Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/28E79F00901211EDB5AD19A0F1222468.roa
File: 28E79F00901211EDB5AD19A0F1222468.roa (raw, json)
Hash identifier: N9xcGTA64Q0KKJm/DFmxMW9CIKa85FndFSn2R4hzh+M=
Subject key identifier: F8:38:A1:48:1F:8D:F7:17:85:5A:C4:AC:54:20:09:2A:0F:A9:39:C8
Certificate issuer: /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial: 02
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Authority info access: rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/28E79F00901211EDB5AD19A0F1222468.roa
Signing time: Mon 09 Jan 2023 11:38:39 +0000
ROA not before: Mon 09 Jan 2023 11:38:34 +0000
ROA not after: Sat 01 Jan 2033 11:38:34 +0000
asID: 24757
IP address blocks: 213.55.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 09 Jan 2023 13:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Validity
Not Before: Jan 9 11:38:34 2023 GMT
Not After : Jan 1 11:38:34 2033 GMT
Subject: CN=63bbfcbf-92fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:5d:e3:a8:2f:b4:0f:20:40:60:2e:c2:d1:
a9:ae:36:68:ea:0b:5f:24:e3:d2:bc:1c:11:5c:b6:
f8:a8:39:cc:34:dd:58:38:60:d2:47:19:ca:5a:98:
2b:98:73:a5:f8:0a:c3:62:4a:2f:f0:37:fe:80:ea:
55:d1:84:99:2d:00:72:05:38:52:63:65:e9:84:a2:
68:82:62:39:08:21:2d:b2:38:bb:57:4f:61:43:96:
31:db:67:1f:34:7c:79:7e:82:2b:31:e5:dd:52:a9:
50:89:31:ff:f8:3c:61:37:72:86:18:6b:a1:b2:11:
61:86:80:82:67:95:1e:a0:29:80:23:c6:c1:ca:75:
8f:15:a8:94:a4:c8:14:8a:c0:82:47:27:95:d9:4a:
49:1e:71:68:09:20:9a:c2:de:0a:c7:e3:20:ac:64:
e1:d1:c0:25:12:36:75:de:d9:0d:89:7e:cf:99:49:
45:c0:40:fd:a3:b1:42:f4:f8:d4:21:e7:f2:76:21:
1b:81:bf:6a:c2:8e:6c:5f:3c:09:c2:79:b0:3b:21:
82:ac:89:c7:2e:d8:59:47:d9:4c:16:d5:98:db:a1:
37:ca:bc:96:38:3e:09:7f:da:12:f9:ac:82:cd:7e:
fa:cc:f6:5d:49:42:6d:2f:fa:35:ca:20:d4:70:70:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:38:A1:48:1F:8D:F7:17:85:5A:C4:AC:54:20:09:2A:0F:A9:39:C8
X509v3 Authority Key Identifier:
keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/28E79F00901211EDB5AD19A0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
213.55.64.0/18
Signature Algorithm: sha256WithRSAEncryption
79:20:d1:c8:97:1a:8f:02:ce:cb:8f:43:4a:12:35:d8:0c:82:
b6:06:cc:d8:3d:da:2a:58:a9:83:a8:f2:d5:92:7e:68:1e:bd:
fa:e0:d2:e0:0e:5a:9c:64:49:d4:5a:86:93:05:d2:d8:b2:62:
cb:b0:80:f5:d3:20:64:b0:f1:bf:83:51:b6:66:d4:07:9a:57:
ac:6e:d3:65:95:e7:a4:0e:34:16:a7:f7:f8:62:c8:c8:96:1f:
60:93:38:f3:4a:f5:02:31:bd:29:1f:f8:85:23:7f:9f:b6:73:
0c:9e:87:2a:87:8e:e2:9e:3c:47:46:c6:3e:e1:34:96:bb:12:
5d:bb:2a:c5:7a:50:04:bc:b2:6c:94:86:b7:71:20:bc:75:f0:
d0:4c:df:05:bb:5a:eb:60:6d:ca:25:26:95:43:b4:5f:47:0d:
00:0f:19:1a:7e:fb:b9:01:7a:84:8a:31:c9:c7:43:a2:c9:5e:
7c:ce:d6:2a:2c:65:9a:50:1f:5d:55:ce:8f:2a:67:c3:be:12:
20:07:f4:86:c0:fd:a5:7c:b0:f3:ef:33:87:39:f7:14:ef:3b:
82:01:97:13:cf:85:a9:78:2d:b3:5f:81:de:a9:8a:e0:7a:4f:
63:f9:6e:62:1b:df:8b:d3:d0:ae:29:47:9f:5a:04:85:b3:73:
b1:8d:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org