Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/04B1D8CCF7D011EE89F4C126017001B1.roa
File: 04B1D8CCF7D011EE89F4C126017001B1.roa (raw, json)
Hash identifier: Fc5Y+YkNw0frf51zKZOK+ifoMyWHFG0gCj2vdf+sNjg=
Subject key identifier: EB:5E:C4:DD:D7:A3:56:E2:54:76:8A:F4:C5:95:39:24:A7:B2:48:1B
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01A6
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/04B1D8CCF7D011EE89F4C126017001B1.roa
Signing time: Thu 11 Apr 2024 06:52:10 +0000
ROA not before: Thu 11 Apr 2024 06:52:07 +0000
ROA not after: Thu 30 Apr 2043 06:52:07 +0000
asID: 30988
IP address blocks: 196.200.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 07:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Validity
Not Before: Apr 11 06:52:07 2024 GMT
Not After : Apr 30 06:52:07 2043 GMT
Subject: CN=6617889a-6e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:c0:6c:7f:ef:4b:37:1c:71:66:4f:0a:4f:
f3:7e:73:83:44:13:88:c3:15:d4:f7:32:a0:0c:df:
b6:9d:65:e3:43:29:19:71:ba:69:b5:c3:cb:cd:f9:
fc:bd:d8:95:83:71:bf:66:78:9e:44:a2:08:02:26:
8b:08:ff:ef:37:46:6e:48:d1:bd:d2:04:7a:59:51:
4f:85:65:b4:b5:9e:85:c3:17:cb:1b:6f:b4:e5:e8:
dd:08:d0:8f:68:d4:b1:b6:72:1f:f6:36:6f:d6:2f:
c9:6d:06:d7:79:04:39:dc:5d:89:6c:31:8f:2e:ab:
67:a6:48:78:7c:4f:12:68:cf:98:b6:6e:2d:04:cb:
62:18:89:a4:43:45:a4:44:ec:81:19:3f:3b:75:b0:
6a:a4:b0:5a:38:fb:8c:25:45:29:a7:f0:38:8b:02:
01:d3:5e:68:d4:1b:bc:56:33:33:e1:ff:eb:65:6f:
d9:9e:2d:6b:f3:05:28:5a:4e:9a:24:e4:96:49:a7:
10:f6:7c:ea:03:29:b3:53:51:2c:b5:c5:d3:fb:3f:
b3:a4:c9:d3:1a:1f:71:1a:07:a2:71:9c:e8:21:76:
54:f4:03:6b:53:85:9b:fd:60:70:b8:49:da:f4:f8:
8b:c9:c5:fc:c9:9c:eb:3b:9e:3d:cb:0f:e3:64:37:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5E:C4:DD:D7:A3:56:E2:54:76:8A:F4:C5:95:39:24:A7:B2:48:1B
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/04B1D8CCF7D011EE89F4C126017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:1a:d5:f2:c6:04:e5:26:16:1c:ea:99:51:3c:34:b6:d7:10:
85:de:44:11:96:52:93:51:10:27:8a:89:b2:43:3f:26:e9:af:
48:fb:4a:ee:07:1b:48:9c:b9:e1:32:45:4f:46:97:58:08:2c:
66:b6:8f:4c:dd:1e:a0:ef:e1:22:1f:9d:fe:57:1c:d7:b3:0f:
1b:0c:17:10:ba:81:36:01:bb:4f:bf:31:c4:14:3e:06:1f:40:
4d:31:76:21:3f:2d:0d:a3:90:c8:4a:28:c0:02:44:08:9c:33:
93:a7:9e:86:6d:e3:82:34:cc:86:27:8e:25:12:83:16:c3:6a:
3a:85:ff:5d:55:7b:85:b6:45:88:41:94:43:9c:8e:2e:3a:d2:
ca:ec:c5:f3:d8:77:c8:52:2e:c4:b5:8b:54:39:e6:77:82:1c:
c2:02:8b:7e:ed:ad:fa:42:d5:dd:46:98:5c:7f:0b:72:73:78:
2b:c3:14:a9:e3:2c:5e:e6:17:83:a6:fb:11:59:ea:e1:31:7a:
a7:4b:c1:b4:79:b4:83:ca:15:1c:6e:79:2e:ff:d1:17:ef:45:
64:26:d4:5e:34:d3:d1:f0:eb:d5:ae:7d:31:bc:a4:9d:d6:93:
9f:d6:a6:ea:21:ab:1b:90:24:f9:2d:05:54:75:62:a5:e1:5e:
d1:11:67:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 12:11:07 2024 by rpki-client on console-ams.rpki-client.org