Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/58A07CBAC99811EE99132662775412E6.roa
File: 58A07CBAC99811EE99132662775412E6.roa (raw, json)
Hash identifier: a1lrvIz0lXyBnhs5gjF48PibouFqhQzjs+gJSJFbPyc=
Subject key identifier: 4F:73:5D:1E:77:7A:38:95:14:97:00:B9:C5:35:3B:2D:98:0A:96:54
Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial: 057D
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/58A07CBAC99811EE99132662775412E6.roa
Signing time: Mon 12 Feb 2024 11:17:45 +0000
ROA not before: Mon 12 Feb 2024 11:17:42 +0000
ROA not after: Wed 12 Feb 2048 11:17:42 +0000
asID: 37098
IP address blocks: 41.77.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 13:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Validity
Not Before: Feb 12 11:17:42 2024 GMT
Not After : Feb 12 11:17:42 2048 GMT
Subject: CN=65c9fe59-d8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:e8:53:02:67:ff:3e:85:a0:99:b6:12:80:
62:b4:59:1a:fc:b5:18:fc:51:1f:6c:06:72:09:eb:
ab:47:d8:07:18:03:15:3b:f7:3b:18:1b:2c:e8:b8:
bd:ea:c0:65:ee:36:20:fb:7a:1b:20:d8:98:28:e1:
2c:4e:71:ea:ba:74:bd:54:82:e0:71:54:74:cb:d5:
17:59:79:5a:f4:60:f4:c5:e1:9e:bb:ba:89:6c:d5:
6e:b6:ea:d3:6e:b9:03:53:b2:c4:0e:84:38:91:2e:
76:32:81:ab:43:d9:91:ca:82:80:f1:77:94:10:98:
de:3b:1d:0c:00:cc:e9:d2:0b:33:6e:09:ef:c8:7f:
c6:4c:c4:02:61:02:a8:42:15:7c:41:00:6c:89:af:
29:7a:76:ea:de:09:dd:96:11:a2:bd:da:b4:88:d0:
6c:bd:22:d3:72:01:3d:56:62:86:9d:ff:95:a4:2c:
e3:cf:11:71:20:d7:a6:35:d8:30:d8:83:d8:74:0c:
07:68:58:39:b0:b2:fc:b9:c6:79:17:50:05:e6:ea:
26:9c:98:e8:75:71:ce:26:a5:89:2c:69:36:63:cb:
b8:95:07:c2:a8:cb:4e:ca:e7:12:4f:f1:ed:9f:1c:
07:34:ed:d5:77:37:ec:1b:08:7e:88:1a:cd:b8:2c:
02:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:73:5D:1E:77:7A:38:95:14:97:00:B9:C5:35:3B:2D:98:0A:96:54
X509v3 Authority Key Identifier:
keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/58A07CBAC99811EE99132662775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.8.0/21
Signature Algorithm: sha256WithRSAEncryption
95:5a:3b:93:17:d1:d9:d5:e7:61:b8:78:7d:eb:01:71:2b:2d:
ef:16:b8:57:ab:2f:7e:c3:ef:fb:a1:ad:ac:c4:1e:f1:7b:a3:
cb:8b:2b:80:8a:3b:db:8e:0a:4e:23:d0:e6:cb:cb:ef:3d:fe:
1f:76:9e:61:f5:8f:83:eb:f3:33:66:e5:d2:3b:26:ad:79:54:
3c:47:c6:f9:76:04:37:89:e5:86:d3:fa:48:c7:b4:ed:b5:00:
d3:02:c9:91:61:49:49:1a:76:53:71:c1:d4:25:41:a6:4e:59:
db:4a:7e:90:f5:85:67:5c:ba:c2:0b:ce:68:9f:00:1c:85:a6:
39:c6:29:de:72:07:23:76:e0:94:53:32:db:9b:40:66:0c:55:
14:3f:4b:1c:cc:d9:c3:da:55:7f:84:d4:6c:a0:03:e2:30:5e:
8d:fd:d7:9e:db:c0:a2:e0:7b:e8:76:b0:2d:04:fd:20:04:cb:
cc:ca:5b:01:95:4b:19:48:c1:55:73:e2:f1:71:61:b9:1a:d2:
f8:fe:6f:91:95:3f:c5:32:57:aa:3a:53:b9:df:62:56:a4:ee:
38:7f:a2:75:a8:7e:29:de:34:34:38:c7:8b:dd:dc:c9:27:02:
6d:47:b2:10:eb:a7:c3:fe:a4:8c:04:b7:db:6d:5a:17:b2:d8:
e0:3c:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 17:31:42 2024 by rpki-client on console-fra.rpki-client.org