Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/93EE1272C99E11EEA5B9836B775412E6.roa
File: 93EE1272C99E11EEA5B9836B775412E6.roa (raw, json)
Hash identifier: ewvDL1C20bH3RLiknSl+mhKtvzoTvt/lSSJVVwwhiNk=
Subject key identifier: CB:E9:C1:65:B7:5D:CD:7C:69:28:B0:F6:03:46:F9:38:60:7E:A2:DD
Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial: 0597
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/93EE1272C99E11EEA5B9836B775412E6.roa
Signing time: Mon 12 Feb 2024 12:02:22 +0000
ROA not before: Mon 12 Feb 2024 12:02:19 +0000
ROA not after: Wed 12 Feb 2048 12:02:19 +0000
asID: 37098
IP address blocks: 154.66.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 14:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1431 (0x597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Validity
Not Before: Feb 12 12:02:19 2024 GMT
Not After : Feb 12 12:02:19 2048 GMT
Subject: CN=65ca08ce-fe42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:1b:c3:e9:93:87:ff:f3:6e:eb:e7:ec:47:
9a:0b:ae:62:6e:3e:86:3d:53:4a:9a:fc:c7:bd:22:
4c:e2:62:9e:a2:e9:0e:91:70:16:8d:6b:3c:ef:01:
ce:cd:d4:e7:70:92:54:9a:90:db:69:c8:81:d5:31:
f3:6a:e0:9b:d4:e6:0e:f9:c4:2c:b6:39:d3:c0:05:
18:33:63:4c:58:2e:8d:73:07:e3:f5:0f:fb:31:32:
54:56:0a:33:b6:9b:2a:3e:8b:0f:03:6b:72:06:35:
ec:20:4f:06:29:88:cb:e3:f6:6a:d5:ac:18:69:0a:
d8:92:c4:f2:6d:fc:56:a1:01:0c:55:9f:a1:e3:68:
95:a2:67:96:e8:10:15:1d:8d:6b:c4:4e:d6:48:39:
4d:20:4b:78:ee:c8:0d:2e:a8:ed:f7:8e:64:94:c3:
7c:3d:4c:66:8f:9b:8b:0f:bb:da:57:33:65:21:d2:
1f:7d:08:cf:37:ff:6c:ff:08:0d:9b:9f:6e:18:a1:
9e:70:d2:d9:19:5d:fa:da:bc:47:61:81:b3:83:79:
1b:93:cc:e7:44:df:61:f4:31:63:2c:44:74:d2:0f:
74:fa:cb:48:2d:7f:1c:4d:fd:80:90:98:1a:0e:b5:
b7:72:22:5d:6f:f7:ce:c8:43:48:a5:0c:b3:c3:fb:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E9:C1:65:B7:5D:CD:7C:69:28:B0:F6:03:46:F9:38:60:7E:A2:DD
X509v3 Authority Key Identifier:
keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/93EE1272C99E11EEA5B9836B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.126.0/23
Signature Algorithm: sha256WithRSAEncryption
92:a2:2e:57:49:7c:b9:b5:16:b7:eb:0e:52:8b:a6:79:69:1c:
0b:0b:ae:a4:b8:44:ab:0d:92:40:9a:02:7a:9f:ab:52:7e:b5:
d7:af:dd:53:0c:99:f3:6f:46:ec:8c:f7:50:af:72:db:0c:08:
19:27:80:70:41:4e:7d:08:1b:72:66:f2:44:00:d0:2c:83:36:
2a:5e:8c:b8:9f:1f:91:a5:c7:8d:9f:7d:5e:c0:be:06:96:60:
3b:72:53:24:1b:20:ba:ed:da:d4:64:eb:4f:ca:47:60:b7:9d:
f6:5f:e2:5e:c4:3d:9a:58:a3:64:be:4c:9c:f8:85:c6:05:b9:
ed:d5:9a:af:65:55:57:55:0e:74:6d:1c:01:93:db:76:9c:b6:
0a:f0:b8:ed:d6:7b:e6:3a:b1:9c:24:13:b7:eb:af:72:76:ae:
7f:2f:63:23:80:27:5c:2b:38:41:e1:64:84:de:99:b6:5a:ad:
02:fe:b9:93:89:aa:f3:d3:13:d9:9e:9c:06:65:dc:86:50:4e:
b4:6f:50:04:54:85:2f:41:06:fa:d6:92:96:0e:ac:dd:95:72:
00:d9:5e:55:b2:59:c8:99:cc:2f:3b:4e:ee:d9:11:31:85:4d:
c2:9b:58:2a:a2:94:d6:a7:f6:87:a6:fa:a4:39:e2:86:ac:65:
88:c9:7b:06
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMzQTRBRjExMC8GA1UEBRMoM0UwQ0U2M0Q2MDQ1NUJENjVCQUEzMTU0QkU4MTIw
NkM2N0U2OUQ0NDAeFw0yNDAyMTIxMjAyMTlaFw00ODAyMTIxMjAyMTlaMBgxFjAU
BgNVBAMTDTY1Y2EwOGNlLWZlNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEaRvD6ZOH//Nu6+fsR5oLrmJuPoY9U0qa/Me9IkziYp6i6Q6RcBaNazzv
Ac7N1OdwklSakNtpyIHVMfNq4JvU5g75xCy2OdPABRgzY0xYLo1zB+P1D/sxMlRW
CjO2myo+iw8Da3IGNewgTwYpiMvj9mrVrBhpCtiSxPJt/FahAQxVn6HjaJWiZ5bo
EBUdjWvETtZIOU0gS3juyA0uqO33jmSUw3w9TGaPm4sPu9pXM2Uh0h99CM83/2z/
CA2bn24YoZ5w0tkZXfravEdhgbODeRuTzOdE32H0MWMsRHTSD3T6y0gtfxxN/YCQ
mBoOtbdyIl1v987IQ0ilDLPD+xlDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUy+nB
ZbddzXxpKLD2A0b5OGB+ot0wHwYDVR0jBBgwFoAUPgzmPWBFW9ZbqjFUvoEgbGfm
nUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzM0E0LzJFNzQzNzgyQTFBQzExRUE5RkVCQzM3NEY4QUVBMjI4L1Bnem1Q
V0JGVzlaYnFqRlV2b0VnYkdmbW5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Bnem1QV0JGVzlaYnFqRlV2b0VnYkdmbW5VUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzM0E0LzJFNzQzNzgyQTFBQzExRUE5RkVCQzM3NEY4
QUVBMjI4LzkzRUUxMjcyQzk5RTExRUVBNUI5ODM2Qjc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGaQn4wDQYJKoZIhvcNAQEL
BQADggEBAJKiLldJfLm1FrfrDlKLpnlpHAsLrqS4RKsNkkCaAnqfq1J+tdev3VMM
mfNvRuyM91CvctsMCBkngHBBTn0IG3Jm8kQA0CyDNipejLifH5Glx42ffV7AvgaW
YDtyUyQbILrt2tRk60/KR2C3nfZf4l7EPZpYo2S+TJz4hcYFue3Vmq9lVVdVDnRt
HAGT23actgrwuO3We+Y6sZwkE7frr3J2rn8vYyOAJ1wrOEHhZITembZarQL+uZOJ
qvPTE9menAZl3IZQTrRvUARUhS9BBvrWkpYOrN2VcgDZXlWyWciZzC87Tu7ZETGF
TcKbWCqilNan9oem+qQ54oasZYjJewY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org