Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/C8F137AC667A11ED9ADDC1ABF1222468.roa
File: C8F137AC667A11ED9ADDC1ABF1222468.roa (raw, json)
Hash identifier: P/s2tDX6J804gsv5bHxWJyaUEXwiuySifDyUjV+nGVw=
Subject key identifier: 98:CB:28:B2:A7:39:81:E1:54:4A:9C:60:BB:24:69:F0:A3:06:14:E2
Certificate issuer: /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial: 04
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/C8F137AC667A11ED9ADDC1ABF1222468.roa
Signing time: Thu 17 Nov 2022 13:21:46 +0000
ROA not before: Mon 21 Nov 2022 13:21:43 +0000
ROA not after: Mon 25 Nov 2030 13:21:43 +0000
asID: 328395
IP address blocks: 196.49.62.0/24 maxlen: 24
2001:43f8:11f1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Dec 2022 21:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Validity
Not Before: Nov 21 13:21:43 2022 GMT
Not After : Nov 25 13:21:43 2030 GMT
Subject: CN=6376356a-a1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:af:19:5f:c0:be:2c:17:f3:3d:d0:3e:73:
3f:d4:d0:ea:1f:43:30:f8:3b:f1:b7:d0:e2:76:03:
a1:c4:e3:a9:5f:3a:ec:0e:41:9a:98:81:ce:f6:e3:
f9:38:c8:45:e1:2c:d1:86:8a:1a:5a:01:a2:a8:78:
99:4f:21:c3:54:40:4b:4d:ee:71:f6:46:6f:cf:30:
86:de:88:aa:62:4b:64:c6:5f:12:d0:d9:5f:96:f3:
d5:78:ae:5c:fc:9e:ee:c6:a7:0a:05:35:14:f2:39:
1d:a0:18:71:eb:74:82:be:11:3c:4c:00:30:4e:3c:
89:3d:ac:f2:ee:a2:ca:2a:43:9c:64:54:8a:f8:a8:
ef:96:55:d6:4f:43:9c:31:c1:04:d1:17:1a:87:18:
f9:5d:12:10:a6:08:61:9a:81:ff:09:34:27:24:57:
6a:5f:0c:14:41:47:3b:7d:9b:64:46:44:8e:59:92:
02:67:5a:33:17:75:f3:e0:3a:9a:6d:1d:50:26:81:
ff:a0:df:72:de:a1:b5:8a:c4:5f:67:ed:3b:cd:76:
15:29:86:ce:36:cd:f9:02:52:8a:22:b1:7f:66:3c:
fe:55:38:66:e2:9e:68:e7:17:87:e3:c3:54:97:fd:
c3:a6:ef:e3:6d:1a:9a:e0:7c:31:56:88:84:12:53:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CB:28:B2:A7:39:81:E1:54:4A:9C:60:BB:24:69:F0:A3:06:14:E2
X509v3 Authority Key Identifier:
keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/C8F137AC667A11ED9ADDC1ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.62.0/24
IPv6:
2001:43f8:11f1::/48
Signature Algorithm: sha256WithRSAEncryption
9a:86:74:7d:a5:1e:8a:36:43:ea:ea:57:24:03:56:d8:cd:76:
00:f3:b8:5d:2a:c8:31:11:e8:72:b3:ce:d6:89:ec:33:d9:cf:
28:c7:82:af:65:a8:3b:09:dc:75:a0:7b:1f:98:d6:d9:fa:04:
59:8c:fa:dd:33:a2:63:32:1e:78:cd:0a:32:28:48:ca:ec:70:
fe:c6:34:0b:12:85:5c:2c:41:f8:8c:f7:39:99:b5:d5:97:c3:
2d:c6:07:bf:a9:10:0b:3a:36:18:a3:53:63:72:e3:19:cd:f0:
f0:7e:99:99:65:8d:93:c7:38:a4:92:ae:cd:94:55:b9:cc:41:
d5:6b:66:80:72:43:c7:f1:b0:ba:60:8b:25:8d:3b:de:d6:a5:
c8:3b:35:64:5f:3e:03:a1:04:a9:31:8c:4d:5f:1d:e7:42:9a:
6c:de:e5:ed:07:4f:7f:ac:b1:ae:15:ce:1d:73:70:2b:85:bc:
19:6a:95:32:3e:e0:2a:8b:2f:3b:9d:84:3d:5f:95:13:5c:56:
1b:76:86:1c:66:ab:2a:5c:26:83:77:49:8a:9f:b4:8f:ca:8e:
f1:8a:33:bd:1b:9c:1b:ab:33:51:d1:2e:89:7c:fc:70:80:bd:
7a:fb:53:db:32:6c:15:6f:01:3c:cb:0e:1a:92:45:5f:92:b3:
d4:83:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org