Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/D00C64B233BF11EF8E256E47762E951A.roa
File: D00C64B233BF11EF8E256E47762E951A.roa (raw, json)
Hash identifier: sp8UPbjy1iEh7xFWNBAT6EnmjOilU2kJzrLTD0AJqM0=
Subject key identifier: 27:17:5E:45:C9:DC:64:26:9B:FF:AB:E1:38:39:C9:03:9F:33:9A:19
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 7E
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/D00C64B233BF11EF8E256E47762E951A.roa
Signing time: Wed 26 Jun 2024 13:27:19 +0000
ROA not before: Wed 26 Jun 2024 13:27:15 +0000
ROA not after: Mon 26 Jun 2034 13:27:15 +0000
asID: 328866
IP address blocks: 41.190.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jul 2024 13:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: Jun 26 13:27:15 2024 GMT
Not After : Jun 26 13:27:15 2034 GMT
Subject: CN=667c1737-817c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:10:6e:eb:ed:f7:b2:42:54:01:52:e0:e8:
01:8b:bd:26:66:3b:f8:7f:cd:c3:2f:ae:c5:7c:2d:
7e:60:9b:64:b3:e9:fc:67:0f:1a:54:61:24:d5:20:
31:14:be:2e:50:7d:34:e9:40:f8:f7:25:3d:2b:a4:
bd:05:dc:38:4a:67:68:41:8a:83:97:5d:4a:72:4c:
31:26:5d:b6:6b:17:70:b2:ed:62:9e:ec:fe:4c:c6:
46:9b:53:34:08:ff:6a:36:33:e0:2e:2c:8d:e2:69:
d1:9e:af:b5:6c:c4:6c:93:dd:a5:f2:d7:b0:51:56:
a8:54:f3:41:89:64:ff:35:9d:4b:2b:b4:71:25:5e:
73:70:ee:17:96:9f:ba:8f:8c:d3:25:67:b3:b9:fe:
1d:e1:9e:67:67:a6:54:87:41:60:bd:01:3f:12:74:
aa:fb:7c:92:f2:70:ca:c0:f0:15:4f:70:fb:0c:e6:
f7:26:4c:ab:34:ee:8b:89:12:eb:6c:87:31:88:c1:
33:38:f8:c0:f7:3f:91:d5:b2:00:36:99:ee:47:37:
99:f3:7d:d4:30:12:a2:36:1a:db:11:d7:20:6e:f7:
45:9b:dd:83:aa:99:42:44:a7:af:da:4d:f6:9b:15:
70:ab:f9:96:9b:01:24:a8:22:09:57:cf:0d:06:58:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:5E:45:C9:DC:64:26:9B:FF:AB:E1:38:39:C9:03:9F:33:9A:19
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/D00C64B233BF11EF8E256E47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.190.224.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:97:b7:02:cf:6b:47:a9:5a:d6:7b:f3:28:f0:61:ef:a7:2e:
6e:5f:5d:5c:2f:38:bd:f9:f9:eb:e5:0f:1a:8e:12:ca:36:57:
96:23:c7:43:be:30:4b:f0:db:0d:59:bd:a9:49:9d:0d:09:15:
db:5c:18:e6:06:f1:aa:b4:9d:14:e2:51:63:49:9a:6f:86:01:
6f:02:2f:6d:dd:d5:41:97:de:68:f0:b2:d7:27:d2:03:ed:5e:
13:a8:5f:c6:d8:a3:ea:89:cc:ed:8a:7b:ef:43:d8:5c:01:f0:
15:08:99:f9:c2:83:cc:7c:e2:22:77:1e:52:b0:bc:bb:c7:e0:
7e:dd:6c:f0:fd:8f:30:0f:bb:b7:2d:ca:7c:cb:48:35:cc:8a:
e7:f6:1a:dd:34:1d:f5:94:99:34:73:56:fc:62:3e:36:b5:64:
77:22:a8:69:da:78:76:49:ba:2e:76:3a:41:ad:e6:18:be:63:
a8:97:55:57:65:5b:1f:56:16:18:7c:17:de:17:69:f0:2d:94:
74:00:9b:02:2b:22:bd:73:59:a9:80:ea:00:19:db:a5:72:0d:
81:50:58:f9:51:d8:33:a4:83:39:eb:b9:70:8c:db:76:d0:5a:
a4:ce:dd:06:0b:b9:8e:3c:9a:15:4e:3c:10:e7:85:1c:18:b2:
38:24:51:a1
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBfjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
QkE2QUFGMTEwLwYDVQQFEyg0RjQ4RTdFQTMwQzk4OUIxNUQzNjM5Mzc3NjM1NTNB
MDdFMTZDRDhFMB4XDTI0MDYyNjEzMjcxNVoXDTM0MDYyNjEzMjcxNVowGDEWMBQG
A1UEAxMNNjY3YzE3MzctODE3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMXTEG7r7feyQlQBUuDoAYu9JmY7+H/Nwy+uxXwtfmCbZLPp/GcPGlRhJNUg
MRS+LlB9NOlA+PclPSukvQXcOEpnaEGKg5ddSnJMMSZdtmsXcLLtYp7s/kzGRptT
NAj/ajYz4C4sjeJp0Z6vtWzEbJPdpfLXsFFWqFTzQYlk/zWdSyu0cSVec3DuF5af
uo+M0yVns7n+HeGeZ2emVIdBYL0BPxJ0qvt8kvJwysDwFU9w+wzm9yZMqzTui4kS
62yHMYjBMzj4wPc/kdWyADaZ7kc3mfN91DASojYa2xHXIG73RZvdg6qZQkSnr9pN
9psVcKv5lpsBJKgiCVfPDQZYrxUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQnF15F
ydxkJpv/q+E4OckDnzOaGTAfBgNVHSMEGDAWgBRPSOfqMMmJsV02OTd2NVOgfhbN
jjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0JBNkEvMEY0QTM3RjRFQ0Q5MTFFRTlGNzMyQzY3Nzc1NDEyRTYvVDBqbjZq
REppYkZkTmprM2RqVlRvSDRXelk0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVDBqbjZqREppYkZkTmprM2RqVlRvSDRXelk0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0JBNkEvMEY0QTM3RjRFQ0Q5MTFFRTlGNzMyQzY3Nzc1
NDEyRTYvRDAwQzY0QjIzM0JGMTFFRjhFMjU2RTQ3NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAim+4DANBgkqhkiG9w0BAQsF
AAOCAQEAzZe3As9rR6la1nvzKPBh76cubl9dXC84vfn56+UPGo4SyjZXliPHQ74w
S/DbDVm9qUmdDQkV21wY5gbxqrSdFOJRY0mab4YBbwIvbd3VQZfeaPCy1yfSA+1e
E6hfxtij6onM7Yp770PYXAHwFQiZ+cKDzHziInceUrC8u8fgft1s8P2PMA+7ty3K
fMtINcyK5/Ya3TQd9ZSZNHNW/GI+NrVkdyKoadp4dkm6LnY6Qa3mGL5jqJdVV2Vb
H1YWGHwX3hdp8C2UdACbAisivXNZqYDqABnbpXINgVBY+VHYM6SDOeu5cIzbdtBa
pM7dBgu5jjyaFU48EOeFHBiyOCRRoQ==
-----END CERTIFICATE-----
Generated at Tue Jul 2 14:30:22 2024 by rpki-client on console-fra.rpki-client.org