Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/5A20F702F28011EEBEB4E29D775412E6.roa
File: 5A20F702F28011EEBEB4E29D775412E6.roa (raw, json)
Hash identifier: zt2J9W+Muq4qPtu+XQQKK9xS9bczUp54D3+3gIpPbMU=
Subject key identifier: 71:74:DC:58:6A:54:CA:C8:0F:F4:B5:E6:DF:3D:3B:E9:74:9E:04:83
Certificate issuer: /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial: 0101
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Authority info access: rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/5A20F702F28011EEBEB4E29D775412E6.roa
Signing time: Thu 04 Apr 2024 12:39:18 +0000
ROA not before: Thu 04 Apr 2024 12:39:14 +0000
ROA not after: Thu 04 Apr 2030 12:39:14 +0000
asID: 8075
IP address blocks: 163.199.84.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Validity
Not Before: Apr 4 12:39:14 2024 GMT
Not After : Apr 4 12:39:14 2030 GMT
Subject: CN=660e9f76-c435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:d3:75:c7:0d:b9:a8:84:62:3d:3b:75:28:
4e:31:a3:d0:67:a7:9c:15:84:78:2a:03:ec:45:92:
2f:fc:20:87:48:51:99:8a:6c:5f:58:90:41:c4:d1:
48:f3:9a:bc:aa:5e:33:54:3e:e1:6d:a5:2f:c4:be:
bf:d9:8f:3f:3a:f9:3b:27:39:31:90:a1:60:db:98:
28:dc:69:b1:4f:73:38:33:95:6c:96:45:71:e9:2f:
7f:aa:84:20:aa:82:0d:32:ff:3a:bc:a0:99:a0:28:
e1:2a:b6:6a:42:6e:b5:0a:7a:b9:68:db:65:8c:f1:
9e:1b:9d:90:cf:ef:26:7c:0e:f7:a9:bb:49:a5:a3:
85:0d:d5:c4:76:df:0f:1f:17:1f:f4:d4:76:8e:f1:
32:63:10:2b:1c:14:bd:90:2d:9a:11:a4:44:b2:9f:
dc:af:03:08:e2:98:96:66:69:90:9d:dc:79:61:cb:
62:cd:85:94:57:bb:45:ec:c9:e3:de:8b:cb:9a:a6:
41:67:2e:36:a9:54:58:be:a9:f4:4f:13:db:bc:2a:
62:24:50:42:f4:ca:96:15:10:be:0e:de:4a:c8:4c:
22:90:47:bb:dd:09:97:7d:db:3d:96:95:ac:d5:b9:
92:ff:8c:96:24:a6:c2:94:ed:1e:c8:c2:33:bb:e1:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:74:DC:58:6A:54:CA:C8:0F:F4:B5:E6:DF:3D:3B:E9:74:9E:04:83
X509v3 Authority Key Identifier:
keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/5A20F702F28011EEBEB4E29D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.199.84.0/23
Signature Algorithm: sha256WithRSAEncryption
22:60:d7:ef:8a:75:6e:f0:fc:f6:f7:3c:af:c1:9b:03:53:71:
7b:eb:3b:e1:0b:40:f9:35:3b:25:8a:8d:b3:5f:b3:b3:24:f9:
54:8d:60:d6:9a:cc:6c:24:39:de:ae:f9:30:79:5d:7b:cf:3b:
80:69:d2:0c:4e:bc:2b:32:96:53:c4:76:c4:38:7c:1a:d9:57:
73:29:7b:e1:ee:ac:e1:ea:fc:6f:59:71:2e:f4:8a:49:40:0f:
bf:fc:16:7a:c1:c3:49:5d:c7:15:15:56:3e:8d:f9:85:4a:ba:
f9:76:10:0d:fc:77:0d:bf:75:b1:d2:7f:26:2d:c4:6f:b1:df:
a2:72:b6:4f:c7:7f:68:ee:24:6a:d8:cf:ab:f7:58:85:c6:52:
46:76:a6:38:cb:d4:3f:8f:34:8a:d8:7c:08:2f:d3:65:bf:77:
b1:4a:3d:bc:3c:35:d3:32:ae:e1:ec:da:4e:8c:4e:22:d8:23:
0d:9f:cd:9c:f0:87:60:37:06:1e:c4:1e:f9:67:a7:4d:79:26:
03:e3:24:51:5b:b3:2f:e1:da:49:d6:e8:a3:fc:09:65:f3:3b:
4b:93:4e:db:ce:ae:0a:21:67:24:05:13:df:c1:53:06:81:2b:
b8:c5:cf:7e:72:c0:ff:98:c3:18:5a:68:07:91:a3:ae:9e:4d:
b7:86:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org