Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CBEB20AC22A611ED9FE397CBF1222468.roa
File: CBEB20AC22A611ED9FE397CBF1222468.roa (raw, json)
Hash identifier: jw72fXQ3DzuGt47yDw2kKzHodOGiZfI22f0Tt7NTaBM=
Subject key identifier: C8:6A:71:DA:16:96:1A:7A:86:3B:2E:AE:A8:94:07:94:47:32:FB:26
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 05B6
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CBEB20AC22A611ED9FE397CBF1222468.roa
Signing time: Tue 23 Aug 2022 05:45:30 +0000
ROA not before: Tue 23 Aug 2022 05:45:26 +0000
ROA not after: Wed 11 Aug 2032 05:45:26 +0000
asID: 996
IP address blocks: 41.180.208.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 May 2023 14:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1462 (0x5b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Aug 23 05:45:26 2022 GMT
Not After : Aug 11 05:45:26 2032 GMT
Subject: CN=6304697a-75c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:1f:c1:26:ea:d7:63:66:72:fc:19:f4:7c:
84:a0:c6:18:92:5f:1f:a1:69:a1:dc:ec:fb:b3:17:
fe:73:27:31:eb:d5:eb:4d:d2:27:36:2e:d2:68:e8:
6e:91:b3:e3:ca:7f:bd:87:50:4d:b0:b4:06:24:a9:
87:f5:2e:79:f2:29:ef:30:1d:1a:81:9a:29:44:c5:
af:5d:84:99:51:61:4f:f7:e4:6a:d0:dd:b3:e1:d0:
46:0b:e8:16:9f:f5:b1:a9:4f:a6:d4:e0:53:4e:75:
34:2d:9c:16:18:80:03:e6:48:d6:34:ee:7e:69:ad:
e1:05:17:4e:d7:aa:2f:66:25:91:dd:cc:a1:b8:bf:
59:f5:6c:a4:dd:7f:4c:92:48:63:40:7a:a1:aa:38:
43:1e:fc:84:ec:fd:9f:49:49:bd:6b:8d:61:0d:94:
2c:99:99:19:36:3c:ca:bd:6e:c6:44:51:2d:7c:58:
0e:4d:39:16:00:1e:1d:15:13:ba:32:1d:5c:7a:45:
2c:01:ef:47:8b:c2:0a:6e:98:8e:9e:1e:5c:bc:47:
50:96:dc:ac:c2:cf:f3:e5:5c:12:06:d6:ce:82:fb:
28:66:18:45:6d:e7:86:1b:8a:22:f0:bd:e4:86:e0:
ed:58:17:c4:fb:c8:9e:2d:2d:d9:68:40:89:ac:d6:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6A:71:DA:16:96:1A:7A:86:3B:2E:AE:A8:94:07:94:47:32:FB:26
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CBEB20AC22A611ED9FE397CBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.208.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:2d:aa:0d:9f:d7:11:04:3f:e2:da:b5:5b:c0:c4:4e:f9:e7:
f7:b0:1d:14:87:a0:88:d4:b2:29:90:93:51:4d:e3:b6:28:cb:
8c:82:19:a5:5e:ba:62:94:67:41:34:c5:1a:76:c7:43:41:d9:
b2:11:bf:33:1a:df:4b:3e:5a:85:f2:bd:48:8e:b4:7d:3b:7d:
45:fd:8e:f9:ca:04:60:96:8b:78:f3:11:8a:60:88:6b:21:c4:
55:c2:8b:69:2b:84:f4:31:7e:e2:9d:be:08:87:29:9d:9d:16:
ad:32:e3:36:7d:6c:01:bb:d7:2d:e5:e1:e5:53:35:33:36:6a:
06:17:09:32:26:21:c0:5f:db:4a:85:38:48:32:ae:e4:0e:ce:
2c:da:b6:70:91:05:c0:c6:c3:de:02:3f:fd:c8:07:fd:03:b4:
d5:e8:7c:36:3d:4d:cd:14:c1:f2:c1:74:a1:2c:d0:e0:11:dc:
8e:7a:7b:4b:c9:56:c1:60:75:8c:46:97:71:fe:cc:3b:49:22:
25:b7:d9:47:54:1b:be:49:d1:13:b1:77:22:8f:d8:cf:3c:2d:
c4:a1:e0:eb:98:3c:80:a0:84:f7:a7:08:07:ce:db:76:d5:d0:
bd:19:4a:38:f4:4f:c5:82:97:d4:1f:7a:50:41:93:53:9b:87:
a4:62:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org