Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/FA30C8C082FB11EEAE414E7B4AD9E6FC.roa
File: FA30C8C082FB11EEAE414E7B4AD9E6FC.roa (raw, json)
Hash identifier: Kb0H04lqXYH2Qr11B123PgxIL/6VEc/ilAd1TT5SqOM=
Subject key identifier: 67:DB:4E:32:90:53:DE:59:47:09:B7:66:5C:56:1E:EA:7B:1C:87:84
Certificate issuer: /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial: 0C7A
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/FA30C8C082FB11EEAE414E7B4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 14:42:04 +0000
ROA not before: Tue 14 Nov 2023 14:42:01 +0000
ROA not after: Sun 13 Nov 2033 14:42:01 +0000
asID: 45020
IP address blocks: 41.191.214.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 23 Nov 2023 13:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3194 (0xc7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Validity
Not Before: Nov 14 14:42:01 2023 GMT
Not After : Nov 13 14:42:01 2033 GMT
Subject: CN=6553873c-b50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:5c:b1:6d:93:cd:a5:fb:27:0b:6e:24:d0:
6f:89:52:e7:91:51:54:41:d7:f5:f1:b4:fe:d1:4a:
f4:45:b3:1f:51:70:74:69:ad:ef:5a:8f:67:2e:d6:
39:d2:29:90:cf:56:1d:44:db:fe:f4:91:1f:fd:99:
9d:04:28:64:f4:87:1c:cc:d9:66:aa:aa:f0:61:a5:
7d:9f:9b:ea:f9:3b:0c:0e:4d:4f:86:45:09:ad:d6:
28:8e:3b:be:15:54:c9:56:50:73:fe:ee:52:74:90:
3c:3b:56:f6:31:50:a5:dc:f6:1a:c3:8a:0f:8f:86:
7f:86:6f:9c:00:69:15:74:cf:b8:10:05:49:6a:f9:
37:1a:7c:38:15:34:b3:66:89:a6:04:c5:d8:16:76:
e2:53:bf:0f:10:2b:5b:4f:27:61:6e:aa:15:c8:2d:
b3:eb:d3:85:da:ba:5b:76:6d:f5:e6:34:c2:b1:c6:
47:e5:41:00:dd:78:4f:23:f2:d2:9a:55:1b:18:9b:
5e:09:d6:a8:51:f5:34:27:da:62:26:7e:f6:f5:88:
d5:56:b8:45:ac:ed:0e:28:2a:b3:68:bf:75:81:a4:
ec:9c:99:0c:77:cf:bd:c5:55:a1:be:8e:00:bf:b1:
16:85:b2:05:8f:0a:76:d0:4a:80:54:52:aa:e4:47:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DB:4E:32:90:53:DE:59:47:09:B7:66:5C:56:1E:EA:7B:1C:87:84
X509v3 Authority Key Identifier:
keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/FA30C8C082FB11EEAE414E7B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.191.214.0/23
Signature Algorithm: sha256WithRSAEncryption
20:2e:d2:f2:65:2b:9a:2e:23:43:8e:5b:d3:97:b7:93:19:91:
46:56:cf:0b:e2:ec:c8:e3:fd:a5:2d:8e:ea:16:9a:f6:ed:5d:
99:cc:2b:fc:ff:dc:8a:c1:dc:ed:8f:9f:24:45:11:6f:7e:bf:
1c:fa:cf:e1:9c:44:dc:30:e6:d9:d8:46:91:22:e5:0c:c5:3a:
4c:c9:40:36:bd:e5:ec:1f:b2:51:54:b3:22:4d:3d:51:33:12:
74:63:32:a5:74:2d:4f:2f:34:6c:63:c9:72:f7:1a:49:a3:53:
d6:cb:8e:14:57:7d:4c:18:a3:ea:3e:ce:54:dc:f9:e2:4b:1d:
0d:e0:d8:ba:16:75:de:22:51:4b:66:f5:15:30:f7:f7:11:64:
35:74:9d:10:bc:c0:dd:ad:12:92:dd:95:e3:ce:72:6b:e5:c9:
7f:55:0a:cd:9f:a2:74:be:de:f1:3e:81:82:ee:73:2f:a7:7d:
4f:04:e0:d4:fe:89:7b:08:b0:b9:0f:fe:65:a0:fc:2b:37:14:
f0:e0:34:fd:18:fd:28:a7:f6:ad:3e:ef:ea:0c:a9:79:56:9d:
0d:38:7e:b9:f3:d6:74:fb:c6:9f:96:31:68:63:08:b9:c4:fa:
b9:f5:b6:e8:a8:06:52:04:4a:49:09:18:dc:35:05:92:cf:f7:
ce:34:d4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org