Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/418B872C63E611EDB9BDA8A1F1222468.roa
File: 418B872C63E611EDB9BDA8A1F1222468.roa (raw, json)
Hash identifier: pJhHgYe1vkvJnxdwK8IC8Vda49n8hzKfE29Ywi9pY+g=
Subject key identifier: 93:5B:93:14:C8:67:E4:26:2B:F2:B8:9E:FA:61:11:73:60:5E:82:FF
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 02A5
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/418B872C63E611EDB9BDA8A1F1222468.roa
Signing time: Mon 14 Nov 2022 06:33:31 +0000
ROA not before: Mon 14 Nov 2022 06:33:27 +0000
ROA not after: Sun 14 Nov 2032 06:33:27 +0000
asID: 211252
IP address blocks: 41.216.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Nov 14 06:33:27 2022 GMT
Not After : Nov 14 06:33:27 2032 GMT
Subject: CN=6371e13b-d37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:0a:e1:a9:49:e0:25:4f:dd:fb:0f:e2:97:
9c:f8:d0:01:31:66:f0:be:9f:2e:0e:dc:c6:0c:87:
80:c2:c5:95:4c:9e:00:14:6e:b7:ad:7d:7d:73:5a:
28:3a:19:79:13:1f:27:00:14:a3:66:e4:07:14:49:
14:7c:04:57:75:b2:68:a3:6f:bc:1a:52:90:26:90:
5e:6a:71:68:a7:00:6b:63:54:89:18:a4:4b:a2:a1:
0f:4b:d5:ee:38:19:fe:54:54:15:3c:fb:e7:80:48:
c8:32:12:a1:a8:af:22:d0:ae:61:1a:a0:fc:f5:e4:
36:dd:00:1b:50:f7:f6:00:e2:2f:12:02:6a:e3:43:
3a:3e:a0:a8:aa:62:74:c5:43:bb:a0:a2:bb:6a:6e:
af:6f:e5:61:ab:09:aa:bd:8f:d1:f6:ab:af:cd:be:
47:be:76:e8:7f:b6:57:00:15:b6:a1:09:a4:63:ef:
cb:ec:13:26:82:af:35:ca:0a:63:8f:b0:4e:9a:8d:
65:49:86:0a:10:9d:ab:3a:90:fb:32:89:12:15:11:
36:f3:82:3a:be:98:9a:65:74:99:c0:84:d0:be:95:
80:1a:d7:06:3f:f1:bd:8a:b7:be:0b:39:4c:49:6d:
6f:2c:a9:c7:36:e0:fa:7c:ae:eb:62:4b:5a:85:0f:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:93:14:C8:67:E4:26:2B:F2:B8:9E:FA:61:11:73:60:5E:82:FF
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/418B872C63E611EDB9BDA8A1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:84:9e:76:1c:75:d0:e8:59:87:e8:8a:13:10:47:f1:29:7e:
8e:b7:7e:bf:31:4b:53:9e:9e:0c:75:b1:ab:84:2c:ce:23:cd:
d5:c5:8d:ab:73:c9:a7:3c:45:4f:e4:c7:0d:8a:f0:3c:4c:bf:
7e:0d:75:ba:41:08:06:56:df:ad:12:8d:c0:27:48:2e:08:f1:
23:23:ff:45:5e:f5:a4:db:a6:be:3a:5d:a4:02:fd:5a:64:a0:
c6:bf:0b:ec:48:85:4e:ef:00:4a:a6:4a:22:a7:72:b1:39:44:
60:a0:15:44:8d:0e:8b:a1:ff:4f:17:6e:69:1e:f1:f3:7d:ab:
53:cf:e9:83:79:eb:c0:67:6b:4d:8d:75:82:d4:aa:cd:27:89:
db:38:0d:f0:39:ac:a8:ff:5a:f3:a7:14:0e:9f:7d:b4:e0:b4:
e1:49:65:21:d8:0f:2a:a9:a6:30:6b:33:c3:01:d8:bf:7c:26:
0f:b7:b8:c2:0f:e0:3d:ed:e8:ee:0f:12:1c:82:28:68:94:1b:
55:f4:de:2c:8c:64:47:ea:3b:2b:ec:6c:07:a4:e7:24:85:3a:
a4:f3:7f:fe:11:84:a4:c3:a9:e8:d5:b6:64:77:45:7b:68:4d:
3b:a8:42:44:c5:0f:6a:31:e1:8c:40:cd:ea:71:cc:cb:1f:25:
44:1a:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 11:45:52 2023 by rpki-client on console-ams.rpki-client.org