Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/83FDCF1EF64F11EE873AC576775412E6.roa
File: 83FDCF1EF64F11EE873AC576775412E6.roa (raw, json)
Hash identifier: ryNaUdbHDx4DonL6Sbal5LXS5cZcJ0udNaKE9f87Nk8=
Subject key identifier: 77:B8:4E:2D:6B:F8:08:97:44:E6:D0:4B:EE:57:39:E0:11:B8:61:63
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 12
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/83FDCF1EF64F11EE873AC576775412E6.roa
Signing time: Tue 09 Apr 2024 08:59:47 +0000
ROA not before: Tue 09 Apr 2024 08:59:44 +0000
ROA not after: Sun 09 Apr 2034 08:59:44 +0000
asID: 328866
IP address blocks: 41.92.250.0/24 maxlen: 24
41.92.251.0/24 maxlen: 24
41.92.252.0/24 maxlen: 24
41.92.253.0/24 maxlen: 24
41.92.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 12:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: Apr 9 08:59:44 2024 GMT
Not After : Apr 9 08:59:44 2034 GMT
Subject: CN=66150383-8998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:ac:8e:7c:7d:ac:7c:79:2b:68:64:92:5d:
41:b0:7b:f7:b5:d6:81:0e:dd:a0:37:31:67:30:3e:
65:1b:cc:11:14:92:17:93:b0:67:92:c8:61:e3:18:
0a:dc:76:76:0b:12:cc:88:e8:b5:cc:99:38:82:2a:
67:a1:b6:20:aa:10:f9:b9:a4:3c:71:8a:05:af:b0:
ba:79:af:de:56:03:9a:da:6c:27:0c:cc:05:44:4e:
da:5c:86:7a:54:c9:50:c9:1f:99:c9:ed:2d:89:2f:
66:c0:97:95:e7:d3:7b:51:99:7b:ab:74:ca:ef:4f:
0d:58:0f:3b:f3:4f:66:e7:16:e6:9b:f6:84:cd:0e:
0f:8a:20:2f:d7:83:ae:8e:01:90:24:c6:9d:b0:31:
80:37:5b:bb:fd:ca:c8:4d:89:9f:14:d5:cb:d9:fc:
a7:68:4f:97:65:e1:b5:e3:25:88:cc:88:4a:4c:e1:
ad:34:f3:1f:89:ab:4f:f3:44:39:fc:cd:19:4b:c2:
40:1b:59:b3:41:41:28:9a:4a:36:bd:43:c5:75:6c:
61:82:b1:ea:6f:2e:60:ec:01:b7:7a:d3:2a:d6:53:
74:93:fe:d8:8d:f4:89:5b:f9:b5:ad:1f:68:c3:1d:
f9:86:3f:78:13:90:5f:b8:0d:f7:ed:b7:d3:aa:22:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B8:4E:2D:6B:F8:08:97:44:E6:D0:4B:EE:57:39:E0:11:B8:61:63
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/83FDCF1EF64F11EE873AC576775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.92.250.0-41.92.254.255
Signature Algorithm: sha256WithRSAEncryption
9b:e6:9e:1d:89:8e:e3:b8:8f:41:d3:b6:15:4d:fc:4b:82:93:
6f:da:a8:e2:66:68:e8:d7:7c:f4:de:64:27:7a:46:7c:cf:0d:
6c:0f:51:8f:4c:2a:5b:db:a4:05:3d:e2:20:6e:1b:85:82:69:
1c:b8:22:ab:3b:2a:44:63:3a:56:1e:d7:ca:6f:6f:1d:6b:2e:
1a:f1:61:ef:1b:5b:6c:06:5e:08:e1:36:fb:61:4e:75:cb:ec:
03:6e:3f:f4:0b:ff:fd:ae:44:9c:92:18:6b:39:e6:66:bd:53:
89:d5:c5:91:58:67:06:86:54:a7:f7:b5:10:ca:84:64:76:ef:
82:23:8b:56:55:67:86:31:16:1d:f1:c2:e4:92:1c:8b:b7:7e:
33:d3:cd:1e:e1:96:2d:bd:5e:f7:eb:13:bd:4d:6b:d6:c7:5c:
8f:4f:fd:68:97:81:db:99:2d:be:f4:46:c2:31:10:4b:7e:3b:
ad:da:47:82:4d:1d:30:08:25:a3:d7:6e:bb:5a:6d:e6:f3:e7:
fc:c3:46:94:57:e2:c0:03:fd:e1:7b:49:5b:a0:a3:7e:7c:93:
1d:8c:95:aa:1b:ef:13:b6:64:50:cf:2a:77:ed:47:0b:b8:1e:
bb:61:40:ee:1b:0d:86:74:50:ab:46:84:b0:f9:19:ea:19:b7:
71:4e:39:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org