:7a:b1:0e:38:f9:7d:3e:b4:21:a4:57:1e:77:28:
c2:12:3c:c1:a0:c5:2e:35:fa:e9:c1:df:25:c4:bd:
17:b7:e7:06:d7:b5:6a:59:a3:a6:45:f5:98:44:91:
d5:1a:66:da:2f:39:e0:64:c0:c6:b7:95:b7:35:f0:
47:84:a7:65:37:97:2c:5a:a7:9d:a6:e1:09:0e:24:
6a:96:66:63:f4:2b:f7:7d:0b:16:6a:dd:f7:b2:0f:
36:f9:31:a9:b4:57:4e:03:54:a4:4c:7e:24:90:74:
aa:1e:0f:58:b8:68:8c:06:7d:47:e2:7a:3a:73:43:
b5:89:45:2e:28:a7:c4:e4:c7:72:ae:35:a1:10:76:
c6:24:a1:91:94:d1:db:d5:4c:f7:43:98:54:8e:f1:
2a:b2:ba:b1:08:b4:d2:a0:65:3f:1e:e1:f7:75:89:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:59:DF:3E:D0:2C:C7:9D:B3:BD:B6:37:97:AA:43:E6:58:60:11:4F
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C96AE57A492911EDB95676E7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.208.0/21
Signature Algorithm: sha256WithRSAEncryption
99:77:bd:ad:8f:8f:4e:a9:3e:5c:f4:70:1e:dd:c1:47:bc:a0:
a3:3e:a5:bf:b2:88:7d:24:2c:58:d0:7b:1d:c1:a4:f0:b0:ee:
62:cb:97:9e:ce:f1:27:f0:5b:83:4c:22:9e:a1:b4:03:a3:7d:
52:c5:35:ef:92:13:a0:5c:1d:e3:b7:89:4c:97:c8:42:38:9a:
40:a6:7f:d2:15:d7:3b:90:39:c8:76:d7:17:58:89:40:2e:06:
ec:35:eb:f7:7f:5f:46:ef:ca:3a:46:dc:dd:23:68:08:3d:15:
5b:58:a7:0e:d0:5b:bd:8a:81:da:db:ef:2b:0a:f7:33:aa:73:
f8:79:0c:7d:45:f1:2a:47:e4:fb:99:55:39:06:94:18:2e:78:
d5:4d:dd:11:2c:3a:d3:e7:65:58:ac:0b:1c:2e:8e:c6:9d:2e:
77:71:4d:aa:73:70:6c:7b:bb:0c:0c:ed:7c:a3:16:6b:9b:72:
b0:8b:0c:2d:7a:1f:91:f1:51:44:5c:4a:bb:5b:e2:da:c0:07:
28:d7:fe:5e:05:cd:1f:6a:eb:c1:08:c8:44:27:87:09:13:66:
14:2f:6d:3f:10:3f:67:fe:53:94:3c:84:c9:d5:14:f0:ea:03:
6c:0b:ac:66:6e:68:36:e7:f8:92:f4:ea:82:8a:b3:0e:fe:13:
8e:26:be:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org