Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/26B5501E82FC11EE97310C7C4AD9E6FC.roa
File: 26B5501E82FC11EE97310C7C4AD9E6FC.roa (raw, json)
Hash identifier: x7eQ3ndwnINUui76cYwGmP9/q245M8yRickw8kgcBKM=
Subject key identifier: FA:96:A6:FB:28:FC:FC:D6:63:8D:29:93:FC:32:21:9F:54:DE:7F:8D
Certificate issuer: /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial: 0C7C
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/26B5501E82FC11EE97310C7C4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 14:43:19 +0000
ROA not before: Tue 14 Nov 2023 14:43:15 +0000
ROA not after: Sun 13 Nov 2033 14:43:15 +0000
asID: 57351
IP address blocks: 41.242.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 23 Nov 2023 13:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3196 (0xc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Validity
Not Before: Nov 14 14:43:15 2023 GMT
Not After : Nov 13 14:43:15 2033 GMT
Subject: CN=65538787-7d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:9a:6d:f1:ad:18:0f:21:be:0a:a4:ee:51:
61:21:2e:b6:14:4e:27:1f:73:e8:72:36:70:9b:3f:
4f:6a:67:ef:f6:61:9c:fd:ff:6e:b7:5e:e6:b6:6c:
f8:4f:c5:92:e9:ee:c5:26:6d:be:99:b4:53:50:0e:
b1:28:19:08:7a:7e:48:90:59:c4:dd:70:34:0b:90:
22:97:9a:3b:f8:03:9a:d9:d5:b2:72:c9:d4:e3:1d:
33:42:b1:b8:47:75:55:52:4c:a2:41:11:86:83:ba:
53:4b:c4:bc:9a:d8:23:1f:14:5f:3d:0d:46:cc:00:
42:dc:fc:2d:07:5c:c1:20:43:7d:91:a8:26:21:0d:
b6:80:7b:ba:06:b8:a9:c2:78:ed:af:e1:f9:bf:2e:
9f:7d:8f:ea:65:f8:b7:33:36:07:41:83:f9:87:44:
d4:33:f1:25:66:a7:dc:8d:1a:03:8c:70:e4:1d:e2:
1e:32:0c:c5:62:f6:d2:64:37:5f:32:95:71:70:b2:
3f:38:ef:89:5f:83:68:8c:79:ab:9c:29:d5:e5:a8:
3a:16:98:90:bb:12:92:50:18:72:ba:b3:ec:1b:d8:
0e:8f:46:04:78:86:38:13:06:55:25:70:69:0d:b5:
87:90:cf:d5:66:10:49:d5:38:d9:07:77:23:28:1e:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:96:A6:FB:28:FC:FC:D6:63:8D:29:93:FC:32:21:9F:54:DE:7F:8D
X509v3 Authority Key Identifier:
keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/26B5501E82FC11EE97310C7C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.144.0/22
Signature Algorithm: sha256WithRSAEncryption
15:79:e9:6b:63:df:b0:d6:63:6b:94:fe:d6:e2:a8:a8:62:34:
97:a9:b9:cd:92:0e:f0:9e:9a:37:ce:3e:6e:93:df:ba:c0:ff:
3c:d8:3a:9c:c2:51:2c:fd:b9:38:ec:6b:12:8a:92:62:86:aa:
38:41:04:43:5a:a2:d6:77:2c:40:8d:1d:35:04:cf:61:78:e9:
8c:1f:f0:b2:ad:3a:0e:59:30:27:4b:7c:2b:9e:85:3b:6c:b1:
9b:32:e5:c2:02:19:41:c4:5a:c0:52:a4:26:a0:8f:00:90:0a:
a9:d4:c4:4c:cb:0d:9d:af:86:33:b6:63:f3:5c:d2:58:71:4d:
4f:ae:ae:f0:64:a9:02:b4:30:c1:67:61:d7:ff:db:ae:38:d6:
d5:3c:92:52:d0:a9:a8:09:6b:93:c7:91:71:03:b7:66:eb:27:
df:18:55:8c:9e:09:37:06:3f:b7:53:d3:74:9c:e4:be:98:21:
a8:98:26:3d:f2:91:f0:30:a0:57:32:a5:5c:69:fa:22:dc:d4:
1d:20:5f:4a:2a:51:e5:13:ef:f3:72:c9:29:a3:f4:71:5e:5a:
b6:42:67:08:36:24:fc:b6:45:5b:72:ee:b4:cb:6c:d7:28:b6:
a0:ee:e8:84:f4:d9:87:38:ea:a7:30:99:3f:df:15:d0:be:c2:
ad:0b:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org