Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1C05D3660D4211EF86AA2466017001B1.roa
File: 1C05D3660D4211EF86AA2466017001B1.roa (raw, json)
Hash identifier: tQytsD30NNdj58PKOfyzI4A/21xIdoZBkGKdaO0glmI=
Subject key identifier: 65:95:41:3A:32:F0:63:78:6F:06:16:72:2B:68:37:22:FC:06:A9:A2
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0619
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1C05D3660D4211EF86AA2466017001B1.roa
Signing time: Wed 08 May 2024 13:51:46 +0000
ROA not before: Wed 08 May 2024 13:51:42 +0000
ROA not after: Wed 31 May 2034 13:51:42 +0000
asID: 20011
IP address blocks: 197.88.200.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1561 (0x619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 8 13:51:42 2024 GMT
Not After : May 31 13:51:42 2034 GMT
Subject: CN=663b8372-00d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:e1:04:63:bd:9e:96:2e:d7:6e:34:db:b7:
ca:af:74:02:3e:a5:a5:72:9d:01:ce:35:78:67:35:
e0:f0:04:5b:3b:fd:b7:24:9a:ae:00:0d:96:f2:d7:
d8:f2:63:62:8c:68:14:1d:05:e3:91:72:10:cd:9c:
83:97:24:40:4e:86:a5:fd:a2:20:32:92:27:56:08:
83:61:6e:1a:0f:ee:b1:4d:a3:60:9f:ec:69:14:ce:
af:01:e8:47:0d:28:7f:d0:02:ab:4b:a6:2d:83:4b:
9f:7f:6d:f0:9c:da:70:7e:e5:15:0a:17:70:92:7b:
da:2f:17:32:2f:c0:2b:5c:19:99:14:43:8a:15:7b:
82:53:3b:e8:8f:bb:de:45:e6:2f:e3:25:25:2a:70:
b6:19:ea:0e:43:a8:f2:0c:9b:24:23:b9:92:ab:c2:
26:11:51:95:db:78:4b:70:d4:63:3a:2c:06:25:e8:
a3:72:10:a2:c6:45:ca:af:a5:80:20:37:81:19:db:
dd:39:87:20:e8:32:36:07:ac:00:6c:8f:44:eb:89:
a6:43:84:f1:2b:e3:a9:ea:30:83:2c:07:d4:0a:1d:
6a:69:68:02:97:db:8f:e9:71:a1:49:e1:65:56:fc:
2a:96:8d:8e:53:38:3c:12:30:17:2d:e3:1d:b2:60:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:41:3A:32:F0:63:78:6F:06:16:72:2B:68:37:22:FC:06:A9:A2
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1C05D3660D4211EF86AA2466017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.88.200.0/22
Signature Algorithm: sha256WithRSAEncryption
39:63:88:a0:d4:e8:10:89:22:62:e0:fc:f0:8e:03:ae:84:70:
eb:11:79:70:77:4a:a9:4d:5d:2d:b6:7c:ad:a5:f9:16:12:64:
30:25:26:2a:0d:3a:8a:46:39:5f:f6:c5:b6:ac:0a:0f:18:72:
d5:a3:ca:2b:29:08:9d:9a:49:92:65:1e:2b:70:1c:3f:0e:f9:
a1:6d:e4:df:ff:4a:a2:f1:66:81:b3:49:88:57:a9:6d:29:ce:
7c:7f:5b:72:9c:b0:83:97:db:2a:92:68:63:3f:23:47:72:97:
b9:1b:46:3f:17:3d:8f:f4:60:84:ed:ce:c0:d8:9f:38:b9:63:
f8:57:d5:2a:7e:7c:c5:b8:25:3c:00:1b:cf:51:29:5c:2d:b9:
f4:cb:35:74:57:ec:24:9c:c7:d6:eb:d7:51:63:fd:1d:e7:05:
99:21:f9:80:95:58:70:2f:0e:73:0e:b8:0a:64:2c:df:ad:e6:
6e:b7:5f:3c:3b:94:34:c4:a9:a1:91:34:80:45:05:0a:93:04:
52:c6:ad:b1:34:34:42:fb:e2:9d:7f:b1:c0:6c:4c:71:47:e4:
95:9d:9e:62:af:c3:9b:fb:81:f5:38:5c:2b:d0:a7:f5:c4:b1:
75:43:67:9c:3f:05:14:72:f2:28:cf:aa:0e:1a:63:65:a5:86:
71:7e:d9:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBhkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yNDA1MDgxMzUxNDJaFw0zNDA1MzExMzUxNDJaMBgxFjAU
BgNVBAMTDTY2M2I4MzcyLTAwZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDk+EEY72eli7XbjTbt8qvdAI+paVynQHONXhnNeDwBFs7/bckmq4ADZby
19jyY2KMaBQdBeORchDNnIOXJEBOhqX9oiAykidWCINhbhoP7rFNo2Cf7GkUzq8B
6EcNKH/QAqtLpi2DS59/bfCc2nB+5RUKF3CSe9ovFzIvwCtcGZkUQ4oVe4JTO+iP
u95F5i/jJSUqcLYZ6g5DqPIMmyQjuZKrwiYRUZXbeEtw1GM6LAYl6KNyEKLGRcqv
pYAgN4EZ2905hyDoMjYHrABsj0TriaZDhPEr46nqMIMsB9QKHWppaAKX24/pcaFJ
4WVW/CqWjY5TODwSMBct4x2yYG55AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZZVB
OjLwY3hvBhZyK2g3IvwGqaIwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4LzFDMDVEMzY2MEQ0MjExRUY4NkFBMjQ2NjAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALFWMgwDQYJKoZIhvcNAQEL
BQADggEBADljiKDU6BCJImLg/PCOA66EcOsReXB3SqlNXS22fK2l+RYSZDAlJioN
OopGOV/2xbasCg8YctWjyispCJ2aSZJlHitwHD8O+aFt5N//SqLxZoGzSYhXqW0p
znx/W3KcsIOX2yqSaGM/I0dyl7kbRj8XPY/0YITtzsDYnzi5Y/hX1Sp+fMW4JTwA
G89RKVwtufTLNXRX7CScx9br11Fj/R3nBZkh+YCVWHAvDnMOuApkLN+t5m63Xzw7
lDTEqaGRNIBFBQqTBFLGrbE0NEL74p1/scBsTHFH5JWdnmKvw5v7gfU4XCvQp/XE
sXVDZ5w/BRRy8ijPqg4aY2WlhnF+2TQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org