Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/9E8C90841C2611EFA16EE9DC7CDC24C2.roa
File: 9E8C90841C2611EFA16EE9DC7CDC24C2.roa (raw, json)
Hash identifier: bI0mtaaKHeEFhdSOuXJXkPIY/35O9MQJlcK7WoO3VVk=
Subject key identifier: BC:25:7D:31:11:9E:78:46:74:F5:78:DD:0D:10:E8:C6:B0:22:8E:E0
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 4E
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/9E8C90841C2611EFA16EE9DC7CDC24C2.roa
Signing time: Mon 27 May 2024 12:42:47 +0000
ROA not before: Mon 27 May 2024 12:42:43 +0000
ROA not after: Mon 29 May 2034 12:42:43 +0000
asID: 328866
IP address blocks: 41.92.128.0/24 maxlen: 30
41.92.129.0/24 maxlen: 30
41.92.130.0/24 maxlen: 30
41.92.131.0/24 maxlen: 30
41.92.132.0/24 maxlen: 30
41.92.133.0/24 maxlen: 30
41.92.134.0/24 maxlen: 30
41.92.135.0/24 maxlen: 30
Validation: Failed, certificate revoked on Wed 26 Jun 2024 13:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: May 27 12:42:43 2024 GMT
Not After : May 29 12:42:43 2034 GMT
Subject: CN=66547fc7-4ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:8e:ae:3b:13:c1:6e:9b:17:34:3c:c8:b6:
df:43:64:95:5f:95:36:26:c4:01:2a:4b:75:ab:50:
26:b4:3a:fe:3a:3b:b0:81:aa:40:3c:db:cc:ca:c1:
ca:2d:d5:b1:97:10:c9:a4:eb:d5:dc:26:1d:9e:6c:
b4:13:8a:77:d5:55:88:e0:6c:88:05:0d:cd:e6:82:
2c:9d:bb:42:2e:3a:1f:19:e1:03:c6:65:9d:e4:e3:
91:90:e2:38:34:78:e2:a2:4a:dc:df:12:34:3a:2d:
64:55:02:94:40:41:fa:47:f8:c8:c4:0f:99:28:86:
fc:c7:2b:b7:14:23:e1:8d:6a:63:9f:6d:40:83:70:
bc:cf:3b:10:46:66:3a:6b:de:6d:3d:af:3c:bf:e2:
27:56:5b:1f:6a:17:3b:7f:25:15:6f:22:7c:6c:c1:
41:83:e8:ff:05:a7:0d:71:5e:a9:78:14:77:f7:1c:
a5:92:4e:40:5a:b2:0b:16:1c:5e:1c:84:0e:84:35:
2c:a3:1f:34:86:9a:63:10:fd:02:43:90:ca:58:9d:
ba:65:35:b6:48:09:7e:24:7b:8e:0b:49:ed:1c:05:
ed:ee:bb:e4:14:c9:91:69:18:b1:f8:d8:70:58:33:
8f:05:96:76:00:14:92:f7:bc:70:f1:5e:80:ce:e7:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:7D:31:11:9E:78:46:74:F5:78:DD:0D:10:E8:C6:B0:22:8E:E0
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/9E8C90841C2611EFA16EE9DC7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
47:78:07:91:4b:27:c2:b4:3d:de:73:9a:f5:8d:8c:6a:02:63:
3d:57:04:90:b5:ca:2a:15:b9:ad:5f:94:b4:a8:7a:b8:cb:19:
12:e0:f2:79:85:cc:8c:84:db:8b:37:a8:11:2e:79:42:aa:c8:
27:95:db:ca:45:98:4c:8a:b8:93:41:8c:64:0f:19:5a:75:4b:
0d:0c:63:0d:8e:43:6d:8c:5e:6f:bd:0e:40:2b:6b:ce:34:1e:
01:4d:26:49:10:93:03:9b:22:5c:9c:66:c8:5c:6b:47:fe:47:
56:ee:32:57:11:14:0a:8e:1d:61:de:6e:8d:a4:01:b6:59:a0:
1e:81:e3:61:98:2a:cb:35:7d:36:b3:b4:4b:04:8f:de:3c:79:
99:d3:41:17:25:da:86:fb:4d:8d:b5:9c:c9:13:5e:13:55:f6:
29:8c:c9:30:7a:df:4e:4e:93:c0:46:64:af:07:93:21:0c:e4:
7a:7f:93:da:73:ae:77:e6:38:19:23:af:bb:72:82:6f:7c:23:
e1:fa:1f:72:ec:4c:36:b9:1e:00:46:30:3f:33:1a:c4:f8:34:
41:5e:28:17:cb:7c:e0:1e:18:01:ef:8b:1b:db:4d:a7:22:7f:
ab:ff:4c:1e:dd:86:2e:fa:70:be:76:0e:e0:c4:78:36:0a:74:
30:4a:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 19:05:27 2024 by rpki-client on console-fra.rpki-client.org