Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/96A3EE4E900D11EE8EFE453CD25BE465.roa
File: 96A3EE4E900D11EE8EFE453CD25BE465.roa (raw, json)
Hash identifier: TmySZVBxgUYl4IqopmCU4i+peT7bbnUafQV7LvKI3Hs=
Subject key identifier: 98:D4:AD:9E:02:8D:15:BC:46:F5:25:9F:CC:86:3D:04:2B:AC:58:40
Certificate issuer: /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial: 0C9D
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/96A3EE4E900D11EE8EFE453CD25BE465.roa
Signing time: Fri 01 Dec 2023 05:50:53 +0000
ROA not before: Fri 01 Dec 2023 05:50:48 +0000
ROA not after: Wed 30 Nov 2033 05:50:48 +0000
asID: 44553
IP address blocks: 41.191.212.0/22 maxlen: 32
41.242.144.0/21 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 May 2024 07:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Validity
Not Before: Dec 1 05:50:48 2023 GMT
Not After : Nov 30 05:50:48 2033 GMT
Subject: CN=6569743d-35a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:dc:5d:94:0a:53:29:80:9a:20:6f:31:fd:
68:5c:c1:29:03:a6:43:f0:4e:3d:a7:10:97:f2:d4:
43:74:c5:aa:96:90:52:4c:d5:1d:0d:74:4a:50:73:
4c:84:f1:99:47:00:4a:00:44:00:2c:1a:50:80:dc:
6d:a5:96:30:54:e6:c2:7d:ff:e4:76:08:66:2e:43:
63:18:6d:ca:b9:6d:1f:37:b3:ba:db:18:54:07:c2:
01:af:17:b3:f9:51:17:42:55:28:5f:b8:f2:99:0b:
c0:b3:04:52:ac:d0:5c:02:67:74:9d:9b:dc:b6:1c:
57:7b:52:be:8e:a5:f3:df:59:d1:49:f0:63:05:a4:
94:aa:88:d3:72:68:b1:04:73:6b:b4:4d:e5:cc:cb:
9f:dc:af:89:07:99:c1:0d:e6:9a:40:d5:e3:1f:d6:
64:ba:2e:51:e0:a7:a0:06:d6:8a:32:2b:16:79:30:
30:8c:54:b8:4c:98:04:c4:10:d3:fd:d1:d1:25:c4:
ac:50:b1:61:ca:c8:13:c7:52:ab:e4:db:33:45:50:
99:0f:73:58:d0:55:df:d0:5a:94:d8:fa:82:f4:92:
fd:a7:86:94:02:0e:9d:f4:29:40:42:42:1d:d0:9b:
2d:d9:0e:3b:0e:41:b9:1d:c7:15:62:9d:4a:13:e9:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:AD:9E:02:8D:15:BC:46:F5:25:9F:CC:86:3D:04:2B:AC:58:40
X509v3 Authority Key Identifier:
keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/96A3EE4E900D11EE8EFE453CD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.191.212.0/22
41.242.144.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:24:67:ef:bb:65:20:3d:78:13:cb:f5:e3:17:67:36:40:3f:
aa:7c:54:40:c4:8b:b1:be:d8:be:64:0b:7d:02:ef:0f:48:d4:
d0:88:15:73:d3:04:95:4b:5a:ac:72:ee:7f:21:57:14:fb:17:
54:3d:6d:fc:d1:bc:c8:51:f3:54:35:cc:5f:e6:7a:1c:dd:ab:
04:5a:a0:38:8e:1a:df:f9:65:51:62:1f:d4:8c:c0:c0:89:c8:
c0:c8:71:c5:4c:4f:eb:78:18:1a:38:66:67:32:6f:e6:84:3c:
da:f2:67:f9:39:8f:e8:6a:55:c2:f3:fe:87:f0:b8:4f:56:96:
bc:7c:b4:b5:44:08:e6:57:56:84:ec:17:27:46:d1:3e:ff:bc:
3f:27:77:d2:bd:5c:7c:02:51:99:b2:26:9a:ec:cf:b1:f1:ab:
d7:3e:80:8c:a9:b4:84:71:6e:d6:69:34:23:51:6e:fe:c9:9d:
79:16:ab:19:ef:b9:f1:6a:50:8f:3e:46:e7:45:a8:bb:0c:06:
88:fc:6d:44:aa:f8:b4:da:6d:f8:fa:3d:76:d3:ab:d1:55:3f:
9d:28:1d:19:0d:17:d3:99:ef:54:7c:dc:40:79:b1:ef:cc:31:
f8:fb:00:50:45:d6:39:71:21:06:16:fc:47:93:97:66:d6:b2:
37:7a:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org