Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/FCB145302D0F11EEBB96827D4AD9E6FC.roa
File: FCB145302D0F11EEBB96827D4AD9E6FC.roa (raw, json)
Hash identifier: 33tc5yX6g64ExOZghTBcHb98A8aF0vzzW108xbhSRa8=
Subject key identifier: 2A:69:7F:36:4F:68:88:82:3C:50:42:0F:0A:EF:6E:65:49:65:D4:EE
Certificate issuer: /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial: 0BFB
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/FCB145302D0F11EEBB96827D4AD9E6FC.roa
Signing time: Fri 28 Jul 2023 06:28:38 +0000
ROA not before: Fri 28 Jul 2023 06:28:35 +0000
ROA not after: Wed 27 Jul 2033 06:28:35 +0000
asID: 48063
IP address blocks: 41.191.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 13:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Validity
Not Before: Jul 28 06:28:35 2023 GMT
Not After : Jul 27 06:28:35 2033 GMT
Subject: CN=64c36016-1184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:ab:c5:e0:47:45:f0:53:9d:5d:a3:65:4a:
bb:cf:41:ba:bb:cf:ce:62:79:0f:07:4c:6b:e3:9f:
68:7f:8e:6c:d3:ea:0a:cb:82:dc:46:38:9c:d3:52:
7f:f4:3a:2e:08:96:b1:07:88:b7:f9:0d:4d:48:fa:
5c:8b:32:3a:2e:b4:24:af:d3:9d:dc:b2:58:c7:3c:
6f:7a:a9:22:21:7f:f8:c5:d8:3e:16:09:f2:cc:56:
84:ce:88:c9:74:45:b6:0a:07:65:97:7c:8a:ae:03:
cf:6d:1a:38:ec:e0:05:01:0b:e1:00:e7:e0:d0:56:
3d:95:a1:e4:3c:e1:1a:f1:8b:a7:e2:b7:9e:bb:12:
97:7c:9d:ad:07:d4:2b:6c:27:c4:0f:f7:f4:ac:cd:
b6:f6:fb:d5:bd:24:b4:03:87:f2:9b:03:0b:7b:39:
12:ba:53:bd:d9:8d:4a:4e:5e:cf:38:35:15:2a:0c:
b1:b7:0e:f9:56:4b:c0:52:24:82:10:ee:71:c1:df:
1a:1a:75:99:d1:c3:ba:19:a4:b5:85:06:c6:07:fe:
00:0b:8b:1e:f4:20:ab:d0:d3:47:68:97:56:3e:0b:
92:e2:d1:13:03:c9:f8:71:34:5b:a8:30:43:16:fd:
ee:ce:4f:d8:e3:62:ab:9e:2a:65:a5:6a:a2:18:bc:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:69:7F:36:4F:68:88:82:3C:50:42:0F:0A:EF:6E:65:49:65:D4:EE
X509v3 Authority Key Identifier:
keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/FCB145302D0F11EEBB96827D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.191.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:47:58:09:ea:5d:99:7c:72:e9:d8:78:2f:5f:79:b7:2d:6a:
31:22:84:0e:1b:45:37:3f:2c:77:ed:80:71:fe:89:9f:2e:5c:
c7:0f:bf:0b:3b:5f:ec:50:98:5f:9f:74:22:9e:32:cf:e2:59:
ba:81:7e:78:f2:f7:91:03:0b:86:1f:5b:06:e7:a5:aa:ff:9c:
28:8f:fc:d8:d9:32:ab:05:8e:fc:0b:5d:39:5c:79:14:14:6e:
2e:9b:db:f7:f8:66:ca:a8:9c:41:c5:c2:a2:76:9c:e6:02:4c:
30:3d:9f:ba:25:33:b8:80:5c:c3:31:a9:36:0a:f2:1c:3e:22:
df:49:0e:8e:d5:7a:14:48:49:2b:17:c6:f3:d0:a3:6a:e5:f1:
38:da:2c:fd:c7:0a:cb:03:4b:f6:0b:d7:a6:f6:59:81:af:41:
9c:98:d0:1d:ac:6f:17:74:86:d9:b5:89:98:da:cc:7f:c0:3c:
38:21:7c:c2:13:ee:5a:ed:d1:c2:10:4d:c7:8f:3f:d3:de:b4:
c3:91:2f:f4:a0:4c:a4:3a:6d:ad:32:7e:86:dd:f9:57:2d:fb:
ad:f7:2b:e5:a2:b3:ab:0a:9b:c1:3a:90:fd:92:01:49:41:67:
1a:4c:e9:75:77:7d:01:9e:cc:5d:30:9f:24:65:77:da:17:db:
bf:6e:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org