Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/591801864F1211EFAC8A2072762E951A.roa
File: 591801864F1211EFAC8A2072762E951A.roa (raw, json)
Hash identifier: WlCI13v5K4PPtfY8+KNaDAvhbT1eYoWqtsZ5syxshYA=
Subject key identifier: 1A:8F:23:6B:92:CC:04:22:D2:2A:2F:DD:DE:11:C3:92:C7:BB:F2:7C
Certificate issuer: /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial: 026D
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/591801864F1211EFAC8A2072762E951A.roa
Signing time: Wed 31 Jul 2024 07:56:10 +0000
ROA not before: Tue 31 Dec 2024 07:56:06 +0000
ROA not after: Mon 31 Mar 2025 07:56:06 +0000
asID: 37558
IP address blocks: 197.215.128.0/19 maxlen: 24
2c0f:3200::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 07:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Validity
Not Before: Dec 31 07:56:06 2024 GMT
Not After : Mar 31 07:56:06 2025 GMT
Subject: CN=66a9ee1a-0f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:26:9e:94:01:f9:0e:bc:8a:e8:4f:04:8b:
61:f0:89:03:4c:e3:78:c9:c4:f0:c9:c5:1d:b7:fc:
3f:39:28:da:c0:ae:68:b7:53:7b:a5:ff:39:72:a7:
f7:dd:b6:3c:5d:9b:ce:a3:2d:56:91:04:cd:59:69:
52:3a:7f:8e:b2:60:6c:1b:13:2c:fe:96:6f:38:fd:
a4:ea:f6:fa:e5:42:bb:58:ba:7b:1a:1d:ff:b8:e8:
85:a3:16:61:12:d7:6e:0e:6f:de:57:13:75:19:38:
4d:9f:e6:51:a2:3a:3c:4c:6f:87:69:30:ae:02:d1:
90:56:64:35:49:e1:47:c4:d1:15:37:c5:ca:9a:58:
06:69:61:9f:d7:8a:4d:4f:3d:b2:b2:7b:3c:19:e5:
de:f0:81:05:0f:74:70:85:bc:09:61:fa:8d:4d:c8:
78:59:f4:dd:1e:7e:da:48:29:e1:62:9f:66:f0:e0:
4a:cb:bf:72:0f:0b:52:b0:b8:bb:e7:1f:c0:ba:f2:
a5:e4:c5:0f:0f:40:6a:a7:5c:2a:9a:1a:fa:85:e0:
4c:75:12:8a:f9:22:77:2b:13:d1:8b:57:bc:bb:a4:
f5:d9:8a:73:e2:d1:54:e0:09:a4:66:07:0d:53:66:
9b:f0:5c:e4:cd:e6:9d:44:17:da:27:44:03:ac:f4:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8F:23:6B:92:CC:04:22:D2:2A:2F:DD:DE:11:C3:92:C7:BB:F2:7C
X509v3 Authority Key Identifier:
keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/591801864F1211EFAC8A2072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.215.128.0/19
IPv6:
2c0f:3200::/32
Signature Algorithm: sha256WithRSAEncryption
2a:64:1f:a9:91:73:83:48:c4:4b:0d:44:e2:5b:1b:62:c3:60:
df:b6:22:b8:a7:69:c8:a3:cb:36:47:11:3e:70:12:03:45:43:
8a:0d:7d:1e:54:40:a4:de:a7:ee:eb:0c:9a:59:0e:b0:8a:d7:
6f:2d:8b:b8:71:05:76:ca:c1:49:2f:0e:16:7b:52:83:67:15:
f7:1b:e5:9b:f6:6f:ed:62:49:b4:f9:b3:1f:ad:8e:ee:fe:81:
1d:55:f8:8e:bc:e5:82:a6:e8:ca:39:f6:d4:76:fc:75:50:6c:
b2:a1:36:f7:46:ae:52:1b:07:56:44:5d:ef:55:2c:61:84:c8:
89:b8:03:5c:92:e3:3c:58:99:4a:cc:23:35:be:c7:93:82:f2:
5e:55:15:62:d9:8b:23:79:91:f1:0c:04:f5:3e:a5:29:95:92:
99:ee:f7:13:84:b1:47:1c:42:c3:74:e3:f5:56:05:42:05:9d:
39:75:e1:f0:68:43:79:6a:bc:3c:a4:27:70:49:5e:bf:29:83:
ae:cb:71:0e:32:1f:99:8f:6b:a7:44:39:67:2e:23:eb:05:f5:
5a:68:d3:82:3e:0d:e6:9f:4e:22:2b:b5:1e:2f:5f:52:c7:16:
10:e0:de:b5:c6:9f:17:13:1a:f0:7a:2b:f5:d8:74:5b:b8:51:
ad:f1:4b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 09:10:19 2024 by rpki-client on console-fra.rpki-client.org