Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/C203584EF7E211EEBE05BA3D017001B1.roa
File: C203584EF7E211EEBE05BA3D017001B1.roa (raw, json)
Hash identifier: ZKSgDVI+YEtbmv6Nrel6t8ARI5NzX/SmfHIqZOkCsnE=
Subject key identifier: CA:0A:33:64:09:5B:0E:07:31:1B:24:DC:94:D7:07:12:75:59:66:7D
Certificate issuer: /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial: 0118
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Authority info access: rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/C203584EF7E211EEBE05BA3D017001B1.roa
Signing time: Thu 11 Apr 2024 09:06:19 +0000
ROA not before: Thu 11 Apr 2024 09:06:15 +0000
ROA not after: Tue 11 Apr 2034 09:06:15 +0000
asID: 16509
IP address blocks: 163.201.84.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 07:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Validity
Not Before: Apr 11 09:06:15 2024 GMT
Not After : Apr 11 09:06:15 2034 GMT
Subject: CN=6617a80a-7210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:b1:b3:24:ed:f9:15:88:fb:ca:cf:a1:ce:
a1:e0:9c:a6:af:0f:91:e5:f4:2a:ca:8a:3c:6f:de:
19:ed:d9:a8:2d:e9:c9:f8:c2:41:17:84:17:10:17:
8e:71:9e:80:35:e4:0c:51:c9:4b:6f:30:7e:73:eb:
08:22:c8:b5:c8:fd:df:ac:15:4a:87:53:e9:a3:5f:
df:93:fa:63:4a:20:c2:c4:4a:6a:1d:61:40:f8:2b:
37:d6:b5:a9:ee:3b:c2:37:0b:95:2e:bf:88:8e:d5:
1f:c2:03:c4:2d:ea:cc:a5:73:ab:ab:ca:61:71:e2:
df:f3:6e:3a:6b:40:89:c7:88:db:82:5c:2d:79:9b:
ce:96:4d:bf:bb:23:41:4b:b2:42:d2:47:fb:cb:92:
b1:48:19:b1:44:bc:d2:2f:fc:6d:dd:63:82:1c:fc:
cb:09:8b:05:0e:9a:18:92:8c:be:6c:b2:7a:2b:e7:
fb:af:5e:62:1b:5b:02:3c:cd:cb:5c:9b:bf:4b:d7:
79:9c:dc:be:9f:a5:0d:71:bb:4b:65:20:84:df:e5:
36:b9:bb:19:97:ba:aa:f0:86:46:0d:03:e9:09:d6:
db:84:6c:bf:08:31:15:9c:89:29:3a:2d:4d:aa:b4:
f0:41:e2:58:61:c7:56:ba:69:31:ff:05:41:f3:5b:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0A:33:64:09:5B:0E:07:31:1B:24:DC:94:D7:07:12:75:59:66:7D
X509v3 Authority Key Identifier:
keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/C203584EF7E211EEBE05BA3D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.201.84.0/23
Signature Algorithm: sha256WithRSAEncryption
78:bc:ad:6a:dd:29:25:99:f7:a1:7a:07:2c:3b:18:ac:af:56:
78:ba:fe:a2:3d:d3:51:9c:4e:e0:e2:e1:e6:9e:49:d2:eb:4b:
36:d1:fc:89:89:b4:d7:60:67:80:fe:95:5c:fb:af:40:7f:69:
b4:1c:a7:35:5a:8a:91:f7:25:c2:66:b4:27:c9:d0:a1:d3:66:
f0:98:cd:8f:e1:4a:eb:9f:f3:55:5f:0d:1d:67:dd:41:9c:ee:
35:9f:e3:03:03:4c:11:7b:12:a9:f9:92:bc:0c:c7:e3:ad:73:
0c:02:7b:7b:a2:fb:a9:f8:e2:e7:ff:ba:38:83:8c:c2:ee:e3:
24:5a:0b:f6:c2:bd:f2:4b:af:3d:bd:7d:e6:42:ec:41:9c:58:
c5:d9:60:50:c2:44:0a:55:50:43:42:7f:eb:42:33:14:59:ff:
ca:fc:28:36:5e:d0:c6:7a:da:e8:ef:e3:e0:cc:cc:be:52:e0:
91:a8:96:b5:da:f3:d1:04:3e:39:9b:1e:e3:ec:9a:57:c0:cc:
36:88:ab:14:d3:3e:df:b6:30:33:4d:1d:1a:49:33:7a:6f:5e:
09:71:94:5e:9c:37:41:37:28:87:58:02:95:8c:d9:0e:1f:6a:
a3:92:2f:c9:1d:a3:7e:16:10:87:f8:aa:71:73:c4:df:80:a3:
6a:3c:2c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org