Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/DC7D27B2F7CF11EE8A474626017001B1.roa
File: DC7D27B2F7CF11EE8A474626017001B1.roa (raw, json)
Hash identifier: etm89UuvIYTJ2boEtdSYq/6UqELB2BHO8yfvABrb7bg=
Subject key identifier: F9:7C:B2:68:28:6D:03:83:BF:72:CD:DE:9B:F0:03:75:7B:AD:71:7F
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01A4
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/DC7D27B2F7CF11EE8A474626017001B1.roa
Signing time: Thu 11 Apr 2024 06:51:02 +0000
ROA not before: Thu 11 Apr 2024 06:50:59 +0000
ROA not after: Thu 30 Apr 2043 06:50:59 +0000
asID: 30988
IP address blocks: 41.73.128.0/19 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 07:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Validity
Not Before: Apr 11 06:50:59 2024 GMT
Not After : Apr 30 06:50:59 2043 GMT
Subject: CN=66178856-8f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:87:2e:ed:3d:13:ec:bf:aa:7e:1b:fa:d8:
6a:ff:ed:b6:bc:05:85:6b:61:cc:d7:87:60:72:fa:
3f:4a:a2:e8:30:b9:08:fa:7a:ce:49:61:a6:9b:fe:
e0:fc:e3:ad:01:c5:c2:29:f4:98:ed:82:bc:76:72:
46:fd:d2:db:25:89:5b:48:df:c4:f6:f8:25:44:87:
8e:77:01:56:62:b4:7b:70:9a:62:92:36:8e:58:ef:
14:6e:f6:bc:4f:23:ad:31:09:54:bb:86:90:69:96:
ea:4f:ad:c7:06:8a:ea:42:33:fb:7e:2b:41:5b:65:
1e:ac:ab:4f:8b:c9:0e:eb:b8:7c:16:8a:f3:2c:eb:
88:75:17:52:a2:8a:50:2b:1c:e6:ed:8b:9e:4f:4c:
1e:a5:a8:59:54:20:c9:1c:d5:25:ce:ed:18:c7:0f:
9d:3a:5e:9b:31:d0:77:d2:38:7b:36:90:a5:2f:c9:
91:a2:6b:3f:79:24:2c:6f:b9:4d:83:c3:12:24:53:
9f:5c:5d:1a:be:f5:de:77:9a:dc:4e:d7:de:e4:0d:
e1:84:73:93:90:10:7e:1a:51:40:87:5e:69:d9:08:
48:cd:c8:93:58:f2:30:af:d6:c0:2b:34:c9:48:2d:
e3:d7:af:3a:aa:c3:bd:8d:06:df:c2:70:4a:79:53:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:B2:68:28:6D:03:83:BF:72:CD:DE:9B:F0:03:75:7B:AD:71:7F
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/DC7D27B2F7CF11EE8A474626017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.128.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:c3:3d:33:25:9a:c2:cc:85:a5:11:d3:6f:6d:f1:d7:18:0f:
af:d5:2a:fc:29:b0:3e:51:da:72:cc:d5:69:82:0e:64:f5:7a:
1f:82:99:b4:3a:e1:a7:7f:f7:b6:9c:34:8d:94:2d:95:cb:c1:
70:78:1c:28:0e:07:ef:db:b7:f9:fb:70:3e:a1:1d:ee:8e:6f:
81:bc:74:89:a2:e7:28:96:1b:dd:75:32:40:65:6c:98:47:13:
2b:67:13:8a:e4:32:ed:ae:c3:fd:8c:03:36:b8:ff:ef:2a:8c:
1b:85:61:c4:a5:cc:88:a3:85:f4:04:98:0e:0f:8e:66:be:e0:
74:79:11:20:9c:a1:27:d9:28:49:51:d2:27:34:3b:1b:a5:25:
2c:98:85:bf:ae:83:5b:bd:0c:9f:bf:54:f3:d4:f7:60:6c:2c:
51:8e:ad:be:44:6a:f8:76:24:8d:75:9b:08:fc:7e:f4:b1:8f:
ab:e1:df:11:df:f1:d4:4b:35:0f:db:2b:80:94:99:69:23:f3:
77:2f:28:48:c4:c9:ef:ee:d5:7f:2d:17:40:32:b8:64:6d:bf:
38:cf:04:77:7e:51:63:1d:ee:78:c8:6d:5c:e3:73:08:b0:3c:
36:0d:a6:0c:0c:67:fc:1c:69:75:f3:01:63:2d:81:0a:0c:4a:
5d:f7:ce:75
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OURCNUVBRjExMC8GA1UEBRMoRDNFMkUwQkNFQjYxRkI5QzQ1Mjc4MjZFNjEwRDQ2
NzY5OUQ2M0UxNDAeFw0yNDA0MTEwNjUwNTlaFw00MzA0MzAwNjUwNTlaMBgxFjAU
BgNVBAMTDTY2MTc4ODU2LThmNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuqocu7T0T7L+qfhv62Gr/7ba8BYVrYczXh2By+j9KougwuQj6es5JYaab
/uD8460BxcIp9Jjtgrx2ckb90tsliVtI38T2+CVEh453AVZitHtwmmKSNo5Y7xRu
9rxPI60xCVS7hpBplupPrccGiupCM/t+K0FbZR6sq0+LyQ7ruHwWivMs64h1F1Ki
ilArHObti55PTB6lqFlUIMkc1SXO7RjHD506Xpsx0HfSOHs2kKUvyZGiaz95JCxv
uU2DwxIkU59cXRq+9d53mtxO197kDeGEc5OQEH4aUUCHXmnZCEjNyJNY8jCv1sAr
NMlILePXrzqqw72NBt/CcEp5U6E5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+Xyy
aChtA4O/cs3em/ADdXutcX8wHwYDVR0jBBgwFoAU0+LgvOth+5xFJ4JuYQ1GdpnW
PhQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlEQjVFL0QxRUE1OTE0QkYzMTExRURBN0U3MTdEMEYxMjIyNDY4LzAtTGd2
T3RoLTV4Rko0SnVZUTFHZHBuV1BoUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzAtTGd2T3RoLTV4Rko0SnVZUTFHZHBuV1BoUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlEQjVFL0QxRUE1OTE0QkYzMTExRURBN0U3MTdEMEYx
MjIyNDY4L0RDN0QyN0IyRjdDRjExRUU4QTQ3NDYyNjAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUpSYAwDQYJKoZIhvcNAQEL
BQADggEBALfDPTMlmsLMhaUR029t8dcYD6/VKvwpsD5R2nLM1WmCDmT1eh+CmbQ6
4ad/97acNI2ULZXLwXB4HCgOB+/bt/n7cD6hHe6Ob4G8dImi5yiWG911MkBlbJhH
EytnE4rkMu2uw/2MAza4/+8qjBuFYcSlzIijhfQEmA4Pjma+4HR5ESCcoSfZKElR
0ic0OxulJSyYhb+ug1u9DJ+/VPPU92BsLFGOrb5Eavh2JI11mwj8fvSxj6vh3xHf
8dRLNQ/bK4CUmWkj83cvKEjEye/u1X8tF0AyuGRtvzjPBHd+UWMd7njIbVzjcwiw
PDYNpgwMZ/wcaXXzAWMtgQoMSl33znU=
-----END CERTIFICATE-----
Generated at Fri Apr 12 09:55:47 2024 by rpki-client on console-fra.rpki-client.org