Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/60DADDDC2D1011EEB32DCB7E4AD9E6FC.roa
File: 60DADDDC2D1011EEB32DCB7E4AD9E6FC.roa (raw, json)
Hash identifier: xO+dGDiCEg7Op39Te7ozL/P3vnugY3hOxVQycgGGPvs=
Subject key identifier: E7:9D:68:F8:14:E3:B3:36:59:04:F6:D4:F4:28:94:F7:86:A4:43:97
Certificate issuer: /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial: 0BFF
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/60DADDDC2D1011EEB32DCB7E4AD9E6FC.roa
Signing time: Fri 28 Jul 2023 06:31:26 +0000
ROA not before: Fri 28 Jul 2023 06:31:23 +0000
ROA not after: Wed 27 Jul 2033 06:31:23 +0000
asID: 48063
IP address blocks: 196.50.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 13:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3071 (0xbff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Validity
Not Before: Jul 28 06:31:23 2023 GMT
Not After : Jul 27 06:31:23 2033 GMT
Subject: CN=64c360be-442a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:9e:71:a4:b8:2f:74:6d:4d:3d:28:3c:df:
b7:d2:9c:6f:4c:54:7d:d4:88:94:55:73:bb:6f:aa:
c5:e9:a1:a9:79:cf:45:96:5f:29:ad:66:35:a5:fb:
16:e8:df:50:26:dc:a6:7d:69:ee:d6:c9:74:8b:ab:
d4:8f:13:5b:64:7c:70:05:af:89:a6:5d:56:07:f1:
b6:ca:ff:d8:7c:47:ce:91:77:9a:d1:11:3d:06:9e:
34:d6:cf:95:03:a8:c2:f1:3c:7f:95:64:66:e8:b1:
13:51:13:11:e1:07:cd:6b:29:99:ce:1e:d4:e0:41:
ed:88:86:84:72:50:cb:f1:37:2c:2e:64:a2:db:f7:
d3:8f:62:86:a2:7b:eb:c4:89:e0:7a:49:a0:0b:c9:
bf:16:72:8c:42:47:59:3c:7f:67:d9:d8:49:b1:cc:
fd:4f:e6:b9:bf:f3:54:05:3e:05:00:79:96:00:ec:
02:80:14:0e:b2:ce:e6:85:80:3d:6e:7a:f8:7d:46:
57:65:9e:5b:20:5b:54:49:3f:a9:e3:b4:db:dc:c9:
7a:84:bf:05:23:8d:e0:f1:29:87:d8:f3:36:b1:66:
d8:8b:da:f0:c5:07:d0:65:d1:80:b6:3d:d0:6c:9f:
79:ef:6a:59:ff:75:80:17:db:27:37:de:7f:88:b8:
29:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:68:F8:14:E3:B3:36:59:04:F6:D4:F4:28:94:F7:86:A4:43:97
X509v3 Authority Key Identifier:
keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/60DADDDC2D1011EEB32DCB7E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5b:89:3f:a1:ed:cf:67:ef:87:8f:56:75:76:8f:0a:e2:6e:
6b:5d:64:b0:f2:a0:c4:c9:32:57:c0:78:dd:82:f4:f8:10:3e:
23:e1:32:28:d5:75:05:45:59:7f:59:28:11:1b:67:1b:66:31:
e6:e5:80:3e:75:df:31:ea:54:46:af:a7:bb:1d:b9:82:fe:5f:
e2:ad:5e:86:16:e7:1d:74:9d:8e:ca:cc:7a:a6:98:83:b0:d3:
ae:59:e4:37:f1:73:c6:4e:96:52:29:12:ae:2a:e3:5d:4b:d2:
7b:d1:2b:1c:ab:8e:99:6f:38:a0:fc:e7:50:03:2c:ea:6a:b1:
73:b0:4c:04:d0:66:ef:08:e9:f2:f9:9e:29:d6:f1:8d:fc:83:
0f:39:49:1d:77:2d:d8:82:09:9a:de:4b:82:e4:5e:bd:84:64:
d9:0c:2b:1e:89:ca:cb:5b:25:bd:fe:84:43:7c:c4:4a:a0:31:
e9:03:fd:cd:16:fb:57:e4:a3:08:d7:6e:bd:12:60:fe:89:72:
b8:f6:c8:94:09:21:64:99:1e:3c:74:c6:a1:00:05:0b:58:70:
d6:ff:9a:64:83:3c:98:a5:eb:12:bd:fb:aa:c6:c2:35:ba:cb:
91:1b:41:d7:2a:82:c0:b1:03:ee:ab:d1:d1:bf:df:7a:c1:07:
d1:c2:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org