Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/22E43520AC2C11ECB746F1875A40D577.roa
File: 22E43520AC2C11ECB746F1875A40D577.roa (raw, json)
Hash identifier: iL/W0QLhxqjcr+phMg7CziEqu7jIyT6rczxGPFZUTH8=
Subject key identifier: F4:D3:1F:73:07:14:75:7E:31:99:6A:49:EF:24:F4:F2:4E:6C:50:C7
Certificate issuer: /CN=F3683ABDAF/serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
Certificate serial: 02D4
Authority key identifier: 15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/22E43520AC2C11ECB746F1875A40D577.roa
Signing time: Fri 25 Mar 2022 11:10:11 +0000
ROA not before: Fri 25 Mar 2022 11:10:07 +0000
ROA not after: Fri 31 Mar 2028 11:10:07 +0000
asID: 328632
IP address blocks: 196.192.48.0/20 maxlen: 24
2c0f:eb90::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 25 Mar 2022 14:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3683ABDAF/serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
Validity
Not Before: Mar 25 11:10:07 2022 GMT
Not After : Mar 31 11:10:07 2028 GMT
Subject: CN=623da313-b93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:63:92:2c:4b:29:a5:1e:85:98:ee:9e:42:ac:
28:eb:03:6f:60:2b:73:e5:b6:86:df:81:7c:15:fd:
65:84:04:54:8d:95:9c:51:4b:7d:b7:89:76:00:9c:
28:f0:87:ce:e8:75:41:e0:ee:05:64:1e:36:f9:e8:
62:cb:9e:bd:ce:c6:7e:16:f1:b9:08:43:6e:13:17:
62:ea:02:b7:ba:9c:a7:ec:b8:fd:a4:6a:f6:88:25:
a3:95:b0:72:24:e8:cf:e5:26:d7:44:06:90:ab:ab:
d0:f7:71:91:75:ca:8f:3c:86:1c:bf:33:df:35:6d:
66:0c:f0:03:d3:45:b0:84:a3:25:61:54:07:c7:2a:
a1:2a:2e:d4:01:31:64:d1:4e:b9:28:3c:ca:85:21:
7a:ca:21:48:ab:69:d6:d9:f8:5f:99:37:eb:12:fc:
83:ce:f3:e7:05:90:62:75:3a:a5:bd:ed:b0:83:63:
1e:03:ea:74:72:99:5e:e7:b9:7f:31:57:f9:47:bf:
2c:f6:ae:c8:a4:5e:2e:fa:f5:e3:8a:ad:27:2d:bd:
48:0f:25:e8:83:81:18:d5:df:16:38:40:c0:cb:0f:
6b:94:8e:59:98:3d:cc:74:51:da:7b:5f:ad:53:08:
e6:25:83:3f:fa:50:8c:7d:88:57:7b:bd:aa:58:2e:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:1F:73:07:14:75:7E:31:99:6A:49:EF:24:F4:F2:4E:6C:50:C7
X509v3 Authority Key Identifier:
keyid:15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/22E43520AC2C11ECB746F1875A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.192.48.0/20
IPv6:
2c0f:eb90::/32
Signature Algorithm: sha256WithRSAEncryption
31:56:2e:bc:d3:db:98:16:c3:7f:37:94:aa:aa:16:2e:be:ac:
3a:fa:56:7c:f7:6c:ad:2e:19:a6:d2:9a:f5:42:8f:06:49:c4:
41:02:00:8e:22:fc:cd:6a:3d:8d:91:06:93:6b:52:fc:12:e6:
e7:0a:13:46:0f:41:a4:b4:05:5e:45:93:c9:34:b0:84:ad:d4:
0b:00:c2:d7:fc:91:34:b1:46:f6:a9:95:8c:2e:2a:78:78:59:
89:a9:b6:a5:b3:ee:1c:c0:43:69:0c:ec:76:ff:02:91:79:c8:
b7:1a:33:84:c5:6d:c5:b8:65:7b:a4:d6:50:67:64:c6:9d:ef:
c1:8f:d3:9d:40:dc:1e:ae:25:9f:4e:99:a5:e6:70:35:88:0a:
bc:73:77:58:e1:10:61:eb:e6:16:61:03:0f:5e:c4:92:77:68:
3b:e7:5c:e1:43:4b:16:47:83:13:b2:b0:a6:7d:f1:51:12:77:
37:0e:6e:ee:dc:6b:6b:33:1d:a6:9a:36:60:67:9a:58:2a:3e:
ee:3b:6a:2c:23:57:35:c6:48:f8:c6:7e:bb:21:3d:14:ea:fe:
d7:1c:b9:ab:e4:38:87:17:a0:4a:e9:7b:32:a3:8e:30:13:4e:
a0:bd:36:91:e7:a4:de:aa:a9:7f:8c:ac:96:7b:58:0c:55:68:
75:14:1b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:27 2024 by rpki-client on console-fra.rpki-client.org