Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/3F5C06AE8A0311EEAB32743E4AD9E6FC.roa
File: 3F5C06AE8A0311EEAB32743E4AD9E6FC.roa (raw, json)
Hash identifier: ltCP9LcdtBTF0HD6j+MDZ4gylgABZRIMFFT688J7s5U=
Subject key identifier: 7C:CC:D9:F0:2B:20:0A:ED:CA:08:96:81:9D:06:47:EB:08:13:9C:9B
Certificate issuer: /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial: 0C87
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/3F5C06AE8A0311EEAB32743E4AD9E6FC.roa
Signing time: Thu 23 Nov 2023 13:21:45 +0000
ROA not before: Thu 23 Nov 2023 13:21:41 +0000
ROA not after: Tue 22 Nov 2033 13:21:41 +0000
asID: 48063
IP address blocks: 41.191.212.0/22 maxlen: 32
41.242.144.0/21 maxlen: 32
196.50.2.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 May 2024 07:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Validity
Not Before: Nov 23 13:21:41 2023 GMT
Not After : Nov 22 13:21:41 2033 GMT
Subject: CN=655f51e9-b4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:fd:46:8b:5b:6b:0e:97:7e:ab:fe:e5:6f:
4d:ce:70:ed:2c:22:aa:98:e7:b5:4f:6d:52:26:96:
2c:c0:9d:72:8d:7f:e7:a1:14:f3:9c:60:8d:ac:02:
30:ce:fe:62:a1:83:d9:a0:2d:cd:e1:1f:e1:a0:c4:
88:79:c6:74:ff:59:6c:6e:45:46:86:96:9b:8b:d1:
bd:41:16:e9:d9:4f:8e:11:99:f0:46:68:2d:80:07:
58:68:40:ca:12:7f:28:78:ee:18:45:96:eb:d1:09:
01:b7:e7:e1:98:eb:ce:96:7d:a8:a7:bb:fa:81:c4:
0b:c2:65:f6:c2:09:44:5f:11:09:8b:a6:06:0f:80:
b1:8c:cc:0a:bb:87:35:55:c1:80:38:74:a4:c7:fe:
19:06:cb:76:17:64:e3:de:95:5d:f3:b8:76:02:62:
92:96:68:2f:6a:99:df:b9:35:1a:45:dd:e9:3e:52:
37:6c:a0:ef:4e:92:1a:7e:3e:ff:0e:50:42:3e:31:
43:c2:73:9b:2c:a9:27:a0:90:5b:94:e4:2e:e0:14:
84:3c:2b:84:fc:8c:79:d5:82:d3:9a:26:14:ad:f1:
35:b8:a4:4a:26:94:5f:77:5b:78:19:a9:7e:76:38:
55:84:50:4c:d9:bc:e8:b9:cb:5d:d4:22:06:c0:f2:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:D9:F0:2B:20:0A:ED:CA:08:96:81:9D:06:47:EB:08:13:9C:9B
X509v3 Authority Key Identifier:
keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/3F5C06AE8A0311EEAB32743E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.191.212.0/22
41.242.144.0/21
196.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:37:66:a0:9d:9c:06:b0:29:0f:20:cd:28:a8:16:02:fd:ac:
75:fa:6f:c0:ec:3a:cb:5d:88:e0:cd:40:e1:c1:84:31:a6:b4:
17:9e:92:9f:f5:c1:cc:d9:10:ba:15:cb:76:e8:89:59:d9:bd:
16:ce:e8:11:06:57:6c:83:2e:e0:52:33:f5:7d:84:d7:9e:1a:
b8:5a:83:4a:59:07:6d:0a:87:f2:08:ca:f8:e6:64:21:a6:85:
a2:0d:90:f0:8b:c5:28:0f:14:df:9b:ca:50:29:3b:c0:00:3e:
97:50:84:de:51:8b:93:94:4c:24:88:d0:24:cb:b7:cf:e1:11:
8a:7d:b8:7b:64:5d:31:f4:d5:89:ea:5b:0b:70:f8:7c:62:4a:
d5:fc:3f:cb:87:0e:02:e2:12:eb:ce:7c:50:29:48:3a:60:61:
37:cf:26:89:fd:62:f4:ea:53:1c:a8:fd:b4:6a:5b:85:99:e3:
79:54:f4:9d:a8:b0:1e:f2:2f:58:3f:44:f8:c3:28:d8:44:01:
70:ee:f8:3b:ab:6b:9f:14:40:1d:4e:cd:86:e4:5e:44:3c:a4:
63:03:1d:b2:05:c7:33:62:06:f9:51:78:4f:d4:4a:ae:bf:5c:
1a:49:b5:3c:53:e8:2b:27:80:df:0a:78:17:6c:6e:19:7b:94:
2b:04:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org