Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/22626D9A2D1011EE8AA6DE7D4AD9E6FC.roa
File: 22626D9A2D1011EE8AA6DE7D4AD9E6FC.roa (raw, json)
Hash identifier: 2wlU3mrM+pdXhUatOsornwJXOW3YPOCBYX2R9gRuu3I=
Subject key identifier: 14:E4:51:AB:E2:47:42:89:73:25:AF:7B:E0:47:AF:AF:82:81:14:49
Certificate issuer: /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial: 0BFD
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/22626D9A2D1011EE8AA6DE7D4AD9E6FC.roa
Signing time: Fri 28 Jul 2023 06:29:42 +0000
ROA not before: Fri 28 Jul 2023 06:29:38 +0000
ROA not after: Wed 27 Jul 2033 06:29:38 +0000
asID: 48063
IP address blocks: 41.242.144.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 13:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Validity
Not Before: Jul 28 06:29:38 2023 GMT
Not After : Jul 27 06:29:38 2033 GMT
Subject: CN=64c36055-c78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:cc:e9:88:5e:39:b2:ef:ac:0a:b4:98:d8:
dc:7f:50:8a:4c:88:03:61:73:c8:45:0e:24:0e:26:
8f:b2:70:49:3d:96:6e:b8:32:ae:15:4c:dd:cd:bb:
f6:82:06:f6:69:7a:8f:22:b5:77:09:f9:cd:70:c4:
55:80:51:de:e5:77:44:be:b4:69:6c:0e:55:56:27:
0f:bf:e3:e3:d0:14:8e:51:22:61:00:03:66:62:f5:
7b:fd:d7:2b:cd:73:a3:a1:d8:14:ab:8e:f1:24:7c:
bd:2b:17:d6:82:c9:93:9e:64:25:a0:3a:e9:0e:fd:
bd:c2:52:82:ea:3e:ae:0c:f8:32:fa:10:04:79:b5:
11:37:31:ed:77:8e:80:76:24:37:dd:35:d3:a5:de:
46:b5:d6:c3:5a:b4:ce:12:d3:e8:e7:22:3d:dd:8f:
d3:14:94:ec:e8:dd:dd:4e:82:85:16:18:3b:11:d0:
3a:23:45:eb:6c:1f:d8:de:44:5c:7e:3d:c2:6c:01:
ef:d2:2b:2e:fb:be:27:c3:c0:e4:2c:f5:53:1c:09:
96:97:c8:54:ec:80:6e:20:64:5d:d1:53:1f:1b:3d:
cb:09:50:c5:23:70:15:82:38:3a:38:27:56:ba:df:
3c:b6:98:d8:a0:ae:44:0a:39:6a:e8:e9:c9:c5:95:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E4:51:AB:E2:47:42:89:73:25:AF:7B:E0:47:AF:AF:82:81:14:49
X509v3 Authority Key Identifier:
keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/22626D9A2D1011EE8AA6DE7D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.144.0/21
Signature Algorithm: sha256WithRSAEncryption
19:c1:47:5f:f4:83:2e:18:1a:3b:d0:9f:df:48:0d:a1:f8:b1:
ec:c4:10:e7:96:82:56:58:8b:78:f9:75:cf:23:8e:ff:49:9f:
62:19:bd:22:f8:37:ad:bf:13:04:7a:ac:02:c5:b5:87:a0:2d:
f1:8e:c2:30:6e:72:d2:5b:24:bf:ab:86:55:bb:19:c2:29:91:
2f:be:1a:8a:b0:e6:85:33:0f:16:4d:68:46:42:31:9d:60:73:
8e:52:68:95:9d:77:be:c9:80:9f:8d:42:17:f2:85:61:91:b6:
9c:18:dc:0e:b5:ec:be:9d:d7:a6:7a:63:92:a8:cf:70:7c:9d:
dc:df:4e:52:a1:18:4c:78:5a:ba:13:bb:45:f7:2b:1b:de:cb:
8b:1a:2c:95:5b:d6:9f:0f:cb:da:53:61:45:a6:44:e7:4c:67:
d4:c2:41:a1:d6:d2:36:8c:96:d2:bb:8e:a4:42:87:cb:e0:f9:
c9:f5:5c:0c:b3:6e:1e:74:c6:b7:ad:58:ab:6d:c6:64:91:b4:
da:0e:04:33:6d:f3:74:3c:29:38:1f:0c:49:2a:56:8b:e9:11:
92:c9:ce:9f:19:19:fe:70:60:02:84:a5:f1:af:30:22:f2:c7:
4d:c8:26:70:a6:73:59:4d:4c:ab:24:9d:98:2b:a0:9a:9e:51:
1f:48:5e:f7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QUY5RUVBRjExMC8GA1UEBRMoRjlBQURENUQ0NUFFQzNDQzU1QjFGODQ5RTJGQ0NF
MDc2RjNENkUzNDAeFw0yMzA3MjgwNjI5MzhaFw0zMzA3MjcwNjI5MzhaMBgxFjAU
BgNVBAMTDTY0YzM2MDU1LWM3OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCs8zpiF45su+sCrSY2Nx/UIpMiANhc8hFDiQOJo+ycEk9lm64Mq4VTN3N
u/aCBvZpeo8itXcJ+c1wxFWAUd7ld0S+tGlsDlVWJw+/4+PQFI5RImEAA2Zi9Xv9
1yvNc6Oh2BSrjvEkfL0rF9aCyZOeZCWgOukO/b3CUoLqPq4M+DL6EAR5tRE3Me13
joB2JDfdNdOl3ka11sNatM4S0+jnIj3dj9MUlOzo3d1OgoUWGDsR0DojRetsH9je
RFx+PcJsAe/SKy77vifDwOQs9VMcCZaXyFTsgG4gZF3RUx8bPcsJUMUjcBWCODo4
J1a63zy2mNigrkQKOWro6cnFle/7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFORR
q+JHQolzJa974Eevr4KBFEkwHwYDVR0jBBgwFoAU+ardXUWuw8xVsfhJ4vzOB289
bjQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFGOUVFLzkwREVEMENDMERDQzExRTU5QzI1QjcyNEY4QUVBMjI4Ly1hcmRY
VVd1dzh4VnNmaEo0dnpPQjI4OWJqUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1hcmRYVVd1dzh4VnNmaEo0dnpPQjI4OWJqUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkFGOUVFLzkwREVEMENDMERDQzExRTU5QzI1QjcyNEY4
QUVBMjI4LzIyNjI2RDlBMkQxMDExRUU4QUE2REU3RDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMp8pAwDQYJKoZIhvcNAQEL
BQADggEBABnBR1/0gy4YGjvQn99IDaH4sezEEOeWglZYi3j5dc8jjv9Jn2IZvSL4
N62/EwR6rALFtYegLfGOwjBuctJbJL+rhlW7GcIpkS++Goqw5oUzDxZNaEZCMZ1g
c45SaJWdd77JgJ+NQhfyhWGRtpwY3A617L6d16Z6Y5Koz3B8ndzfTlKhGEx4WroT
u0X3Kxvey4saLJVb1p8Py9pTYUWmROdMZ9TCQaHW0jaMltK7jqRCh8vg+cn1XAyz
bh50xretWKttxmSRtNoOBDNt83Q8KTgfDEkqVovpEZLJzp8ZGf5wYAKEpfGvMCLy
x03IJnCmc1lNTKsknZgroJqeUR9IXvc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org