Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/A2A280A88A0311EE90F3D23F4AD9E6FC.roa
File: A2A280A88A0311EE90F3D23F4AD9E6FC.roa (raw, json)
Hash identifier: KQ92ZB+aFSF/0imNV0b3hH4QWv88Mu5KgT2sIm+MMSg=
Subject key identifier: 2B:01:C1:1D:67:5E:94:35:E6:0C:D1:55:1D:1F:4E:DF:7D:53:1E:0D
Certificate issuer: /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial: 0C8D
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/A2A280A88A0311EE90F3D23F4AD9E6FC.roa
Signing time: Thu 23 Nov 2023 13:24:31 +0000
ROA not before: Thu 23 Nov 2023 13:24:28 +0000
ROA not after: Tue 22 Nov 2033 13:24:28 +0000
asID: 44691
IP address blocks: 41.191.212.0/22 maxlen: 32
41.242.144.0/21 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 May 2024 07:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Validity
Not Before: Nov 23 13:24:28 2023 GMT
Not After : Nov 22 13:24:28 2033 GMT
Subject: CN=655f528f-a530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:e8:74:b4:2a:cb:45:3d:5d:1c:df:b9:17:
66:35:f8:e2:94:1a:cc:c0:0d:5e:41:56:cb:77:51:
5d:9c:d0:8c:47:45:8d:22:d0:cf:90:79:47:da:9f:
6c:af:34:c9:d1:83:94:84:d9:ae:67:0e:0f:09:da:
1d:db:49:a3:7e:ab:dc:92:26:58:2b:f6:74:c5:cf:
b1:1a:ef:f4:bb:46:de:21:d0:7f:8a:15:e5:b5:1b:
dc:d5:8c:ee:98:3a:34:b4:94:79:55:62:7a:22:e7:
ed:2e:78:b2:37:a8:fd:ca:d8:00:3d:f9:2e:c1:43:
39:85:b5:a0:1e:de:19:9e:86:be:4a:e2:cb:d2:55:
ad:6c:70:29:5b:2f:20:de:99:cc:3e:24:31:f7:f3:
4a:e0:bb:ac:50:48:9a:45:23:7e:21:cc:f8:73:fe:
32:3c:75:76:79:fc:60:b3:f1:7d:4b:ec:31:16:26:
f9:d2:b1:ba:da:4b:b8:e0:9c:5d:d8:82:61:f8:0a:
17:f5:5b:71:9b:0a:c8:68:48:85:5b:92:b6:ca:e4:
bd:48:d2:88:4d:ae:24:79:0f:28:d5:99:de:36:6d:
d3:b6:08:58:46:91:15:c4:c5:20:ec:7e:40:f5:96:
b7:04:2f:ca:6c:62:66:44:09:0e:75:b8:a7:21:4b:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:C1:1D:67:5E:94:35:E6:0C:D1:55:1D:1F:4E:DF:7D:53:1E:0D
X509v3 Authority Key Identifier:
keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/A2A280A88A0311EE90F3D23F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.191.212.0/22
41.242.144.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:86:b4:be:bc:a7:2e:db:00:a2:a9:67:46:a2:47:75:d1:73:
eb:20:58:9b:1f:2b:06:af:4e:cd:3d:84:75:30:e2:24:29:84:
61:7b:7d:f0:d4:2e:a6:2d:24:89:07:2a:1f:14:cb:ea:56:0e:
85:ef:2c:1d:f7:8e:49:41:30:75:b9:9e:f2:b2:d6:8d:da:25:
3a:7d:da:f0:7a:89:c8:b8:e4:24:49:fd:60:f0:a9:6b:8e:60:
6c:26:a9:2f:62:b0:2c:ec:8e:8d:2e:f4:d9:4c:14:1e:7c:9f:
db:2c:dc:a9:57:23:83:e9:a8:8d:76:53:b5:d3:cc:1a:2c:3d:
5f:bd:21:c8:5d:d4:9f:58:1e:75:96:01:44:94:2b:2c:85:57:
a5:8c:c3:dc:25:e5:50:fc:8a:b6:90:01:f1:a1:1c:a7:40:87:
9d:f2:c6:20:26:4b:1a:3b:d2:21:27:a4:3e:87:16:d0:f7:2b:
a2:0a:14:2a:1f:09:4a:62:6a:d8:ff:5e:de:67:06:53:07:7f:
5c:3d:ba:47:e9:8b:40:8c:3c:ba:81:83:de:89:8a:cd:74:c4:
a1:87:10:61:1b:48:ba:63:74:49:5e:35:0a:f1:91:70:9b:3d:
8a:67:9d:64:61:ef:d4:a8:94:84:08:3a:a2:d7:2a:89:8b:0b:
1f:a7:0a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 10:55:45 2024 by rpki-client on console-fra.rpki-client.org