Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/2B8210EA4CB611EEBF447D554AD9E6FC.roa
File: 2B8210EA4CB611EEBF447D554AD9E6FC.roa (raw, json)
Hash identifier: BX6GcBaN9Bnv63sVgFirYTwLZwm15uhvA4hxp/s++3U=
Subject key identifier: 8A:24:FF:21:B2:3E:C8:84:C6:B5:57:39:14:2D:8E:02:B0:53:43:2D
Certificate issuer: /CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Certificate serial: EB
Authority key identifier: 56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/2B8210EA4CB611EEBF447D554AD9E6FC.roa
Signing time: Wed 06 Sep 2023 13:06:19 +0000
ROA not before: Wed 06 Sep 2023 13:06:15 +0000
ROA not after: Sat 31 Aug 2024 13:06:15 +0000
asID: 37284
IP address blocks: 41.74.64.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Validity
Not Before: Sep 6 13:06:15 2023 GMT
Not After : Aug 31 13:06:15 2024 GMT
Subject: CN=64f8794b-7e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:95:84:49:79:d8:62:4c:0d:71:fc:15:e6:
23:1d:e5:3c:af:b0:dd:07:53:da:c6:63:27:29:72:
c8:ca:c0:be:5f:96:e3:f9:93:49:9b:a8:9c:f8:8b:
4c:ad:4d:46:84:a5:8d:41:32:b0:2a:5a:b8:f9:3c:
c9:47:40:75:18:be:de:d1:68:11:5f:fc:d0:c7:b8:
7b:09:a2:30:8d:c0:16:d1:1f:73:02:0e:68:75:cb:
ed:c6:35:ec:c0:25:1e:a4:d5:c2:a7:5f:a3:1a:bb:
67:a5:d9:78:97:3e:39:55:58:ff:33:90:be:c3:f0:
1f:83:b0:49:13:28:7c:1c:d0:83:3b:3a:38:16:f7:
eb:de:b8:17:79:6d:1a:98:35:a5:92:22:1b:8f:94:
6a:e0:12:cb:4f:68:01:b6:5f:42:9e:39:ba:5e:12:
c7:5a:da:f5:49:b5:c6:dd:fa:c9:7d:b6:b8:a0:67:
79:07:09:60:a3:55:cf:eb:92:18:6a:0f:24:18:d8:
19:7e:41:85:bb:58:3d:ee:cc:4b:9a:eb:46:1a:fe:
d2:e1:4e:d2:c5:bb:3c:3a:ed:39:a5:ef:70:48:de:
5a:88:00:82:8f:1f:9d:00:7f:25:37:30:26:97:8e:
f5:00:88:37:d7:14:64:6e:d0:4b:bc:e9:7f:a2:44:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:24:FF:21:B2:3E:C8:84:C6:B5:57:39:14:2D:8E:02:B0:53:43:2D
X509v3 Authority Key Identifier:
keyid:56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/2B8210EA4CB611EEBF447D554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.74.64.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:d2:2c:0c:c5:3a:0c:ca:c0:be:fb:4e:e6:f3:65:99:6d:02:
13:1e:60:9d:67:2b:48:8a:c5:c2:d8:0b:26:93:9d:23:4d:1d:
a8:07:e2:e2:7b:38:e1:22:7f:2b:2c:8c:b6:4e:ea:7e:6f:d6:
bc:02:f7:fa:b7:5f:ee:81:12:2e:eb:83:d4:a1:f6:26:82:9e:
7f:a5:52:2a:6b:1a:95:74:5c:aa:fb:73:15:ba:86:7e:9b:44:
68:43:74:b4:26:12:9e:e3:fe:54:80:87:9a:33:da:ca:e7:8a:
ea:74:50:fb:ee:7e:51:1b:13:3d:5b:2b:79:11:b6:48:af:a3:
af:52:64:50:6f:21:10:03:dc:fb:bb:f0:1f:f2:c1:30:f5:e0:
cf:01:d8:7d:4e:77:35:db:91:85:4b:d6:ab:cf:28:e1:d4:66:
9c:5b:e7:7e:bf:9d:2a:89:0d:26:75:61:2b:85:9a:d9:b5:f9:
90:2c:29:0b:c6:84:4d:63:28:32:e9:12:61:eb:6c:5c:60:21:
3c:07:b6:49:f6:ee:8a:27:85:9f:57:26:ff:ec:2c:47:b0:50:
34:63:f4:31:fa:7c:bd:50:cf:cd:30:97:77:12:76:a7:df:99:
17:4f:be:01:dc:7d:8d:68:dc:e3:9a:88:9a:c1:9e:fe:7d:a6:
f2:49:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 10 10:13:35 2023 by rpki-client on console-fra.rpki-client.org