Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/80C5E316223011EEA62ADB4D4AD9E6FC.roa
File: 80C5E316223011EEA62ADB4D4AD9E6FC.roa (raw, json)
Hash identifier: zflOd06NRBJIfFfbcFSWmT/hPlx6s4xfGU6TRc4tmrw=
Subject key identifier: 7D:BC:EA:F9:5D:7B:46:AD:4A:D1:72:F9:CB:D3:33:67:62:D1:CA:00
Certificate issuer: /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial: 82
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Authority info access: rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/80C5E316223011EEA62ADB4D4AD9E6FC.roa
Signing time: Fri 14 Jul 2023 10:23:41 +0000
ROA not before: Fri 14 Jul 2023 10:23:36 +0000
ROA not after: Sun 14 Dec 2025 10:23:36 +0000
asID: 15964
IP address blocks: 195.24.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 07:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Validity
Not Before: Jul 14 10:23:36 2023 GMT
Not After : Dec 14 10:23:36 2025 GMT
Subject: CN=64b1222d-50c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:4c:8a:73:b0:0f:cd:5d:e6:3e:d6:05:9a:
a5:4a:41:69:ae:2d:8d:24:82:de:9b:95:f5:6b:2c:
68:af:1d:bb:c1:34:8e:d7:38:c1:98:13:2f:83:4d:
71:e1:fd:e8:b3:04:df:fd:37:bc:cf:4f:38:72:5f:
de:0c:2c:c6:47:95:2b:3b:af:24:e1:c3:93:23:2f:
ce:b4:1c:8f:3b:46:94:dd:e6:25:3b:17:ca:09:84:
be:ae:b2:78:d8:fd:6f:00:f6:0d:19:01:94:4a:42:
c5:c9:8e:06:83:e2:9f:8f:75:8c:44:0a:a6:cd:90:
eb:3f:6d:1e:c7:d5:76:a1:49:c7:ae:7f:f1:5f:6f:
be:ef:67:0a:8b:9b:01:d5:08:26:63:ad:7f:a9:f5:
a4:76:21:3c:5f:eb:5d:cc:82:06:6b:a6:0e:8e:11:
ad:02:ca:fd:db:b2:8c:20:f5:21:dc:cf:87:bb:fd:
53:0d:9f:75:f4:70:53:e1:2e:b8:6c:27:29:81:26:
52:d2:cc:18:1b:5b:51:98:29:3e:c3:27:de:2c:c4:
6a:d3:8d:4f:a2:e1:69:73:25:8b:7b:74:bb:ee:15:
5f:01:84:03:c2:6f:f1:14:5f:86:84:7c:8e:3d:6b:
28:bc:95:25:6c:79:b3:44:e6:25:2d:52:e7:e6:1d:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:EA:F9:5D:7B:46:AD:4A:D1:72:F9:CB:D3:33:67:62:D1:CA:00
X509v3 Authority Key Identifier:
keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/80C5E316223011EEA62ADB4D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.24.192.0/19
Signature Algorithm: sha256WithRSAEncryption
79:69:16:fd:ae:7f:8f:57:07:fd:5b:d4:a2:63:50:38:f7:15:
ee:b0:3e:fe:81:bb:44:1b:18:d6:48:44:9d:ad:fb:91:1d:cd:
49:d4:98:a6:cd:c2:37:26:cb:0f:67:e3:a1:e5:0d:15:7c:ce:
6d:96:ae:bb:d8:33:24:16:41:16:68:8d:88:45:11:0a:07:cc:
45:ea:75:73:e7:f6:a5:40:e2:0a:1d:26:de:94:ac:3e:4e:9d:
1d:14:fa:a0:c4:d4:6e:93:94:3b:60:6e:14:81:f4:dc:29:e2:
6b:5a:6f:87:c8:16:77:c2:02:97:f8:d3:19:f0:5a:d4:37:e6:
da:2e:7f:bf:5c:e5:9a:69:a0:cd:50:85:db:f0:88:c9:09:d2:
31:49:55:7e:3d:49:7d:c2:e6:cb:b6:4a:1d:c8:59:fe:3e:60:
91:50:7b:6f:6e:30:92:58:a2:c1:3d:41:cc:f8:be:58:9a:6c:
9f:3a:e7:44:fe:83:c3:39:2b:cf:b5:d3:1e:43:e6:bc:b6:7c:
1c:a9:a4:7f:aa:e9:db:56:be:2d:cd:10:75:cf:3f:f6:12:b8:
27:57:dd:a5:f5:00:17:78:a1:9f:ae:2c:c0:d2:4c:8f:6d:a2:
4d:96:c4:b5:82:a7:07:65:29:0a:9c:80:a0:ca:40:af:fd:e0:
92:f4:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org